Privacy Policy

This Privacy Policy explains how Skin&Say ("we", "us", or "our") collects, uses, and shares information when you visit midway.example (the "Site") or interact with our content, mailing list, and forthcoming recommendation tool (collectively, the "Services"). By using the Services, you agree to this policy.

1. Information we collect

We collect the following categories of information:

a. Information you provide

• Email address when you subscribe to our mailing list, along with any preferences you choose.
• Messages you send us via email or contact forms, including your name and any information you include.
• Quiz responses if and when you use the future recommendation tool. You can use the tool without providing personally identifying information.

b. Information collected automatically

• Log and device data such as IP address, browser type and version, operating system, referring URL, pages viewed, and timestamps.
• Cookies and similar technologies used to remember preferences, measure traffic, and enable affiliate tracking. See "Cookies" below.

2. How we use information

• Operate and improve the Site and Services.
• Send the mailing list and respond to enquiries.
• Measure and understand how visitors use the Site in aggregate.
• Detect, prevent, and address technical issues, fraud, or abuse.
• Comply with legal obligations.

3. Legal bases (EEA/UK visitors)

Where GDPR or UK GDPR applies, we rely on the following legal bases: your consent (for the mailing list and non-essential cookies), our legitimate interests (to operate, secure, and improve the Site), and legal obligation (for tax, accounting, or regulatory requirements).

4. Cookies and tracking technologies

We and our service providers use cookies and similar technologies for the following purposes:

• Essential cookies: required for the Site to function (e.g. remembering that you dismissed a banner).
• Analytics cookies: to measure aggregate traffic and improve content.
• Affiliate tracking cookies: set by third-party affiliate networks (see below) when you click an affiliate link. These allow the network to attribute a resulting purchase back to us so we can be paid a commission. They do not typically share your identity with us.

Most browsers let you control cookies via their settings. Disabling cookies may affect your experience.

5. Affiliate links and third-party programs

Skin&Say participates in affiliate programs, including the Amazon Services LLC Associates Program. When you click certain links on the Site and buy something, we may earn a commission at no additional cost to you.

When you follow an affiliate link, the destination site and its affiliate network typically place cookies and collect information about your visit under their own privacy policies. That information is not controlled by us. We recommend reviewing the privacy policies of any site you purchase from.

See our Affiliate Disclosure for more detail.

6. Service providers we use

We share limited information with third parties who help us operate the Site, including:

• Hosting and content delivery providers.
• Email service providers for the mailing list.
• Analytics providers (in aggregate, non-identifying form where possible).
• Affiliate networks such as Amazon Associates and comparable programs.

These providers process information on our behalf under contractual obligations, or as independent controllers where applicable.

7. How we share information

We do not sell your personal information. We share information only:

• With service providers as described above.
• To comply with law, legal process, or lawful government requests.
• To protect our rights, safety, and the safety of others.
• In connection with a merger, acquisition, or sale of assets, with notice to you.

8. Data retention

We keep information only as long as necessary for the purposes described in this policy, or as required by law. Mailing list data is retained until you unsubscribe or request deletion.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; to object to or restrict processing; and to withdraw consent. To exercise these rights, email us at hello@midway.example. We will respond within the timeframes required by applicable law.

California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information as defined by the CCPA.

10. Children

The Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal information from children.

11. International transfers

We may process information in countries other than your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

12. Security

We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or on the Site.

14. Contact

Questions or requests about this policy can be sent to hello@midway.example.