Privacy policy

Last Updated: [11.18.2025]

This Privacy Policy describes how Tata’s Natural Alchemy, LLC (“TNA”, “us”, “we”, or “our”) collect, use, store, and share your information when:

• You use our websites and applications where this Privacy Policy is posted, or other digital properties that are owned and operated by TNA, including but not limited to www.tataharperskincare.com and global.tataharperskincare.com (collectively, “Sites”);
• You communicate with us, whether online or offline (“Communications”);
• You purchase our products (“Products”); and
• When we engage with certain third-party partners, service providers, and vendors (“Third Parties”).

The data controller for the purposes of this Privacy Policy is Tata’s Natural Alchemy, LLC, 1136 Wooster Road, Whiting, VT 05778. If you have any questions or complaints in relation to our collection and use of your information, or if you would like to receive more information about how we process your information, please contact us via e-mail at privacy@tataharper.com. This Privacy Notice does not override any specific contracts agreed to by us and third parties, and relationships may be governed by further privacy notices.

Acknowledgment

Please read this Privacy Policy carefully. Please note that our practices and your choices may vary by region.

BY USING OUR SITES, COMMUNICATING WITH US, AND/OR USING OUR SERVICES, YOU REPRESENT THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY. 

What Information Do We Collect About You, How Do We Collect It, How Do We Use It, and What Is Our Legal Basis For Using It?

Depending on the nature of how you use our Site, Communicate with us, purchase our Products, or how we may use and engage with certain Third Parties, the following is a list of types of information we may collect from or about you (some of which may be considered sensitive personal information under applicable laws), how we go about collecting it, how we use it, and what our legal basis is for using it:

Type of information	How We Collect It	How We Use It	Legal Basis For Use
Personal identifiers, including: Name E-mail address Telephone number Mailing address Date of birth Search history on our Sites Geolocation information Payment details, including credit card information. Order tracking number. Information you provide to us in response to surveys and contests History of your purchases with us	Directly from you when you use our Sites, purchase our Products, or Communicate with us. From our Third Party service providers and vendors, including payment processors.	To complete a transaction with you. To facilitate your use of our Sites and access to our Products. To process your customer service requests. To respond to your inquiries. To administer your account and provide the Sites and Services to you. To market our Products and Sites to you. Publish your product reviews Chat with you or answer your questions Comply with applicable legal requirements, applicable industry standards and our policies	Consent To complete a transaction To further our legitimate interests of improving our Sites and Products, maintaining a secure experience, and maintaining adequate business administration.
Machine or device information, including: Device and browser information. Internet service provider or mobile carrier. Referring and exit pages. Date and time stamps. Clickstream data (including page clicks and scrolls). Location (for access and use verification). IP address and device ID.	Automatically from your device when you use our Sites or purchase our Products. From Third Parties, including service providers and vendors.	Analytical and statistical purposes for improvement of our Sites and Products. Maintaining and ensuring a secure online environment on our Sites and for the delivery of our Products. Facilitating support services. Customizing your experience of our Sites. To administer your account and provide the Sites and Products to you.	Consent To complete a transaction To further our legitimate interests of improving our Sites and Products, maintaining a secure experience, and maintaining adequate business administration.

 

We may also use your information, from time to time, to comply with a legal obligation, act in the public interest, and/or protect the vital interests of our customers and employees by:

• Preventing and responding to abuse and fraud;
• Preventing and responding to illegal activity;
• Preventing and responding to other harmful content distributed through our Site;
• Prevent the unlawful use and/or selling of our Products; and
• Enforcing our terms, conditions, and policies.

Note that while some of the personal information that we collect about you may be considered sensitive personal information, we process such information for only those purposes detailed in this Privacy Policy and as authorized by law. For example, we might process your sensitive personal information in order to provide the Services you request from us. We will ask for your consent to process your sensitive personal information where required by law.

We may aggregate or de-identify the information described in this section.  Aggregated or de-identified data is not subject to this Privacy Policy.

Who Do We Share Your Information With?

