Legal

Privacy Policy

Effective date: October 31, 2026

This Privacy Policy explains how SoCal Cosmetics (“SoCal Cosmetics”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you visit socalcosmetics.com (the “Site”), submit a manufacturing inquiry, or otherwise communicate with us. It also explains the choices and rights available to you.

1. Who we are

SoCal Cosmetics is a business-to-business contract and private-label cosmetic manufacturer. We are the business responsible for (the “controller” or “data controller” of) the personal information described in this policy. Our principal office is at 1309 Coffeen Avenue, Ste 2379, Sheridan, WY 82801, United States. We operate manufacturing facilities in Vernon, California, United States, and Kampala, Uganda.

2. Scope of this policy

This policy applies to personal information we collect through the Site, through our inquiry forms, and through related business communications such as email and telephone. Our services are offered to businesses. The people whose information we collect are usually founders, employees or representatives of brands, retailers and other organizations. This policy does not cover information we process on behalf of clients under a manufacturing agreement, which is governed by that agreement.

3. Information we collect

Information you provide to us

Contact and identity details: full name, business email address, phone number, company or brand name, company website, country and city.
Professional and business information: type of business, whether you are an existing brand or a startup, and how long your brand has been operating.
Project information: products and ingredients of interest, manufacturing services required, estimated quantities, packaging preferences, launch timelines, and any project details, questions or files you choose to share.
Communications: the content of emails, calls and other correspondence with us.

Please do not submit sensitive personal information (for example, health, financial account or government identification information) or confidential formulas through the Site. If your project involves confidential information, we are happy to enter into a non-disclosure agreement first.

Information collected automatically

Technical and log data: when you use the Site, our servers and hosting provider automatically record information such as your IP address, browser type and version (user-agent), the pages you request, and the date and time of each request. When you submit a form, we record the submission time, the page it was sent from and your browser’s user-agent. We use your IP address briefly to prevent spam and abuse.
Inquiry list (local storage): products you add to your inquiry list are stored only in your own browser’s local storage. They are sent to us only if you submit a form.

We do not use advertising cookies, cross-site tracking technologies or third-party analytics on the Site.

Information from other sources

To evaluate and respond to an inquiry, we may review publicly available information about your company, such as its website and public business listings.

4. How we use information

To respond to your inquiry, prepare quotations and discuss potential manufacturing projects with you.
To enter into and perform agreements with our clients, and to manage our business relationship.
To communicate with you about your inquiry or project, including follow-up communications you would reasonably expect.
To operate, maintain, secure and improve the Site, and to detect and prevent spam, fraud and abuse.
To keep business records and comply with legal, tax, accounting and regulatory obligations.
To establish, exercise or defend legal claims.

We do not use your information for automated decision-making that produces legal or similarly significant effects about you, and we do not sell it.

5. Legal bases for processing

Where the law requires a legal basis for processing personal information (for example, in Uganda, the EEA and the UK), we rely on:

Steps prior to entering into a contract, and performance of a contract: to respond to your inquiry and to manage projects you engage us for.
Legitimate interests: to run and secure our business and the Site, communicate with business contacts, and keep records. We only rely on legitimate interests where they are not overridden by your rights and interests.
Consent: when you tick the consent box on our forms. You may withdraw consent at any time by contacting us. Withdrawal does not affect processing that took place before you withdrew.
Legal obligation: where processing is required to comply with the law.

We share personal information only as described below:

Within SoCal Cosmetics: with our teams at our principal office and our manufacturing facilities in Vernon, California and Kampala, Uganda, to evaluate and carry out your project.
Service providers (processors): companies that provide services to us under instructions and confidentiality obligations. These include website hosting, email forwarding and delivery of inquiry notifications (Google Workspace), email and business software, and, where used, customer-relationship-management or workflow tools.
Professional advisers: lawyers, accountants and auditors, under duties of confidentiality.
Legal and safety: where required by law, court order or governmental request, or where necessary to protect the rights, property or safety of SoCal Cosmetics, our clients or others.
Business transfers: in connection with a merger, acquisition, financing or sale of all or part of our business, subject to appropriate confidentiality protections.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months.

