Privacy Policy

This Privacy Policy outlines how Tatcha collects, uses, discloses, and protects consumer personal information.

1. Types of Information We Collect

  • Information You Provide Directly:
    • Account and Contact Information: Name, email address, shipping address, phone number, and password.
    • Transaction and Payment Information: Credit/debit card details, billing address, purchase history, and order preferences.
    • Communications and Interactions: Information or feedback provided when participating in surveys, joining loyalty programs, or contacting customer service.
  • Information Collected Automatically (Technical Data):
    • Device and Browser Data: IP address, device type, operating system, and browser version.
    • Usage Data: Your browsing behavior on the Tatcha website, clickstream data, time spent on pages, and website interaction tracked through cookies and pixel tags.

2. Purposes of Information Use

The core purpose of collecting this data is to provide a high-quality skincare experience and comprehensive shopping services, including:

  • Processing and fulfilling your orders (including shipping, payment processing, and order status notifications).
  • Managing your account and membership loyalty programs (such as Tatcha Insider).
  • Delivering personalized product recommendations, marketing promotions, email subscriptions, or SMS notifications (you may opt out at any time).
  • Optimizing website performance, analyzing shopping trends, preventing fraud, and ensuring website security.
  • Complying with applicable laws, regulations, and compliance requirements.

3. Information Sharing and Disclosure

Tatcha does not sell your personal information, but may share data under the following specific circumstances:

  • Service Providers (Third-Party Partners): Including technical service providers responsible for payment processing, order fulfillment and shipping, email distribution, data analytics, and website hosting.
  • Affiliates: Sharing within the parent company or group (Tatcha is part of Unilever) for unified management and business operations.
  • Legal and Compliance Requirements: Disclosing information when facing legal subpoenas, court orders, government regulatory requests, or to protect the legal rights, property, and safety of Tatcha, its customers, and the public.
  • Business Transfers: In the event of a merger, acquisition, asset sale, or bankruptcy reorganization, your information may be transferred as part of the business assets.

4. Your Rights and Choices

Depending on your region (such as CCPA in California or GDPR in Europe), you have legal rights to control your personal information:

  • Access and Correction: You have the right to request access to the personal data we hold about you and request corrections to inaccurate information.
  • Deletion: Subject to legal requirements, you can request the deletion of your personal account and related data.
  • Marketing Opt-Out: An “Unsubscribe” link is included at the bottom of all promotional emails; you can also opt out of marketing text messages or emails through your account settings or by contacting customer service.
  • Cookie Preference Management: You can refuse or clear cookies via your browser settings, though this may impact the proper functioning of certain website features.

5. Data Security and Children’s Privacy

  • Security Measures: Tatcha implements reasonable administrative, technical, and physical security safeguards (such as encryption and SSL certificates) to protect your personal data from unauthorized access, alteration, or disclosure.
  • Children’s Privacy: Tatcha’s official website and products are not directed to children under the age of 16, and the brand does not knowingly collect personal information from minors.
Scroll to Top