To the extent applicable, we will disclose or share your information in the following circumstances:

• With Our Affiliates. We may, from time to time, disclose your information to our affiliates, such as Amorepacific US, Inc., Amorepacific Corporation, Amorepacific Group, and their subsidiaries and affiliates, for organizational purposes based on a legitimate interest.
• With Authorized Third-Party Vendors and Service Providers. We may share your information with certain Third Parties, such as business partners, advertising networks, data analytics providers, online and offline data collectors, operating systems and platforms, and service providers who provide us a service (e.g., credit / debit card processing, billing, customer service, auditing, marketing, debugging to identify and repair error and/or protecting against malicious, deceptive, fraudulent, or illegal activity). We will not share your opt-in to an SMS campaign with any Third Party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with Third Parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.
• Business Transfers. We may transfer your information as part of a corporate business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which to any successor or to any person or entity that acquires ownership or control of the Site and/or Products. This may occur in the event of a merger, acquisition, bankruptcy or other sale of all or a portion of TNA’s assets. Other than to the extent ordered by a bankruptcy or other court proceeding, the use and disclosure of all transferred information will be subject to this Privacy Policy, unless provided otherwise.
• By Law Or To Protect Rights. We may share your information to satisfy any law, regulation, legal process, governmental request, or where we have a good belief that access, use, preservation or disclosure of such information is reasonably necessary to: (1) enforce or apply agreements; (2) protect our rights or interests, property or safety or that of others; (3) in connection with claims, disputes, or litigation (in court or elsewhere); or (4) protect users of our Site. 
  If you access third-party services – such as social media services, third-party single-sign on tools, mobile platforms for in-app purchases – through the Services, these third-party services may be able to collect information about you, including information about your activity on the Services, and they may notify your connections on the third-party services about your use of the Services, in accordance with their own privacy policies.

Do We Transfer Your Information to Other Countries?

The information we collect from and/or about you may be stored on servers and with Third Parties in the United States (where we are headquartered), South Korea, or other countries. Those countries may not have the same data protection laws as your country of residence, but we take reasonable measures to protect personal information in transmitting, retaining and processing the information as described in this Privacy Policy.   By accessing our Services, or otherwise providing information to us, you expressly consent to the processing, transfer and storage of information in and to the United States and other countries as described herein.

How Do We Store & Protect Your Information?

Although no system can guarantee the complete security of your information, we take all commercially reasonable steps, appropriate to the nature of information at issue, to ensure your information is subject to appropriate organizational, technical, and physical safeguards in alignment with all applicable laws and regulations. 

How Long Do We Keep Your Information?

We keep your information for as long as necessary in accordance with the purposes for which it was collected, our business needs, and our legal and regulatory obligations. If we dispose of your information, we will do so in a way that is secure and appropriate to the nature of the information subject to disposal, consistent with all applicable laws and regulations. However, the transmission of information via the Internet cannot be completely secure and we cannot guarantee the privacy or security of your data transmitted to our Services. Any transmission of your personal information is at your own risk. Additionally, if you create an account with our Services, you are responsible for maintaining the security of your password at all times.

Links To Other Sites

We may, from time to time, offer links to other websites from our Site. These third parties may have terms of use and privacy policies that are different than ours. We recommend you review such site’s terms of use and privacy policies prior to use or submitting any information to them. We cannot verify, warrant, endorse or take responsibility for the availability, accuracy, completeness, quality, practices, or policies of such sites or content available from such sites. We do not make any representations or warranties as to the security of any information (including, without limitation, credit card and other personal information) you might be requested to give any third party.

Payment Information

When you purchase our Products, any credit card information you provide as part of your payment is collected and processed directly by our payment processor(s). We do not receive or store your credit card information. We commit to working with payment processor(s) who align their practices with the Payment Card Industry Data Security Standard (PCI-DSS) and other industry standard security. To learn more about our payment processor(s), please Contact Us.

Cookies, Advertising, & Tracking

Cookies.  When you use our Services, we and our third-party advertising partners use cookies, pixel tags, local storage, and other similar technologies (collectively, “cookies”) to collect information from your browser or device. Your use of the Services constitutes your consent to the use of these cookies.

What is a cookie?
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

The following types of cookies are used on our Services:

• Strictly Necessary Cookies – These cookies are necessary for the Services to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for our Services, such as setting your privacy preferences, logging in, or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the Services will not then work.
• Performance Cookies – These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. For example, use session replay technology to help us understand how users interact with our Website and to improve their experience.
• Functional Cookies – These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by Third Party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
• Targeting Cookies – These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites.

For the exhaustive list of cookies we collect, see the List of Cookies We Collect section at the end of this Privacy Policy.

How we use cookies
There are different types of cookies, 1st party cookies facilitate the direct use of our website such as remembering what is in your shopping cart while your shop. A persistent 1st party cookie will also help you stay logged into your account and remember your preferences. 3rd party cookies are a way we can collect anonymous data with our partners to improve your experience on our website by learning about your preferred shopping experience. Many of those cookies are “session” cookies which only last as long as you are on our website.

