Privacy Policy

TEAK, LLC

Last Updated: March 31, 2026

This Privacy Policy (“Privacy Policy”) sets out how Teak, LLC (“Teak”) uses and protects any information that you (referred to as “you” or “your”) provide when accessing, browsing, submitting information to, making a purchase on, or otherwise utilizing the Website, www.teakbeauty.com (the “Website”).

Teak is committed to ensuring that your privacy is protected. Any personal identifying information (hereinafter referred to as “Personal Information”) you provide when using the Website will only be used in accordance with this Privacy Policy.

1. PERSONAL INFORMATION

What Personal Information is Collected?

When browsing, engaging with, or otherwise using the Website; viewing or purchasing Teak’s beauty products; contacting Teak; or otherwise conducting any activity on the Website, you may provide various types of Personal Information, including but not limited to:

Contact Information: name, email address, postal address, telephone number, or any other similar information.
Identification and Demographics: date of birth, gender, nationality, ethnicity, interests, lifestyle information, photos, social media credentials, contacts, or referrals.
Transactional: billing address, payment information, and debit/credit card payment information.
Customer Content: photos, videos, reviews, and other information or content you submit.
Research and Feedback: reviews, comments, and other feedback submitted through the Website, social media platforms, email, or phone.
Device Information and Identifiers: IP addresses, cookie IDs, browser types and language, operating systems, platform type, and device type.
Connection and Usage: domain names, browsing activity, advertisements and Products viewed, search terms, forms completed or partially completed, and other interaction data.
Geolocation: city, state, and ZIP code associated with your IP address.
Skin Tone and Biometric Data (with your explicit consent): facial images and AI-derived skin tone analysis, as further described in Section 3 below.
Social Media Information: information accessible through third-party social media platforms if you connect your account.
Additional Information: any additional information you provide directly through the Website or through your participation in surveys, support requests, or other communications.

When is Personal Information Collected?

Generally, you are not under any statutory or contractual obligation to provide any Personal Information; however, certain Personal Information may be automatically collected in order for you to use the Website and purchase our products. Teak collects information when you access or use the Website, complete a form, make a purchase, or otherwise enter information on the Website or Teak’s social media platforms.

How Do You Get My Consent?

When you provide Personal Information through the Website, complete a contact form, or purchase our products, you are consenting to the collection, storage, and use of that information in accordance with this Privacy Policy. For certain types of sensitive data — such as facial images, biometric data, and skin tone analysis — Teak will obtain your explicit, separate consent before collecting or processing that information.

How Do I Withdraw My Consent?

You may withdraw your consent at any time by contacting Teak directly at hello@teakbeauty.com. Please note that Teak may retain previously collected Personal Information as necessary to resolve disputes, track orders, or maintain aggregated analytics. Withdrawal of consent will not affect the lawfulness of processing that occurred prior to withdrawal.

2. HOW WE USE YOUR PERSONAL INFORMATION

Teak may use your Personal Information in the following ways:

To provide, maintain, and improve the Website and our products, features, and content.
To personalise your experience and better understand your needs and interests.
To fulfill orders and respond to your questions and comments.
To send announcements, promotional emails, and marketing communications relevant to your interests.
To process your transactions quickly and securely.
To investigate and help prevent security issues, abuse, or violations of law.
To comply with all relevant laws, regulations, and ethical business conduct.

3. HOW WE USE SKIN TONE DATA AND IMAGES

This section applies specifically to facial images, skin tone data, and any biometric information collected through our AI-powered tools. We collect this data only with your explicit, separate consent.

When you consent to skin tone analysis or contribution to our Brown Skin Database, we use your data for the following purposes:

Product Research and Development: We analyse your skin tone and facial images to inform our research into cosmetic and skin care product colours, formulas, and ingredients designed to work beautifully on brown and deeper skin complexions. This helps us develop products that are truly tailored to you.
AI Model Training: With your explicit consent, we may use your image and skin tone data to train and improve our AI models. This work is specifically aimed at improving the performance of AI systems for people with brown skin complexions — a group that has historically been underrepresented in AI training data.
Personalised Product Recommendations: Skin tone analysis may be used to provide you with more accurate, personalised cosmetic and skin care product recommendations through our quizzes and other tools on the Website.

What we will NEVER do with your skin tone data or images:

We will never sell your data to third parties.
We will never share your data with third parties for their own marketing or commercial purposes.
We will never use your data for purposes beyond those described in this Privacy Policy without seeking your renewed consent.
We will never use your images to identify you beyond the scope of the skin tone analysis you consented to.

You have the right to withdraw consent for skin tone data processing at any time, and to request deletion of your facial images and derived data. To exercise these rights, contact us at hello@teakbeauty.com.

