​

Last Updated: September 19, 2026

​

Welcome to cirskin.com. Cirskin is committed to providing a transparent, safe, and respectful shopping experience. By accessing or using this website, creating an account, subscribing to updates, or purchasing products, the consumer agrees to follow and be legally bound by the privacy practices outlined below. If you do not agree, please discontinue the use of these services immediately.

The operational scale and data practices on this platform strictly comply with United States privacy laws (including the California Consumer Privacy Act / CPRA), the European Union & UK General Data Protection Regulation (GDPR), and Google AdSense policies (including the EU User Consent Policy).

​

1. Data Minimization & Financial Integrity

• No Sensitive Identification Request: To minimize the collection of sensitive data and protect user privacy, Cirskin does not require or request a date of birth or formal identification during the checkout process.

• Voluntary Information Sharing: The submission of personal details occurs exclusively and genuinely through voluntary user actions, such as subscribing to membership updates, saving wishlists, or executing a transaction through the secure checkout system.

• Secured Payments & Tokenization: All transactions occur strictly through the authorized, secure on-site checkout interface managed by digital infrastructure partners (such as Wix) and established banking networks. Cirskin only receives tokenized metadata necessary to access, process, and hand-pack physical orders. Full credit card details, financial data, or sensitive identification are never collected, requested, or stored by the artisan inside or outside of this platform.

​

2. Information Collected

​

To safely process transactions and maintain site functionality, the platform may collect the following types of personal data:

• Contact Details: Name, email address, shipping address, and billing address.

• Payment Information: Billing address and tokenized payment metadata processed securely through the payment gateway.

• Order History: Details of the limited artisan soap items purchased.

• Navigational & Device Data: IP address, browser type, device information, and referral URLs.

• Cookies and Tracking Data: Google AdSense identifiers, analytics identifiers, and session tokens.

​

3. How Information is Used and Shared

​

• Fulfillment and Operations: Information is used exclusively to process, fulfill, and hand-pack individual orders. It is utilized to send automated transaction updates or future brand updates (only if the consumer organically chooses to subscribe with explicit consent).

• Site Optimization: Data allows for maintaining website security, preventing fraud, complying with legal financial reporting, displaying advertising through the Google AdSense network, and analyzing anonymized tracking data to measure performance, improve user experience, and understand general customer preferences.

• Trusted Infrastructure Providers: This data is shared only with trusted infrastructure providers necessary for website operations (such as Wix, Stripe, Square, PayPal, USPS, UPS, FedEx, and Google AdSense).

​

4. Cookies, Third-Party Advertising & Google AdSense

​

​

• AdSense Integration: This website integrates Google AdSense to serve advertisements. Google and its third-party vendors use cookies (such as the DoubleClick cookie) to serve personalized or non-personalized ads based on a user's digital footprint.

• Third-Party Collection: Third-party automated advertisers may collect IP addresses, browser types, device info, and ad interactions. Cirskin does not control third-party advertiser data collection, and automated ads do not constitute endorsements by the artisan.

​

Consumer Controls: Preferences can be customized by visiting the Google Ads Settings Page. Users can opt out of third-party behavioral tracking via the About Ads Choices Portal or disable cookies within their browser settings, though doing so may alter the website experience. You can also learn more about managing cookies or opting out by visiting About Cookies at aboutcookies.org or by adjusting your browser settings.

​

5. Global Privacy Rights (GDPR & CCPA/CPRA)

​

• GDPR Compliance (For EU, EEA, and UK Visitors): Personal data is processed under contract necessity (to ship the order), legitimate business interests (website security), and explicit consent (for cookie tracking and newsletter forms). Visitors hold the right to access, correct, restrict, or request the permanent deletion of their personal data, object to data processing, request data portability, and withdraw consent. To exercise these rights, consumers may contact contact@cirskin.com. Because operations are based in the United States, cross-border data transfers are secured using Standard Contractual Clauses (SCCs). A certified consent banner prompts users upon entry, granting the absolute right to refuse non-essential tracking cookies and personalized ads.

• CCPA/CPRA Compliance (For California Residents): California residents possess specific consumer rights regarding their personal information: Right to Know & Access, Right to Delete, and Right to Opt-Out of Sale or Sharing. Utilizing third-party advertising networks like Google AdSense is legally classified as "sharing" data for cross-context behavioral advertising under California law. To stop this tracking, consumers may click the website footer link: "Do Not Sell or Share My Personal Information" or set their browser to broadcast an Opt-Out Preference Signal (such as Global Privacy Control).