We use traffic log cookies to identify which pages are being used. This helps us analyze data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system. We also use cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart, and this information is used to determine when to send cart reminder messages via email or SMS.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website or the cookies contained on that site. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Opting out of Cookies

You can opt out of having your personal information used or disclosed via cookies and similar technologies for the purposes set forth in this Privacy Policy by clicking Manage Cookies at the footer of our Site . Your opt-out choice will be linked to your browser only; therefore, you will need to renew your opt-out choice if you visit our website from a new device or browser, or if you clear your browser’s cookies. If you choose to refuse, disable, or delete these technologies, some of the functionality of the Services may no longer be available to you. Deleting cookies may in some cases cancel the opt-out selection in your browser.

Clear GIFs: We and our third-party service providers may collect information from you using clear GIFs, such as pixels, tags and web beacons. These are tiny electronic images that may be used on our website or emails and help deliver cookies, visit counts, and understand usage and campaign effectiveness. We may also use clear GIFs to understand whether our emails are read or opened. We use learning from this information to improve our messages, reduce frequency of messages to you or determine interest in content we share.

Advertising partners. We may work with advertising partners that use cookies, pixel tags and other tracking technologies to serve advertisements on behalf of their retail clients (like Tata Harper), across the internet, including to you after you have visited our website. These advertising partners may engage in remarketing, online behavioral advertising and ad delivery and reporting. With respect to Tata Harper, these advertising partners may collect anonymous information about your browser as it makes visits to websites across the internet and your interaction with our advertising and email communications, which information may also be used to tailor advertising for you and others elsewhere on the internet. 

Other Technologies. We may utilize new technologies as they are developed in a manner that is consistent with this Privacy Policy and industry standards.

Your Choices

Depending on where you reside, you may have the rights and choices described below regarding our processing of your personal information, subject to certain exceptions. To exercise any of the rights described below, send your request to privacy@tataharper.com or visit our Privacy Center. We will respond to your request as soon as possible and in accordance with all applicable laws and regulations.
You may submit your request directly, or through an authorized agent, subject to additional verification of your identity and/or the agent’s authorization. To protect your identity, we may also use reasonable efforts, consistent with applicable law, to verify your identity before responding to your request. We reserve the right to deny requests in certain circumstances, such as where we have a reasonable belief that the request is fraudulent, where your identity cannot be confirmed, or where we must maintain your personal information consistent with applicable law.

• Correct Your Information. Depending on where you live, if you believe we have incorrect or inaccurate information about you, you may have the right to request that we update or correct the information we collect from and about you.
• Access Your Information. Depending on where you live, you may have a right to know what information we have collected about or from you, how that information is being used, and with whom it is being shared. Depending on where you live, you may also be entitled to receive a copy of your information.
• Delete Your Information. Depending on where you live, and subject to certain exceptions recognized by applicable law, you may have a right to ask that we delete your information.
• Object to Certain Uses. Depending on where you live, you may have the right to object to our processing of your information when we do so: (1) for our legitimate interests, as described above; (2) for direct marketing; and (3) for statistical purposes.
• Withdraw Consent. You may withdraw your consent at any time.
• Control Cookies Through Your Browsers. You may be able to disable and manage some cookies through your browser settings. If you use multiple browsers on the same device, you will need to manage your settings for each browser.
• Analytics Provider Opt-Outs. To disable analytics cookies, you can use the browser controls discussed above or, for some of our providers (e.g. Google), you can use their individual opt-out mechanisms.
• Email Opt-Out. If at any time you wish to opt out or "unsubscribe" from receiving commercial emails related to our Site or Services, you may use the unsubscribe link at the bottom of each commercial email you receive. Please note that even if you opt out of receiving commercial emails from us, we may need to retain limited information about you in order to fulfill any order requests made by you, for business, tax, retention and litigation purposes or to fulfill other legal or regulatory obligations. Please allow up to 10 business days to process marketing email opt out/unsubscribe requests
• SMS Opt-Out: To the extent you are receiving text messages us, you may opt out of receiving text messaging by replying to any message we send you with the word “STOP” or contacting us at privacy@tataharper.com. Please note that while text messaging opt out/unsubscribe requests are processed immediately upon our receipt, we are not responsible for any carrier delays. Carriers are not liable for delayed or undelivered messages.
• Non-Discrimination. We will not discriminate against you for exercising your rights and choices, although some functionality and features available to you may change or no longer be available to you.

