Privacy Policy
Last Updated: Aug 28, 2025
Milk Makeup ("Milk Makeup", "we", "us", or "our") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy.
This Privacy Policy describes how we collect, use and share information about you as well as your rights and choices about such collection, use and sharing. It applies when you access or use our websites and other products and services (collectively, the “Services”), contact our service team, engage with us on social media, or otherwise interact with us.
If you do not agree with our policies and practices, your choice is not to use the Services. By accessing or using the Services, whether or not you purchase any of our Services, you agree to this Privacy Policy.
Information collected from you
We collect the personal information you provide to us when you purchase our products or visit our website. The categories of information we may collect include:
- Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
- Internet Activity
- Commercial Information, including purchases
- Financial Information, including credit or debit card number
- Location Information, including general location data
- Physical and Audio Data, including photos
- Protected Classifications and Other Personal Characteristics, including age
- Consumer Communications, including direct communications with our consumers
- Inferences from Other Data, including inferences created from other personal information collected
Information collected from other sources
We may collect personal information about you from third-party sources The sources and categories of information we may collect include:
Ad Networks
- Personal Identifiers, including Name and Email address
- Internet Activity
Other consumers (e.g., referrals)
- Personal Identifiers, including Name and Email address
Retail Partners
- Personal Identifiers, including Name, Email address, and Postal address
- Commercial Information, including Purchases
How long we keep your data
We do not retain data for any longer than is necessary for the purposes described in this Privacy Policy. We generally retain data according to the guidelines below.
| Type of Data | Retention Period |
|---|---|
| Cookies and online data we collect while you use our website, including Online Identifiers, Internet Activity, General location data | We delete or anonymize data concerning your use of our website within 2 years of collecting it. |
| Data we collect in order to process and ship orders you place with us, including Name, Email address, Postal address, Telephone number, Purchases, Credit or debit card number | We keep personal information related to products and services you purchase for as long as the personal data is required for us to fulfill our contract with you, and for 12 years from your last purchase with us. We may keep data beyond this period in anonymized form. |
| Data we collect when you contact us for customer support and other inquiries, including Name, Email address, Telephone number, Purchases, Direct communications with our consumers | We keep customer feedback and correspondence with our customer service for up to 12 years to help us respond to any questions or complaints. We may keep data beyond this period in anonymized form. |
| Data we collect when you sign up for promotional and marketing communications, including Name, Email address, Postal address, Telephone number, Online Identifiers, Internet Activity, Purchases, Inferences created from other personal information collected | Where you have signed up to receive promotional and marketing communications from us, we will retain any data collected until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will further retain a record of any opt-outs in order to prevent sending you future communications. |
| Data we collect when you review our products, answer surveys, or send feedback, including Name, Email address, Purchases, Photos, Age, Direct communications with our consumers | We retain review, survey, and feedback data for up to 12 years following your last contact with us. We may keep data beyond this period in anonymized form to help improve our products and services. |
| Data we collect in connection with privacy requests, including Name, Email address, Online Identifiers | We retain records related to privacy requests as long as necessary to comply with our legal obligations. |
| Data we collect for security purposes, including Name, Email address, Online Identifiers | We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures. |
We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the Privacy Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access the Services or otherwise interact with us, as your continued use of any Services constitutes acceptance to the updated terms.
