Last updated 2026-10-03
Privacy policy
We collect only what we need to run your account and, later, your orders. We don't sell your information or use it for advertising.
What we collect
- Account details: your email, your first name if you give it, and your password (stored only as a one-way scrambled hash we can't read).
- Nail profile: the sizes, shapes, lengths, finishes and notes you choose to save.
- Wishlist: the sets you save.
- Addresses: the shipping addresses and phone numbers you add.
- Orders: what you ordered, your email, shipping address and phone, and the PayPal payment reference. Payments are handled by PayPal; we never see or store card numbers.
- Concierge chats: what you type to the concierge is sent to our AI provider to write a reply. We don't save the conversation; it lives in your browser tab until you close it.
Why we use it
- To sign you in and keep your account secure.
- To show your wishlist and saved sizes, and to suggest sets that fit.
- To ship orders and contact you about them.
- To send password reset emails you ask for.
We don't send marketing email unless you opt in, and there's no opt-in yet.
Cookies and browser storage
- Sign-in cookie (
lux_customer): keeps you signed in for up to 30 days. Only set if you sign in. - Your bag is saved in your browser's local storage on this device; it isn't sent to us until checkout.
We don't use analytics, advertising or tracking cookies.
Who else handles it
- Hosting: our website and database host stores the data above for us.
- Payments: PayPal processes payments and receives your order total and shipping address.
- AI concierge: Anthropic processes concierge messages to generate replies.
- Email: an email delivery service sends password resets and order emails.
- Product photos: some photos load from our supplier's image server, which sees your IP address like any website you visit.
These services may store data outside Canada. We only share what each one needs to do its job.
How long we keep it
Account data stays until you delete your account. When you do, your account, sessions, nail profile, wishlist and addresses are deleted right away. Order records are kept as long as tax law requires (in Canada, generally six years), even if you delete your account; they're then no longer linked to it.
Your choices and rights
- See or download your data: Account settings → Download my data.
- Correct it: edit your details anytime in your account.
- Delete it: Account settings → Delete my account.
- Questions or complaints: email us at info@luxnails.ca. You can also contact the Office of the Privacy Commissioner of Canada.