Our Site supports the Global Privacy Control (“GPC”), which is a browser-based opt-out preference signal that can communicate your privacy preferences to the websites you visit. You can learn more about the Global Privacy Control here. Please note that because the Global Privacy Control is a browser-based mechanism, your opt-out preference will apply only to the browser from which you exercised that choice.

If you have questions or complaints about how we’ve handled your information, or responded to any requests above, please contact us below. You also have the right, depending on where you live, to file a complaint with any competent data protection authority, regulator, or governmental agency, where appropriate.

Notice of Financial Incentive
Some of our programs may offer discounts or other value to customers that voluntarily participate and involve the collection and sharing of personal information as described in this privacy notice. Based on our reasonable and good faith estimate, personal information we collect through such programs do not have monetary value. We receive value from such programs in increased customer loyalty and patronage. We currently provide financial incentives when you sign up for texts, rewards through our loyalty program, or otherwise by subscribing to our emails and texts. Please know, these financial incentives involve the use of personal information for targeted advertising purposes, but participation in our loyalty programs is voluntary and you can withdraw at any time. 

Our discount program is based upon our reasonable but sole determination of the estimated value of the personal information California residents provide, which takes into consideration, without limitation, estimates regarding the anticipated revenue generated from such information, the anticipated expenses which might be incurred in the collection, storage, and use of such information in the operation of our business, and other relevant factors related to the estimated value of such information to our business, as permitted under applicable law.

By providing your personal information when signing-up for a discount, you are affirmatively opting-in to our incentive program. If you wish to withdraw from our incentive program, you may submit such a request by sending an e-mail to privacy@tataharper.com before completing your order.

Notice of Sale

While Tata Harper does not “sell” or “share” personal information in exchange for any monetary consideration, we do share personal information for other benefits that could be deemed a “sale” as defined by the CCPA (Cal. Civ. Code 1798.140(t)(1)). You have the right to direct us note to “sell” or “share” your personal information to Third Parties, including “sales” or “sharing” of personal information for targeted advertising purposes now or in the future. If you would like to exercise your right to request opt-out of sale, please submit an email to privacy@tataharper.com. 

Automated Decision-Making and Profiling

Automated decision-making implies making a decision using automated means without human involvement. Profiling is a form of automated processing of personal data consisting of the use of personal data to evaluate certain personal characteristics of an individual for the purpose of analyzing or predicting, for example, that individual’s personal preferences, interests, likely behavior, etc.

As you have read in this Privacy Policy, we collect a variety of types of personal data both from you and from other commercially available sources. This data may be combined and analyzed, including sometimes using algorithms, to identify links between certain behaviors and personal characteristics. This process allows us to customize our communications to your declared or inferred interests. 

However, we do not conduct any automated decision-making processes, including profiling, that can produce legal effects or that can similarly significantly affect your rights and freedoms, as per Art. 22(1) and (4) of the GDPR and, should we want to engage in more intrusive profiling and tracking practices, we will always inform you and, where legally required, ask for your consent before doing so or provide you with the right to opt-out.

Other California Rights

California residents who provide certain personal information in connection with obtaining products or services for personal, family, or household use are entitled to request and obtain from us once a calendar year information about the customer information we disclosed, if any, with other businesses for their own direct marketing purposes. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we disclosed customer information for the immediately prior calendar year. 

Do Not Track

Our Site may, from time to time, collect information about your online activities, over time and across different sites and applications. When you use our Site, Third Parties may also collect information about your online activities, over time and across different websites, online or cloud computing services, online applications, or mobile applications. Some browsers support a “Do Not Track” feature, which is intended to be a signal to websites that you do not wish to be tracked across different websites you visit. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. Our Site currently does not change the way it operates based upon a “Do Not Track” or similar signal. You may, however, disable certain tracking as discussed in Your Choices section. 

Children

Our Site is not intended for individuals under the age of 18. We do not knowingly collect or use any information from individuals under the age of 18. If you are a parent or guardian who has discovered that your child under the age of 18 has submitted his or her information without your permission or consent, you can ask us to remove your child’s information by contacting us at privacy@tataharper.com.  

Changes

We may change this Privacy Policy from time to time. Any and all changes will be reflected on this page, and where appropriate and consistent with applicable law and regulation, provided to you in person or by another electronic method such as sending a notice to the primary email address specified in your account or by placing a prominent notice on the Services. The effective and last updated date will be stated at the top of this Privacy Policy. You should regularly check this page for any changes to this Privacy Policy. 

Consumers With Disabilities

To request a copy of this Privacy Policy in an alternative format, please contact us at the information provided below.

Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Tata’s Natural Alchemy, LLC
1407 Broadway
New York, NY 10018
privacy@tataharper.com

Right to Lodge Complaints
If you are a European Resident and have a concern about how we process personal data that we are not able to resolve, you have the right to lodge a complaint with the data privacy authority where you live. Contact details of your relevant local Data Protection Authority may be found using the links below:
•    For individuals in the EEA
•    For individuals in the UK
•    For individuals in Switzerland

List of cookies we collect

The table below lists the cookies we collect and what information they store.

	Essential Cookies
Name	Description	Category
_orig_referrer	This cookie is generally provided by Shopify and is used to track landing pages.	Essential
_landing_page	This cookie is generally provided by Shopify and is used to track landing pages.	Essential
_ab	This cookie is generally provided by Shopify and is used in connection with access to the admin view of an online store platform.	Essential
_secure_session_id	This cookie is generally provided by Shopify and is used to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected.	Essential
cart	This cookie is generally provided by Shopify and is used in connection with a shopping cart.	Essential
cart_sig	This cookie is generally provided by Shopify and is used in connection with checkout. It is used to verify the integrity of the cart and to ensure performance of some cart operations.	Essential
cart_ts	This cookie is generally provided by Shopify and is used in connection with checkout.	Essential
cart_ver	This cookie is generally provided by Shopify and is used in connection with the shopping cart.	Essential
cart_currency	This cookie is generally provided by Shopify and it is set after a checkout is completed to ensure that new carts are in the same currency as the last checkout.	Essential
checkout_token	This cookie is generally provided by Shopify and is used in connection with a checkout service.	Essential
storefront_digest	This cookie is generally provided by Shopify and it stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.	Essential
cookieconsent_status	This cookie is associated with the app GDPR/CCPA + Cookie Management and is used for storing the customer's consent.	Essential
cookieconsent_preferences_disabled	This cookie is associated with the app GDPR/CCPA + Cookie Management and is used for storing the customer's consent.	Essential
_shopify_m	This cookie is generally provided by Shopify and is used for managing customer privacy settings.	Essential
_shopify_tm	This cookie is generally provided by Shopify and is used for managing customer privacy settings.	Essential
_shopify_tw	This cookie is generally provided by Shopify and is used for managing customer privacy settings.	Essential
_tracking_consent	This cookie is generally provided by Shopify and is used to store a user's preferences if a merchant has set up privacy rules in the visitor's region.	Essential
tracked_start_checkout	This cookie is generally provided by Shopify and is used in connection with checkout.	Essential

	Reporting and Analytics Cookies
Name	Description	Category
_s	This cookie is associated with Shopify's analytics suite.	Reporting and Analytics
_shopify_fs	This cookie is associated with Shopify's analytics suite.	Reporting and Analytics
_shopify_s	This cookie is associated with Shopify's analytics suite.	Reporting and Analytics
_shopify_sa_t	This cookie is associated with Shopify's analytics suite concerning marketing and referrals.	Reporting and Analytics
_shopify_sa_p	This cookie is associated with Shopify's analytics suite concerning marketing and referrals.	Reporting and Analytics
_shopify_y	This cookie is associated with Shopify's analytics suite.	Reporting and Analytics
_y	This cookie is associated with Shopify's analytics suite.	Reporting and Analytics
_ga	This cookie name is associated with Google Universal Analytics	Reporting and Analytics
_gat	This cookie name is associated with Google Universal Analytics	Reporting and Analytics
_s	This cookie is associated with Shopify's analytics suite.	Reporting and Analytics
ometria	Used to track user interactions, browsing behavior, and session data to improve customer experience and support data-driven marketing analysis.	Reporting and Analytics

	Marketing And Retargeting Cookies
Name	Description	Category
IDE	This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange	Marketing And Retargeting
GPS	This cookie is associated with YouTube which collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.	Marketing and Retargeting
PREF	This cookie, which may be set by Google or Doubleclick, may be used by advertising partners to build a profile of interests to show relevant ads on other sites.	Marketing and Retargeting
BizoID	This is a Microsoft MSN 1st party cookie to enable user-based content.	Marketing and Retargeting
_fbp	Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.	Marketing and Retargeting
__adroll	This cookie is associated with AdRoll	Marketing and Retargeting
__adroll_v4	This cookie is associated with AdRoll	Marketing and Retargeting
__adroll_fpc	This cookie is associated with AdRoll	Marketing and Retargeting
__ar_v4	This cookie is associated with AdRoll	Marketing and Retargeting

	Functional Cookies
Name	Description	Category
_gid	This cookie name is associated with Google Universal Analytics	Functional