Privacy Policy

Last updated: October 5, 2026 (effective date)

1. Who this policy covers

This Privacy Policy explains how MIJU BEAUTY Inc. ("MIJU," "we," "us"), 1303 W Valencia Dr. #309, Fullerton, CA 92833, collects, uses, and shares personal information through miju.odoo.com, mijubeauty.com, our online forms, and our related sales and customer service activities (together, the "Site"). It applies to retail customers, wholesale account holders and applicants, and website visitors.

2. Information we collect

Information you provide:

• Contact details: name, email address, phone number, billing and shipping addresses.
• Account and business details (wholesale): business name, business type, website and social media links, store location, job title, resale or seller's permit and certificate information, tax identification number, trade references, and documents you submit for verification.
• Order and payment information: products ordered, order history, payment method, and payment status. Card payments are entered on forms provided by Stripe; we do not store your full card number. For wire transfers we receive the payer and bank information shown on the transfer.
• Communications: messages you send us through our contact form, email, phone, or chat, and reports about product concerns.
• Identity verification for certain payment methods (for example, photo ID for cash on delivery or pickup), when we request it.

Information collected automatically:

• Device and usage information: IP address, browser type, device type, approximate location derived from IP, referring pages, pages and products viewed, search terms, and dates and times of visits.
• Cookies and similar technologies (see Section 5), including information about items added to your cart and whether checkout was completed.

Information from others: payment status and fraud signals from Stripe; delivery updates from carriers; order and retailer information from Faire for orders placed on Faire; and publicly available business information we use to verify wholesale applicants.

3. How we use information

• To review applications, open and manage accounts, and show wholesale pricing to approved accounts.
• To process, ship, and support orders, returns, and claims.
• To verify identity, business status, and payments, and to detect and prevent fraud, unauthorized resale, and security incidents.
• To communicate with you about orders, accounts, product updates, and, where permitted, promotions. You can unsubscribe from marketing emails at any time using the link in the email.
• To remind you about items left in your cart (abandoned-cart reminders), when you have provided your email address.
• To understand how the Site is used and improve our products, Site, and services.
• To handle product safety reports, including forwarding them to the brand responsible for the product.
• To comply with law, tax and recordkeeping obligations, and to enforce our Terms and Conditions.

4. Who we share information with

We share personal information only as described here:

• Service providers that process information for us under contract, including: Odoo (our website, e-commerce, customer, and order management platform); Stripe (card payment processing and fraud prevention); Jotform (our interest and application forms); email delivery providers; shipping carriers and logistics providers; banks; and IT, hosting, and professional advisers (such as accountants and attorneys).
• Faire, for orders you place through Faire. Faire's own privacy policy applies to information you give Faire.
• Brands we distribute, limited to what is needed to handle a product safety or quality report, respond to a warranty or recall matter, or enforce brand channel and authorized reseller rules (for example, a wholesale account's business name and sales channels).
• Legal and safety: government authorities, courts, or others when required by law, or when we believe disclosure is needed to protect rights, property, or safety, or to prevent fraud.
• Business transfers: a buyer or successor in connection with a merger, financing, sale of assets, or similar transaction, subject to this policy.

We do not sell personal information for money, and we do not share it with third parties for their own cross-context behavioral advertising.

5. Cookies, analytics, and tracking

Our Site uses cookies and similar technologies provided by Odoo to keep you logged in, remember your cart, store preferences, measure visits and page views, and track visitor activity on our pages (for example, which products are viewed). Odoo's tools also let us see when a cart is started but not completed so we can send reminders. Stripe may set cookies on checkout pages for fraud prevention, and Jotform may set cookies when you use an embedded form. You can block or delete cookies through your browser settings, but parts of the Site (such as login and checkout) may not work without them.

Do Not Track. Some browsers send a "Do Not Track" signal. There is no common industry standard for responding to these signals, and our Site does not currently respond differently to them. Third parties whose tools appear on our Site (such as those named above) may collect information about your online activities over time and across different websites in accordance with their own privacy policies.

Global Privacy Control. If our Site later uses cookies for targeted advertising, we will treat a Global Privacy Control signal from your browser as a request to opt out of that sharing for that browser.

6. How long we keep information

We keep personal information for as long as needed for the purposes described above, including keeping account and order records for as long as your account is active and afterward as required for tax, accounting, legal, product safety, and fraud prevention purposes (for example, order and resale certificate records are typically kept for several years as required by tax law). Website analytics and cart data are kept for shorter periods. When information is no longer needed, we delete or de-identify it.

7. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted connections (HTTPS), payment processing by Stripe, and access limits for our staff. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please protect your login and contact us right away if you suspect unauthorized access. We will never ask you to send card numbers by email, and we will never change our wire instructions by email alone.

8. Your choices and how to review or change your information

• Account information: logged-in customers can review and update much of their contact and address information in their account. You can also ask us to correct anything that is wrong.
• Marketing emails: use the unsubscribe link in any marketing email or contact us.
• Requests: to request access to, correction of, or deletion of your personal information, contact us using the methods in Section 13. We will verify your request by matching information we already have (for example, your account email and order details). We may keep information we are legally required or permitted to keep.

9. California privacy rights

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"), applies to businesses that meet certain thresholds (for example, annual gross revenue above the inflation-adjusted amount set by the California Privacy Protection Agency, currently $26,625,000, or buying, selling, or sharing personal information of 100,000 or more California consumers or households). Whether or not the CCPA applies to MIJU in a given year, we choose to honor the following requests from California residents, subject to verification and legal exceptions:

• Know and access: the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to.
• Delete personal information we collected from you.
• Correct inaccurate personal information.
• Opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising.
• Limit use of sensitive personal information. We use sensitive information (such as identification documents or tax identification numbers for account verification) only for purposes permitted by law, such as verifying accounts, preventing fraud, and completing transactions.
• Non-discrimination. We will not deny service or charge different prices because you exercised these rights.

Categories collected in the past 12 months: identifiers (name, email, phone, address, IP address); customer records and commercial information (orders, payment status); professional or business information (business details for wholesale accounts); government or tax identifiers where submitted for verification; internet activity (browsing and cart activity on our Site); and approximate geolocation from IP address. These are collected from the sources and used and disclosed for the purposes described in Sections 2 through 4.

You may submit a request through our contact form, by calling +1 657-790-0000, or by mail. You may use an authorized agent; we may ask the agent for proof of permission and ask you to verify your identity directly. We aim to respond within 45 days.

"Shine the Light." California residents may ask once per year whether we disclosed personal information to third parties for their direct marketing purposes. We do not make such disclosures.

10. Children

Our Site is intended for adults and businesses. It is not directed to children under 13, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact us and we will delete it.

11. International visitors

We are based in the United States, and the Site is operated from the United States. If you use the Site or do business with us from Mexico, Latin America, or elsewhere, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country. Where local law gives you additional rights, contact us and we will respond as required.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and change the "Last updated" date above. If we make material changes, we will also provide notice on the Site or by email to account holders before the changes take effect where appropriate.

13. Contact us

MIJU BEAUTY Inc., Attn: Privacy
1303 W Valencia Dr. #309, Fullerton, CA 92833
Phone: +1 657-790-0000
Online: Contact form (please mention "Privacy Request")