We use personal information for the following purposes:
- Analyzing Data
- Conducting Surveys
- Creating Customer Profiles
- Delivering Targeted Ads
- Fulfilling Customer Orders
- Improving Our Products & Services
- Meeting Compliance & Legal Requirements
- Operating Our Website or Mobile Apps
- Preventing Fraud
- Processing Payments
- Providing Customer Support
- Sending Promotional Communications
- Storing and Managing Data
- Tracking Purchases & Customer Data
We may disclose the following personal information about you to our services providers and vendors when you purchase our products or visit our website:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Business Operations Tool, Fraud Prevention Tools, IT Infrastructure Services, Payment Processors, Sales & Marketing Contractors, and Sales & Marketing Tools | Ad Networks, Affiliates, Data Analytics Providers, Data Cooperative, Payment Processors, and Sales & Marketing Tools |
| Internet Activity | Business Operations Tool, Fraud Prevention Tools, Sales & Marketing Contractors, and Sales & Marketing Tools | Ad Networks, Data Analytics Providers, Data Cooperative, Payment Processors, and Sales & Marketing Tools |
| Commercial Information | Business Operations Tool, Sales & Marketing Contractors, and Sales & Marketing Tools | Ad Networks, Data Cooperative, and Payment Processors |
| Financial Information | Business Operations Tool | Payment Processors |
| Location Information | Business Operations Tool and Fraud Prevention Tools | Data Analytics Providers |
| Physical and Audio Data | None | None |
| Protected Classifications and Other Personal Characteristics | Business Operations Tool and Sales & Marketing Tools | None |
| Consumer Communications | None | None |
| Inferences from Other Data | Business Operations Tool and Sales & Marketing Tools | None |
Cookies
This site uses first and third-party cookies and similar technologies to process personal information for the purposes described in this Policy. Cookies are small text files placed on your device to store data that can be recalled by a web server in the same domain that placed the cookie. The text in a cookie often consists of a string of numbers and letters that uniquely identifies your device, but it can contain other information as well. To learn more about cookies and how to control the use of cookies at a browser level, visit https://allaboutcookies.org/
Do Not Track
Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our websites do not currently respond to browser DNT signals. However, you may still exercise your privacy rights as described elsewhere in this Policy.
Third party analytics tools
This site uses Google Analytics to analyze your interactions and experiences with our Services. You can find out how Google Analytics uses data here and how to opt out of Google Analytics here. For more information on how Google uses data when you use our websites, click here.
If you are a California resident and have an established business relationship with us, you can request a notice disclosing the categories of personal information we have shared with third parties, for the third parties' direct marketing purposes, during the preceding calendar year. To request a notice, please submit your request to privacy@milkmakeup.com. Please allow 30 days for a response.
To opt out of selling and sharing personal information, go to Your Privacy Choices.
If you have any questions about this Privacy Policy, please contact us as follows:
Milk Makeup
moc.puekamklim@ycavirp
The Milk Makeup mobile message service (the "Service") is operated by Milk Makeup LLC (“Milk Makeup”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes.
By consenting to Milk Makeup’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Milk Makeup through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Promotional messages may include specials, promotions, product launches, abandoned cart, special offers, discounts, sales, giveaways, product information, and other marketing offers (e.g., cart reminders).
You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with Milk Makeup. Your participation in this program is completely voluntary.
We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.
You may opt-out of the Service at any time. Text the single keyword command STOP to 39201 or click the unsubscribe link (where available) in any text message to cancel. You'll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device, unless initiated by you. If you have subscribed to other Milk Makeup mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.
For Service support or assistance, text HELP to 39201 or email hello@milkmakeup.com.
We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honoring requests made in such messages.
The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number.
To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.
We respect your right to privacy. To see how we collect and use your personal information, please see our Privacy Notice.
We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.
We respect your right to privacy. To see how we collect and use your personal information, please see our Privacy Notice.
The Milk Makeup website uses cookies to help keep track of items you put into your shopping cart including when you have
abandoned your cart and this information is used to determine when to send cart reminder messages via SMS.
We respect your right to privacy. To see how we collect and use your personal information, please see our Privacy Notice.
Last updated: Aug. 27, 2025
The Milk Makeup mobile message service (the "Service") is operated by Milk Makeup LLC (“Milk Makeup”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes.
By consenting to Milk Makeup’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Milk Makeup through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Promotional messages may include specials, promotions, product launches, abandoned cart, special offers, discounts, sales, giveaways, product information, and other marketing offers (e.g., cart reminders).
You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with Milk Makeup. Your participation in this program is completely voluntary.
We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.