7. International transfers

We operate in the United States and Uganda, and our service providers may process information in other countries. Your information may therefore be transferred to, and stored in, countries whose data protection laws differ from those of your country. Where required, we put appropriate safeguards in place for these transfers, such as contractual protections (including standard contractual clauses where applicable), and transfer information only where the destination provides an adequate level of protection or the transfer is otherwise permitted by law.

8. Data retention

Inquiries that do not lead to an engagement: kept for up to 24 months after our last communication with you, then deleted or anonymized.
Client records: kept for the duration of our business relationship and afterwards for as long as needed to meet legal, tax, accounting and product-record obligations, and to establish or defend legal claims (generally up to 7 years after the relationship ends, unless a longer period is required by law).
Technical logs: kept for a limited period for security purposes, typically no longer than 90 days.

9. Security

We use reasonable administrative, technical and physical safeguards designed to protect personal information, including encrypted (HTTPS) transmission, access restrictions and spam protection. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities where the law requires.

10. Your privacy rights

Depending on where you live, you may have some or all of the following rights:

to know about, and access, the personal information we hold about you;
to correct inaccurate information;
to request deletion of your information;
to receive your information in a portable format;
to object to, or ask us to restrict, certain processing;
to withdraw consent where we rely on it;
to opt out of the sale or sharing of personal information (we do not sell or share it); and
to complain to a data protection authority.

To exercise a right, email contact@socalcosmetics.com or call (229) 635-6011. We will verify your request by matching the information you provide with our records (for example, by confirming your email address), and we will respond within the time the law requires. We will not discriminate against you for exercising your rights. You may use an authorized agent, and we may ask for proof of the agent’s authority and verify your identity directly. If we deny a request, you may appeal by replying to our decision with the subject line “Privacy appeal”.

These rights apply to residents of US states with comprehensive privacy laws, to the extent those laws apply to us and to information collected in a business context.

11. California privacy notice

This section applies to California residents and supplements this policy where the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to us. In the past 12 months we have collected the following categories of personal information:

Category	Examples	Disclosed for a business purpose to
Identifiers	Name, email address, phone number, IP address	Service providers (hosting, email forwarding and delivery)
Customer records	Name, phone number, business contact details	Service providers
Professional or employment-related information	Company, business type, brand stage	Service providers
Commercial information	Products, services, quantities and timelines of interest	Service providers
Internet or electronic network activity	Browser type, pages requested, submission time	Hosting provider
Geolocation (general)	City and country you provide	Service providers

Sources: directly from you, automatically from your device, and from publicly available sources. Purposes: as described in section 4. Retention: as described in section 8.

We do not collect sensitive personal information for the purpose of inferring characteristics, and we do not sell or share personal information, including that of consumers under 16. We treat a Global Privacy Control signal as a valid request to opt out of sale or sharing. California residents may exercise the rights in section 10, including the rights to know, delete and correct, and the right to non-discrimination.

12. Uganda

For personal information processed in Uganda, or relating to people in Uganda, we process information in accordance with the Data Protection and Privacy Act, 2019 and its regulations. You may request access to your information, ask us to correct or delete it, and object to processing, as provided by that law. If you are not satisfied with our response, you may complain to the Personal Data Protection Office (PDPO) of Uganda.

13. EEA, UK and Switzerland

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the rights described in section 10, and you may lodge a complaint with your local data protection supervisory authority. Transfers of your information outside your region are protected as described in section 7.

14. Cookies and local storage

The Site does not set advertising or analytics cookies. It uses your browser’s local storage only to remember the products you add to your inquiry list, a feature you choose to use and that is necessary for that functionality. You can clear this at any time through your browser settings or by removing items from your list. Our hosting provider may use strictly necessary technical mechanisms to deliver the Site securely. We do not respond to “Do Not Track” browser signals because we do not track you across sites.

15. Children

The Site and our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

16. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new effective date, and where changes are material we will take reasonable steps to let you know.

17. Contact us

For questions about this policy or our privacy practices, or to exercise your rights, contact:

SoCal Cosmetics
Attn: Privacy
1309 Coffeen Avenue, Ste 2379, Sheridan, WY 82801, United States
Email: contact@socalcosmetics.com
Phone: (229) 635-6011