Home / Privacy Policy
Your Information

Privacy Policy

Last updated: September 23, 2026

This policy covers both polymorphbeauty.com and the Polymorph Beauty mobile app for iOS. Where the two behave differently, that's called out: the website uses analytics cookies, and the app records a few events only when a signed-in shopper uses Ask Ellee.

The Short Version

  • We don't sell your personal information.
  • Your account, orders, and payments are handled by Shopify, our ecommerce provider.
  • We never see your card details. Payment happens on Shopify's own secure checkout.
  • The website uses Google Analytics to understand how people find and use it, and Klaviyo to record on-site activity for visitors it can tie to an email address. In the mobile app, the only analytics are a few events recorded when a signed-in shopper uses Ask Ellee, and the app contains no advertising software.

Browsing Without an Account

You can browse the full catalog on either the website or the app without signing in or giving us anything. Retail pricing shows by default; professional pricing requires an account, because it depends on your account's trade status.

If You Create an Account or Sign In

Accounts are Shopify accounts, and you sign in through Shopify's own login screen. We never see or store your password.

Once you're signed in, we receive from Shopify your name and email address, your order history, and your account tags — the tags are how Shopify records professional or wholesale eligibility, and they're what tell the site and app which pricing to show you.

Your login session is stored on your own device: in your browser's local storage on the website, and in the device's secure keychain (iOS Keychain) in the app. Signing out removes it.

Your License Answer

Professional products and training are sold to licensed lash and brow artists and to students currently enrolled in an esthetics program, so we ask once, when you first add professional product to your bag, whether you are licensed. Your answer, licensed, esthetics student, or not yet, is saved to your Shopify customer record rather than only to this browser. That is what stops us asking again every time you sign in on a new device, and it is why the same answer applies in our mobile app.

We store the answer, the date you gave it, and which of our surfaces you gave it on. We never ask for, and never store, a license number, a photograph of a license, or any supporting document. Nobody outside Polymorph Beauty is told what you answered.

If you attend one of our classes and check in with the code your educator provides, we add tags to your customer record noting that class and the date. That is how your trade pricing is set up before you leave the room.

Cart, Checkout and Payment

Your cart lives in Shopify. Your device stores only a cart identifier so we can find that cart again.

When you check out you're handed to Shopify's hosted checkout, where you enter your shipping and payment details directly with Shopify and its payment processors. Card numbers are never sent to us and never stored by us. If you pay with Shop Pay, that step happens on shop.app, which is operated by Shopify.

For signed-in orders placed in the app, the app sends your cart identifier and your Shopify session to our checkout service so it can confirm with Shopify who you are and apply the professional or wholesale pricing you qualify for. That service keeps no database and retains no record of the request once it completes.

Cookies and Analytics (Website)

The website uses Google Analytics 4 to understand how visitors find and move through it. This sets a cookie (_ga) that gives your browser a random identifier. We use it to see which pages and products get attention and where our visitors come from — not to identify you personally.

Analytics records page views and shopping actions such as viewing a product, adding to cart, and starting checkout. Completed purchases are reported from Shopify's own checkout.

Shopify also sets its own cookies necessary to keep your cart and session working.

The website also loads Klaviyo, our email provider. Its script sets a cookie (__kla_id) holding a random identifier for every visitor, and Klaviyo keeps nothing about a visitor it can't identify. Once your browser is tied to your email address, which happens when you sign in, click one of our emails, or submit a Klaviyo sign-up form, Klaviyo records your on-site activity against your profile: your visits, the products you view, the items you add to your bag, and your use of Ask Ellee (that you engaged with Ellee, any products Ellee recommended, and whether you subscribed through Ellee). Activity from earlier in the same visit is added at that point. We use it to send relevant email, such as a reminder about items left in your bag. Blocking cookies in your browser also stops this tracking.

You can block or delete cookies in your browser settings, or install Google's Analytics Opt-out Browser Add-on. Blocking analytics cookies doesn't affect your ability to shop or check out.

The mobile app itself sets no cookies, and uses no third-party advertising, attribution, or crash-reporting software. Checkout, sign-in, and order status open Shopify's own pages inside the app, and those pages use Shopify's cookies to keep your cart and session working. The app does not use your device's advertising identifier and does not track you across other apps or websites. Its only analytics are first-party events from the Ask Ellee assistant: when a signed-in shopper uses Ask Ellee, the app records that they engaged with Ellee, any products Ellee recommended (a product link and how many), and whether they subscribed to our emails through Ellee. These events are tied to the account's email address and sent to Klaviyo. Guests send no analytics events.