​

6. Age Restrictions & Children's Privacy Protection (COPPA)

​

• Adult Eligibility: The website, updates, and digital storefront are intended exclusively for use by individuals who are 18 years of age or older, or the age of majority in their respective jurisdiction. Individuals under the age of 18 are strictly prohibited from purchasing products or subscribing to these systems.

• Children's Privacy Protection (COPPA): In absolute compliance with global data privacy frameworks (including the U.S. Children's Online Privacy Protection Act / COPPA and EU GDPR), Cirskin does not knowingly collect, request, process, or maintain personal or financial information from children under the age of 13.

• Teen Data Protection: Cirskin does not knowingly sell or share the personal or behavioral tracking data of consumers under 16 years of age for cross-contextual advertising networks.

• Data Remediation: If it is discovered that a minor under 18 has submitted unauthorized details or attempted a transaction, immediate operational steps will be taken to cancel the transaction and permanently delete that data from the server logs. Minors may only browse the online catalog for informational purposes under the direct authorization, consent, and immediate supervision of a parent or legal guardian.

​

7. User Representations & Banking Regulations

​

​

• Good-Faith Assumption: Because Cirskin does not verify individual identification at checkout to protect privacy, transactions operate under a standard good-faith assumption that every transaction is lawful and fully authorized.

• Cardholder Warranty: By submitting a payment via credit card, debit card, or any student banking account on this website, the user represents and warrants that they are the legitimate cardholder or have received explicit authorization from their parent or legal guardian to make the purchase, having already cleared all necessary parental, personal, and banking verifications and security platform protocols required to utilize that payment method.

• Exclusion of Liability for Unauthorized Purchases: Cirskin shall not be held liable under any circumstances for unauthorized purchases made by minors, individuals utilizing student banking accounts, family accounts, or anyone using a card without the owner’s consent or parental credentials. Financial and legal responsibility for monitoring card usage, securing banking credentials, protecting bank passwords, and overseeing online transactions remains entirely and exclusively with the financial institutions, the cardholders, and the minor’s parents or legal guardians.

​

8. Cookie Consent & Platform Banner Framework

​

• Mandatory Disclosure Banner: In strict compliance with global data privacy frameworks (including EU GDPR and CCPA/CPRA), a prominent, automated consent banner will prompt every visitor upon entering this website.

• Official Banner Notice: The visual banner shall explicitly display the following text to ensure transparency: "Cirskin utilizes essential cookies to safely process artisanal transactions and integrates third-party automated networks (such as Google AdSense and Wix) to display advertisements and enhance user navigation. By continuing to browse this catalog, the consumer acknowledges and explicitly accepts the data practices outlined within this Privacy Policy. The consumer retains the absolute right to refuse non-essential tracking cookies or personalized ads at any time."

• Consumer Interface Controls: The platform must provide distinct interface buttons allowing the consumer to actively choose between [ Accept All ] or [ Decline Non-Essential ] prior to detailed browsing.

​

9. California Regulatory Footer Link ("Do Not Sell or Share")

​

• Required Consumer Access Link: To satisfy the strict statutory mandates of the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) regarding the automated "sharing" of data for cross-context behavioral advertising via Google AdSense, a permanent, visible text link is embedded within the absolute footer of this website.

• Official Technical Anchor: The footer link shall display the precise legal text: "Do Not Sell or Share My Personal Information". Clicking this anchor will immediately redirect the consumer to the active privacy management portal or automatically signal the underlying infrastructure platform to restrict external tracking cookies for that specific user session.

​

10. Binding Checkout Affirmation & Mandatory Consent Box

​

• Pre-Transaction Legal Validation: To establish undisputed legal validity during payment gateway processing and to prevent fraudulent disputes, unauthorized student banking usage, or late chargebacks, the digital storefront enforces a strict verification mechanism at checkout.

• Mandatory Checkbox Mandate: The consumer is strictly required to check an empty, non-pre-selected verification box before the platform permits them to click "Place Order" or "Buy Now".

• Official Checkout Text: The text bound to this mandatory validation box shall read exactly as follows: "[ ] By checking this box and finalizing this transaction, the consumer represents and warrants that they are of legal age to execute a purchase, and explicitly declares that they have fully read, understood, and voluntarily accepted the complete Terms, Conditions, Safety Warnings, Weight Policies, and Privacy Policies of Cirskin with absolute and irrevocable consent."

​

11. Contact Information

​

• Official Contact Channel: For any questions, clarifications, or claims regarding these terms or data privacy requests, inquiries must be directed via email to: contact@cirskin.com.