You may opt-out of the Service at any time. Text the single keyword command STOP to 39201 or click the unsubscribe link (where available) in any text message to cancel. You'll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device, unless initiated by you. If you have subscribed to other Milk Makeup mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.
For Service support or assistance, text HELP to 39201 or email hello@milkmakeup.com.
We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honoring requests made in such messages.
The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number.
To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.
We respect your right to privacy. To see how we collect and use your personal information, please see our Privacy Notice.
We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.
We respect your right to privacy. To see how we collect and use your personal information, please see our Privacy Notice.
COOKIES
The Milk Makeup website uses cookies to help keep track of items you put into your shopping cart including when you have
abandoned your cart and this information is used to determine when to send cart reminder messages via SMS.
We respect your right to privacy. To see how we collect and use your personal information, please see our Privacy Notice.
This section provides additional information for people in the European Economic Area (EEA), United Kingdom (UK), or Switzerland (CH). The terms used in this section have the same meaning as in the General Data Protection Regulation, the UK Data Protection Act, and the Swiss Federal Act on Data Protection (collectively, “European Privacy Laws”). The term “personal information” as used in this notice has the same meaning as “personal data” in the European Privacy Laws.
Collection and Disclosure of Personal Data
The personal data we collect and how we share it is described above in our Privacy Policy.
We may disclose your personal information to the following third party controllers for business purposes:Microsoft Ads, Forter, Pinterest Ads, Google Ads, Apple Pay, Facebook Pay, Meta Ads, PayPal - Pay with PayPal, Venmo, Pay Later, Afterpay, Google Pay, Shop Pay, Rakuten, Tiktok Ads. To understand how these parties handle your data, please refer to their respectiveprivacy policies.
Cookie Notice
We use cookies to improve your experience on our site and to allow us and third parties to personalize the marketing content you see on other websites and social media. Website visitors from European Privacy Law regions can control cookie settings. Manage your region specific consent settings here.
Essential Cookies
We use these cookies for things like security, logins, site errors, and processing payments. We can't turn these necessary cookies off, but you can control them in your browser.
| Cookie Name | Provider | Duration |
|---|---|---|
| __cf_bm | Cloudflare | 30 Mins |
| __cf_bm | Cloudflare | 30 Mins |
| __cf_bm | Cloudflare | 30 Mins |
| _cfuvid | Cloudflare | Session |
| _cfuvid | Cloudflare | Session |
| _shdfp | Facebook Pay | 1 Year |
| _tracking_consent | Shopify | 1 Year |
| app_admf | First Party | 2 Months 29 Days |
| AWSALBTGCORS | Amazon Web Services | 7 Days |
| cart | Shopify | 1 Month 1 Day |
| cart_currency | Shopify | 14 Days |
| cart_sig | Shopify | 1 Month 1 Day |
| checkmateId | 1 Year | |
| forterToken | Forter | 1 Year 1 Month 5 Days |
| keep_alive | Shopify | 30 Mins |
| localization | Shopify | 1 Year |
| secure_customer_sig | Shopify | 1 Year |
| shopify_pay_redirect | Shopify | 1 Hour |
Analytics Cookies
These cookies tell us how you use our sites and apps, and provide information to help us improve your experience.
| Cookie Name | Provider | Duration |
|---|---|---|
| __attentive_cco | Attentive | 1 Year 25 Days |
| __attentive_dv | Attentive | 1 Day |
| __attentive_pv | Attentive | 30 Mins |
| _ga | Google Analytics | 1 Year 1 Month 5 Days |
| _ga_8RNG0Y7YLM | Google Analytics | 1 Year 1 Month 5 Days |
| _ga_R7G5DZNSPL | Google Analytics | 1 Year 1 Month 5 Days |
| _ga_WM22JK48ZQ | Google Analytics | 1 Year 1 Month 5 Days |
| _hjSession_3673904 | Hotjar | 30 Mins |
| _hjSessionUser_3673904 | Hotjar | 1 Year |
| _landing_page | Shopify | 14 Days |
| _orig_referrer | Shopify | 14 Days |
| _shopify_s | Shopify | 30 Mins |
| _shopify_sa_p | Shopify | 30 Mins |
| _shopify_sa_t | Shopify | 30 Mins |
| _shopify_y | Shopify | 1 Year 1 Day |
| _sp_id.eecc | 1 Year 1 Month 5 Days | |
| _sp_ses.eecc | 30 Mins | |
| baMet_baEvs | Shopify | 1 Min |
| tag_session | Google Analytics | 30 Mins |
| tag_user_id | Google Analytics | 1 Year 1 Month 5 Days |
Personalization Cookies
We use these cookies to enhance functionality and personalize content for you. For example, they allow us to remember you when you return to our website or app. If you do not allow these cookies then some or all of these services may not function properly.
