The European Union General Data Protection Regulation (GDPR) and the United Kingdom GDPR may apply to certain individuals located in the European Economic Area, European Union, or United Kingdom depending on the circumstances in which Citrine Beauty LLC collects or processes their personal information.

This notice is intended to explain certain rights and practices where GDPR-related requirements apply. Nothing in this notice is intended to create rights that do not otherwise apply under applicable law.

Citrine Beauty LLC may process personal information in connection with website visits, inquiries, communications, bookings, advertising, analytics, and other business operations as described in our Privacy Policy.

Where the GDPR or UK GDPR applies, Citrine Beauty LLC processes personal information only when there is an appropriate lawful basis for doing so.

Depending on the circumstances, our lawful bases may include:

Contractual Necessity
We may process personal information when it is necessary to take steps at your request before entering into an agreement or to perform obligations associated with a booking or service agreement.

Legitimate Interests
We may process information where reasonably necessary for legitimate business interests, such as operating and improving our website, responding to inquiries, maintaining business records, preventing fraud, measuring business performance, and communicating with clients, provided those interests are not overridden by applicable privacy rights.

Consent
We may rely on consent for certain activities, including the use of non-essential cookies or certain marketing and advertising technologies where consent is required. When processing is based on consent, you may withdraw that consent at any time.

Legal Obligations
We may process or retain information when necessary to comply with applicable legal, regulatory, accounting, tax, or other obligations.

The lawful basis used may vary depending on the type of information and the purpose for which it is processed.

Where the GDPR or UK GDPR applies, you may have certain rights regarding your personal information, subject to applicable exceptions and limitations.

These rights may include:

Right Of Access
You may request confirmation of whether we process your personal information and, where applicable, request access to that information.

Right To Rectification
You may request correction of personal information that is inaccurate or incomplete.

Right To Erasure
You may request deletion of certain personal information where applicable.

Right To Restrict Processing
You may request that we limit the way we process certain personal information in specific circumstances.

Right To Data Portability
You may have the right to receive certain personal information in a structured, commonly used, and machine-readable format and, where applicable, request that it be transferred to another organization.

Right To Object
You may object to certain processing activities, including some processing based on legitimate interests or direct marketing.

Right To Withdraw Consent
Where we rely on your consent to process personal information, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

You may also have the right to lodge a complaint with an applicable data protection authority.

Citrine Beauty LLC is based in the United States, and personal information may be processed or stored in the United States or other countries where our service providers operate.

If the GDPR or UK GDPR applies, personal information transferred outside the European Economic Area, European Union, or United Kingdom may be subject to safeguards required by applicable law.

Where appropriate, service providers may rely on mechanisms such as adequacy decisions, standard contractual clauses, or other legally recognized safeguards for international data transfers.

The privacy practices and transfer mechanisms used by third-party service providers are also governed by their own privacy terms and applicable legal obligations.

If the GDPR or UK GDPR applies to you, you may submit a request concerning your personal information through the contact information provided on this website.

When submitting a request, please provide enough information for us to understand the nature of your request and identify the information involved. We may need to verify your identity before fulfilling certain requests in order to protect personal information from unauthorized access or disclosure.

We will respond to valid requests within the time required by applicable law. Under the GDPR and UK GDPR, this is generally within one month, although that period may be extended where permitted for particularly complex or numerous requests.

Some rights are subject to legal exceptions or limitations, and we may retain certain information where required or permitted by law even after a deletion request.

Where the GDPR or UK GDPR applies, Citrine Beauty LLC retains personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal, contractual, accounting, tax, and recordkeeping requirements.

Retention periods may vary depending on the nature of the information, the relationship involved, the purpose of processing, and whether the information is needed to establish, exercise, or defend legal claims.

When personal information is no longer reasonably necessary for an applicable purpose, we may delete, anonymize, or otherwise securely dispose of it in accordance with our practices and applicable law.

Additional information about our general retention practices is available in our Privacy Policy.

Citrine Beauty LLC may update this GDPR Notice from time to time to reflect changes in our privacy practices, service providers, business operations, or applicable legal requirements.

When changes are made, we may update the effective date shown on this page. The revised notice will become effective when posted unless otherwise stated.

We encourage you to review this GDPR Notice periodically for the most current information about how we address applicable GDPR and UK GDPR requirements.

For questions, please contact Citrine Beauty through our contact form.

Effective Date: August 23, 2026