4. HOW IS YOUR PERSONAL INFORMATION PROTECTED?

Teak takes the security of your Personal Information very seriously and implements a variety of security measures when you use the Website or otherwise provide your Personal Information. Your Personal Information is accessible only to a limited number of authorised persons, including contractors or agents that Teak may employ to perform tasks, fix bugs, and/or monitor the Website on its behalf.

5. CHILDREN’S DATA

Teak does not knowingly collect any data from individuals under the age of eighteen (18). If Teak learns that it has collected any such data without the supervision of a parent or legal guardian, it will take all reasonable measures to delete such information and will not use it for any purpose. If you become aware of any Personal Information that Teak has collected from a child under the age of eighteen (18), please contact Teak immediately at hello@teakbeauty.com.

6. SHARING AND DISCLOSURE OF PERSONAL INFORMATION

Teak may share and disclose your Personal Information in the following limited circumstances:

Customer instructions: Teak will share and disclose your Personal Information in accordance with your engagement, instructions, and in compliance with applicable law.
Legal compliance: Teak may release your Personal Information to comply with any law, regulation, or legal process; enforce its policies; or protect Teak’s or others’ rights, property, or safety.
Fraud prevention and safety: To protect and defend the rights, property, or safety of Teak or third parties, in connection with investigating and preventing fraud or security issues.
Service providers: Teak may share information with trusted service providers who assist in operating the Website, processing orders, or providing services to you (such as ShipBob for order fulfilment). These providers are contractually required to protect your data and may not use it for their own purposes.
Business transfers: If Teak is involved in a merger, collaboration, or acquisition, your Personal Information may be transferred. Teak will provide you with notice before your Personal Information is transferred and becomes subject to a different privacy policy.
With your consent: Teak may share Personal Information with others when it has your consent to do so.

Teak will never sell or share your Personal Information — including your skin tone data, facial images, or biometric information — to third parties for their own commercial or marketing purposes.

7. COOKIES

Does the Website Use Cookies?

Yes. Teak and its service providers use cookies and similar technologies to recognise you on, off, and across your devices. Categories of cookies include:

Essential: Necessary to provide Website functionality and authenticate users.
Functional: Required for the Website to function efficiently; these remember your preferences as you navigate.
Performance: Allow Teak to improve the Website by tracking usage and preferences.
Social Media & Advertising: Connect you to social networks and help tailor advertisements to your interests.

You can opt-out of targeted advertising at: Facebook — https://www.facebook.com/settings/?tab=ads | Google — https://www.google.com/settings/ads/anonymous

You can manage cookie preferences in your browser settings. Disabling cookies may limit some Website functionality.

8. RETENTION OF PERSONAL INFORMATION

Teak will retain your Personal Information only for as long as is necessary to achieve the purposes set out in this Privacy Policy, including providing our products, complying with legal obligations, resolving disputes, completing audits, and enforcing our legal agreements and policies.

9. INTERNATIONAL TRANSFERS

Teak is headquartered in the United States; however, Teak may transfer your Personal Information to service providers and other parties located outside of your country of residence. Data privacy laws vary from country to country. Teak takes steps to ensure that reasonable safeguards are in place to ensure an appropriate level of protection for your Personal Information, in accordance with applicable law.

10. STATE-SPECIFIC DATA PRIVACY RIGHTS

As of March 2026, twenty U.S. states have enacted comprehensive consumer data privacy laws. The following section summarises your rights under applicable state laws. These rights apply to residents of the respective states. To exercise any of the rights described below, please contact Teak at hello@teakbeauty.com.

California (CCPA / CPRA)

California residents have the following rights under the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”):

Right to know: the categories and specific pieces of Personal Information collected about you.
Right to delete: request deletion of your Personal Information, subject to certain exceptions.
Right to correct: request correction of inaccurate Personal Information.
Right to opt out: opt out of the sale or sharing of your Personal Information.
Right to limit use: limit the use and disclosure of sensitive Personal Information.
Right to non-discrimination: not receive discriminatory treatment for exercising your rights.

Effective January 1, 2026, California’s automated decision-making technology (ADMT) regulations, cybersecurity audit requirements, and risk assessment obligations apply. Teak does not sell your Personal Information. California residents may also submit a deletion request through the California Delete Act’s DELETE platform.

Special notice for minors: under California’s Privacy Rights for Minors in the Digital World Act, any minor may request removal of Personal Information posted on the Website.

Virginia (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information. Virginia residents may also opt out of targeted advertising, the sale of their Personal Information, and profiling that produces legal or similarly significant effects.

Colorado (CPA)

Colorado residents have rights to access, correct, delete, and obtain a portable copy of their Personal Information. Colorado residents may opt out of targeted advertising, the sale of personal data, and profiling. Effective July 1, 2025, the Colorado Privacy Act includes new requirements for processing biometric information, similar to those under the Illinois Biometric Information Privacy Act. Teak will obtain your explicit consent before collecting or processing biometric data from Colorado residents.