| Cookie Name | Provider | Duration |
|---|---|---|
| baMet_baEvs | Shopify | 1 Min |
| pixel | 1 Year |
Advertising Cookies
These cookies help us decide which products, services and offers may be relevant for you. We use this data to customize the marketing content you see on websites, apps and social media, and to measure your interactions with that content. We might use these cookies to advertise our products to you when you visit other websites.
| Cookie Name | Provider | Duration |
|---|---|---|
| __attentive_cco | Attentive | 1 Year 25 Days |
| __attentive_id | Attentive | 1 Year 25 Days |
| __attentive_session_id | Attentive | 30 Mins |
| __attentive_ss_referrer | Attentive | 30 Mins |
| __kla_id | Klaviyo | 1 Year 1 Month 5 Days |
| _attn_ | Attentive | 1 Year 25 Days |
| _attn_bopd_ | Attentive | 1 Year 25 Days |
| _fbp | Meta Ads | 2 Months 29 Days |
| _gcl_au | Google Ads | 2 Months 29 Days |
| _pin_unauth | Pinterest Ads | 1 Year |
| _pin_unauth | Pinterest Ads | 1 Year |
| _pinterest_ct_ua | Pinterest Ads | 1 Year |
| _ttp | Tiktok Ads | 1 Year 25 Days |
| _uetsid | Microsoft Ads | 1 Day |
| _uetvid | Microsoft Ads | 1 Year 25 Days |
| ar_debug | Pinterest Ads | 1 Year |
| baMet_visit | Shopify | 30 Mins |
| hasActiveDonationCampaigns | Meta Ads | 31 Mins |
| IDE | Google Ads | 1 Year 1 Month 5 Days |
| milkGUID | First Party | 1 Year 1 Month 5 Days |
| MR | Microsoft Ads | 7 Days |
| MSPTC | Microsoft Ads | 1 Year 25 Days |
| MUID | Microsoft Ads | 1 Year 25 Days |
| test_cookie | Google Ads | 16 Mins |
| ttcsid | Tiktok Ads | 1 Year 25 Days |
| ttcsid_C0M0U2DJE9B8D1KPNCC0 | Tiktok Ads | 1 Year 25 Days |
| yotpo_pixel | Yotpo - Reviews & UGC | 1 Day |
Lawful Bases and Legitimate Interests
We process personal data on the following lawful bases:
- Complying with legal obligations
- Fulfilling contracts
- Consent
- Legitimate interests
Where we process personal data on the basis of our legitimate interests, we pursue the following interests: Analyzing Data, Creating Customer Profiles, Delivering Targeted Ads, Improving Our Products & Services, Meeting Compliance & Legal Requirements, Operating Our Website or Mobile Apps, Preventing Fraud, Processing Payments, Providing Customer Support, Sending Promotional Communications, Storing and Managing Data, Tracking Purchases & Customer Data, Conducting Surveys, and Fulfilling Customer Orders.
