Privacy policy

Last Updated: October 14, 2025
Operated by: Aqualanes Limited ("Company", "we", "our", or "us")

1. INTRODUCTION AND ACCEPTANCE

Aqualanes Limited operates this website and online store (the “Services”), powered by Shopify, to provide customers with a curated shopping and product-discovery experience. This Privacy Policy explains how Aqualanes Limited, as the exclusive operator of the DERMXELL⁺ brand and associated digital properties, collects, processes, uses, discloses, transfers, and safeguards information relating to identified or identifiable natural persons (“Personal Data” or “Personal Information”) when you access our website, mobile applications, purchase our products, or engage with our advertising content across AppLovin, Google Ads, Meta Platforms (Facebook and Instagram), YouTube, TikTok, or any other approved digital advertising networks and platforms.

By accessing, using, or interacting with our website, store, Services, or associated advertising channels, you acknowledge that you have read, understood, and accepted this Privacy Policy and consent to the collection and processing of your information as described herein. If you do not agree with any provision of this Privacy Policy, please discontinue use of our Services and digital properties immediately.

2. SCOPE AND TERRITORIAL APPLICATION

This Privacy Policy applies comprehensively to all customers, prospective customers, website visitors, and end users located in, or accessing our services from, the United States of America, Canada, United Kingdom, European Union member states, Australia, Federal Republic of Germany, Swiss Confederation, Kingdom of Norway, Kingdom of Belgium, New Zealand, United Arab Emirates (Dubai), Kingdom of Sweden, Kingdom of the Netherlands, and such other jurisdictions as may be designated by Aqualanes Limited from time to time.

2.1 Regulatory Compliance Framework

Aqualanes Limited maintains strict adherence to, and this Privacy Policy is expressly designed to satisfy the requirements of, the following data protection and privacy regulatory frameworks:

• European Union: Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
• United Kingdom: UK GDPR and Data Protection Act 2018
• United States: California Consumer Privacy Act (CCPA), CPRA, VCDPA, CPA, CTDPA, UCPA
• Canada: PIPEDA and provincial privacy legislation
• Australia: Privacy Act 1988 (Cth)
• United Arab Emirates: Federal Decree Law No. 45 of 2021
• Switzerland: Federal Data Protection Act (FADP)

3. DEFINITIONS AND INTERPRETATIONS

"Controller" means Aqualanes Limited, as the natural or legal person which determines the purposes and means of the processing of Personal Data.

"Processor" means a natural or legal person who processes Personal Data on behalf of the Controller.

4. CATEGORIES OF PERSONAL DATA COLLECTED

4.1 Information Provided Directly by Data Subjects

• Identity Data: Full legal name, date of birth, gender, age demographic
• Contact Data: Email address, postal address, telephone number
• Financial Data: Payment card information, billing address
• Commercial Data: Order history, product preferences

4.2 Automatically Collected Technical Data

• Device Data: IP addresses, browser type, operating system
• Usage Data: Page interactions, click-through rates
• Location Data: General geographic location derived from IP
• Cookie Data: Preference settings, session identifiers

4.3 CPRA “Notice at Collection”

Aqualanes Limited does not “sell” Personal Information for monetary value.

5. PURPOSES AND LEGAL BASES OF PROCESSING

Personal Data is processed for lawful purposes including order fulfillment (Contractual Necessity), marketing optimization (Legitimate Interest), tax reporting (Legal Obligation), and marketing communications (Explicit Consent).

6. ENHANCED HEALTH AND WELLNESS DATA RESTRICTIONS

In strict adherence to Meta's and Google's health and wellness policies, we expressly do not target advertisements based on sensitive health categories or medical history.

7. COOKIES AND TRACKING

We use cookies for essential functionality, analytics, and advertising. Users may manage preferences through our Consent Management Platform. Detailed information is available in our Cookie Policy.

8. ADVERTISING PARTNERS AND DATA SHARING

Data may be shared with trusted partners including AppLovin, Google, Meta, and Shopify under strict data protection agreements.

Payment Processing: Billing services and payment processing are handled by our subsidiary, Aqualanes Limited.

9. PLATFORM-SPECIFIC DISCLOSURES

We comply with specific advertising policies for Meta (Facebook/Instagram), Google/YouTube, and AppLovin, ensuring no sensitive health data is used for targeting and all claims are cosmetic in nature.

10. DATA SUBJECT RIGHTS

You have the right to access, rectify, erase, restrict, and object to the processing of your data. To exercise these rights, contact support@dermxell.com.

11. INTERNATIONAL TRANSFERS

Data may be processed in countries outside your jurisdiction. We rely on Standard Contractual Clauses (SCCs) and adequacy decisions to ensure data protection.

12. DATA RETENTION AND SECURITY

We retain data only as long as necessary for business or legal purposes. We employ AES-256 encryption and strict access controls to protect your data.

13. CHILDREN'S PRIVACY

Our services are directed to adults 18+. We do not knowingly collect data from children. Any inadvertently collected data will be deleted immediately.

14. COSMETIC REGULATORY COMPLIANCE

DERMXELL⁺ products are cosmetic preparations, not drugs. They are not intended to diagnose, treat, cure, or prevent any disease. Results vary by individual.

15. LIMITATION OF LIABILITY

To the fullest extent permitted by law, Aqualanes Limited shall not be liable for indirect or consequential damages arising from the use of our services.

16. DISPUTE RESOLUTION

Disputes shall be resolved through binding arbitration. International customers are governed by the laws of England and Wales; US customers by Delaware law.

17. CONTACT INFORMATION