Connecticut (CTDPA, amended July 1, 2026)

Connecticut residents have the right to access, correct, delete, obtain a portable copy of, and opt out of the sharing of their Personal Information. Effective July 1, 2026, Connecticut’s amendments introduce updated protections for minors’ data and age-appropriate design requirements.

Utah (UCPA, amended July 1, 2026)

Utah residents have the right to confirm processing, access, delete, and obtain a copy of their Personal Information. Controllers must establish reasonable data security practices and provide clear privacy notices.

Nevada

Nevada law requires Teak to disclose that certain Nevada consumers may opt out of the sale of Covered Information (including name, address, email, phone number, and unique identifiers) for monetary consideration. Teak does not sell Covered Information.

Texas (TDPSA, effective July 1, 2024)

Texas residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information, as well as to opt out of targeted advertising and the sale of their Personal Information. The Texas Data Privacy and Security Act applies to businesses that process personal data of Texas residents.

Oregon (OCPA, amended January 1, 2026)

Oregon residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information. Effective January 1, 2026, Oregon’s law prohibits the sale of precise geolocation data and imposes stricter controls on data relating to minors under 16.

Montana (MCDPA, effective October 1, 2024)

Montana residents have the right to opt out of the sale of their Personal Information and to access, correct, and delete their Personal Information. Collection of personal data is limited to what is adequate, relevant, and reasonably necessary.

Indiana (ICDPA, effective January 1, 2026)

Indiana residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information, and to opt out of targeted advertising and the sale of their Personal Information. The Indiana Consumer Data Protection Act applies to entities processing the personal data of at least 100,000 consumers, or 25,000 consumers where more than 50% of revenue is derived from selling data.

Kentucky (KCDPA, effective January 1, 2026)

Kentucky residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information, and to opt out of targeted advertising and the sale of their Personal Information. Coverage thresholds mirror those of Virginia’s VCDPA.

Rhode Island (RIDTPPA, effective January 1, 2026)

Rhode Island residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information. The Rhode Island Data Transparency and Privacy Protection Act applies to online service providers and has notably low applicability thresholds, covering entities processing the data of at least 35,000 consumers.

Maryland (MODPA, effective October 1, 2025)

Maryland’s Online Data Privacy Act imposes stringent data minimisation requirements. Teak will only collect Personal Information from Maryland residents that is necessary for the purposes stated in this Privacy Policy. The MODPA prohibits the sale of sensitive personal data, including precise geolocation data and health data.

Minnesota (MCDPA, effective July 31, 2025)

Minnesota residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information, and to opt out of targeted advertising and the sale of their Personal Information.

Tennessee (TIPA, effective July 1, 2025)

Tennessee residents have the right to confirm that Teak has collected their Personal Information, obtain a copy, and request correction of inaccuracies.

Delaware (DPDPA, effective January 1, 2025)

Delaware residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information, and to opt out of targeted advertising and the sale of their Personal Information.

New Hampshire (NHPA, effective January 1, 2025)

New Hampshire residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information, and to opt out of targeted advertising and the sale of their Personal Information.

New Jersey (NJDPA, effective January 2025)

New Jersey residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information, and to opt out of targeted advertising and the sale of their Personal Information.

Nebraska (NDPA, effective January 1, 2025)

Nebraska residents have the right to access, correct, delete, and obtain a portable copy of their Personal Information, and to opt out of targeted advertising and the sale of their Personal Information.

Iowa (ICDPA, effective January 1, 2025)

Iowa residents have the right to access and obtain a copy of their Personal Information. Note: Iowa’s law does not grant consumers the right to correct data or delete data held by third parties.

11. THIRD PARTY LINKS

Teak may include links to third-party websites or services on the Website. These third-party links are governed by separate and independent privacy policies. Teak has no responsibility or liability for the content and activities of these third-party links.

12. COMMUNICATIONS

By using the Website, you consent to receiving communications from Teak, including emails, text messages, and/or calls regarding the Website and/or Products, updates, marketing, advertisements, and other relevant information. You may opt out of marketing communications at any time by contacting us at hello@teakbeauty.com or by using the unsubscribe link in our emails.

13. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be amended from time to time at Teak’s discretion. Teak reserves the right to modify or update this Privacy Policy at any time. Changes and clarifications will take effect immediately upon posting to the Website. If Teak makes any material changes to this Privacy Policy, it will notify you here. It is your responsibility to review this Privacy Policy periodically.

14. CONTACT TEAK

If you have any questions regarding this Privacy Policy, or if you want to verify, modify, receive, suspend, or delete your Personal Information, please contact Teak directly:

Email: hello@teakbeauty.com

Website: www.teakbeauty.com