International Data Transfers
We may send the personal data of individuals in the EEA/UK/CH to third countries, including the United States, where it may be stored or processed, for example on our service providers’ cloud servers. When we transfer personal data, we endeavor to do so on the basis of Adequacy Decisions as adopted by the European Commission (EC), the UK Information Commissioner's Office (ICO), or the Swiss Federal Data Protection and Information Commissioner (FDPIC), the EU-US Data Privacy Framework, UK-US Data Bridge, and Swiss-U.S. Data Privacy Framework agreements, Standard Contractual Clauses (SCCs) issued by the EC or the FDPIC, International Data Transfer Agreements (IDTAs) approved by the ICO, and as otherwise allowed by law. Data protection authorities have determined that the SCCs and IDTAs provide sufficient safeguards to protect personal data transferred outside the EEA/UK/CH. To request copies of our international data transfer safeguards, please contact us at moc.puekamklim@ycavirp. You may read more about international data transfer mechanisms at the following links:
- https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
- https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-data-transfer-agreement-and-guidance/
- https://www.edoeb.admin.ch/edoeb/en/home/datenschutz/arbeit_wirtschaft/datenuebermittlung_ausland.html
Privacy Rights
Individuals in the EEA/UK/CH have the following rights regarding their personal data.Make a Privacy Request by clicking here. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.
Right to access. You have the right to request a copy of the personal data we hold about you.
Right of portability. You have the right to ask us to transfer your data to another party.
Right to rectification. You have the right to request that we rectify any incorrect information we have about you.
Right of erasure. You have the right to request that we erase (delete) any personal information we hold about you.
Right to withdraw consent. You have the right to withdraw your consent at any time when we rely on your permission to process your personal data.
Right to object. You have the right to object to our use of data about you.
Right to restrict processing. In certain circumstances, you have the right to restrict our processing of your personal data to storage only, subject to some exceptions. This right applies when:
- You have contested the accuracy of your personal data and we are still verifying its accuracy.
- Your personal data has been unlawfully processed under the GDPR.
- You need for us to keep your data in order to establish, exercise, or defend a legal claim.
- You have previously objected to our processing of your personal data and the status of that review is still pending.
Right to lodge a complaint with a supervisory authority. You have a right to lodge a complaint with a supervisory authority. For more information, you can visit theInformation Commissioner’s Office website at https://ico.org.uk/, the Federal Data Protection and InformationCommissioner’s website at https://www.edoeb.admin.ch/, or see a list of EU Data Protection Authorities athttps://www.gdprregister.eu/gdpr/dpa-gdpr/.
Inquiries
Controller contact information
Milk Makeup
This section provides additional information for people in Canada. The terms used in this section have the same meaning as in the Personal Information Protection and Electronic Documents Act (PIPEDA).
Collection and Disclosure of Personal Data
The personal information we collect and how we share it is described above in our Privacy Policy.
We may disclose your personal information to the following third parties for business purposes: Afterpay, Apple Pay, DMi Partners, Facebook Pay, Google Ads, Google Analytics, Google Pay, Meta Ads, Microsoft Ads, PayPal - Pay with PayPal, Venmo, Pay Later, Pinterest Ads, Rakuten, Shop Pay, Shopify Network Intelligence, and Tiktok Ads.
Privacy Rights
Individuals in Canada have the following rights regarding their personal information. Make a Privacy Request by clicking here. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.
Right to Access
You have the right to be informed of the existence, use, and disclosure of your personal information and to be given access to that information.
Right to Correct
You have the right to contest the accuracy and completeness of the personal information we have about you, and to have it amended as appropriate.
Right to Withdraw Consent
You have the right to withdraw your consent to the collection, use, and disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice.
Right to Delete
You may request that we delete personal information we have obtained about you. However, we may retain your personal information if it is necessary for certain purposes, as allowed by law.
Right to Opt-Out
You have the right to opt out of the use of your personal information for targeted advertising.
You may exercise your right to opt-out.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Cross-Border Transfers
Your personal information may be processed in foreign jurisdictions, including the United States, where it may be subject to access by foreign courts, law enforcement, and other government agencies, in accordance with the laws of those jurisdictions.
Contact
If you have any questions or concerns regarding how we handle your personal information, you may contact the following person at our organization:
General Counsel
moc.puekamklim@lagel
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Office of the Privacy Commissioner.