You can turn these app events off. Open Account and switch off "Allow app analytics". With it off, the app sends no analytics events at all. It is on by default, and the app is available only in the United States.

App-Only: Notifications and Saved Items

Notifications. If you allow them, the app sends a push notification token, your device type, the app's language, and whether you've turned on promotional notifications to our notification service, linked to your signed-in account's email address, so order and shipping updates reach the right device in the right language. You can turn notifications off at any time in your device settings, and the rest of the app keeps working.

Saved items. Items you save in the app are stored only on that device. They're never uploaded, don't sync between devices, and are lost if you delete the app.

Marketing preferences. The app's Account screen has Marketing preferences, where you can opt in to promotional notifications and to marketing email. Both are off unless you turn them on, and order and shipping notifications are separate and are not marketing. Turning on email offers records your consent in Shopify, which Klaviyo, our email provider, receives. You can turn either off in the same place at any time, and every marketing email has an unsubscribe link.

Ask Ellee

Our assistant, available on the site and in the app, sends what you type to the service that generates the reply so it can answer you. Please don't enter payment details or sensitive personal information into the chat.

To improve Ellee's answers, we keep a shortened copy of the questions people type to her, about the first 200 characters, with email addresses and phone numbers removed automatically. We use these only to make Ellee better at answering. We do not use them to work out who you are, and we never sell them or share them for advertising. Because a question can contain anything you chose to type, we cannot promise every personal detail is removed, which is the other reason for the note above.

Ask Ellee offers an optional voice button on the website. It uses your browser's built-in speech recognition, so your spoken audio is processed by your browser's maker (for example Google in Chrome or Apple in Safari) to turn it into text. We never receive or store the audio. Only the resulting text is sent to Ellee, and you can always type instead.

Ask Ellee in the app has an optional microphone button. Tapping it asks for microphone and speech recognition permission. Apple's speech recognition turns what you say into text, so the audio may be sent to Apple for processing, where it is handled under Apple's privacy policy. Polymorph Beauty never receives or stores the audio. Only the text appears in the message box, where you review it before sending, and you can always type instead.

Student Sign-Up

If you join our student list, for example from a QR code at a school demo, we ask for your email address and the month you finish your program, and optionally your first name and school. If you arrive from a school demo, we also record the school and demo date the QR code carries. We also record how you reached the site, meaning any campaign tags in the link you followed and the site you came from, so we know which of our efforts brought you to us. We add these details to your profile on our email list so we can send student offers and reach you around graduation. You can unsubscribe at any time.

Professional Sign-Up

If you join our professional list, usually on the day you attend one of our classes, we ask for your name, email address, salon or business, and your city and state. Your phone number and the systems you work with are optional. If you sign up from a link tied to a particular class or event, we record which one. We also record how you reached the site, meaning any campaign tags in the link you followed and the site you came from, so we know which of our efforts brought you to us. Signing up adds you to our marketing email list, which is the point of the form, and every email we send carries an unsubscribe link.

Demo Requests

If you request a session through Book a Demo, we ask for your name, email address, school or salon, and whether you are a school, salon owner, artist or student. For in-person sessions we also ask for the city, state and number of attendees. Your phone number, preferred dates, notes and the products you'd like to cover are optional. We also record how you reached the site, meaning any campaign tags in the link you followed and the site you came from, so we know which of our efforts brought you to us. We use these details to arrange your session and reply to you, and we keep them with your profile in our email service. We add you to our marketing email list only if you tick the opt-in box.

Text Messages (SMS)

We use text messaging for internal operational alerts only, such as telling our own team when a product has sold out. We do not run a marketing SMS program and we do not text customers.

We never sell, rent, or share mobile numbers or SMS consent with anyone for marketing purposes. A number given to us for text messages is used only to send the messages that were asked for, and is shared only with Twilio, the service that delivers them on our behalf.

Message frequency varies with the events being reported, and is typically fewer than five messages per week. Message and data rates may apply. Reply STOP to any message to stop receiving them, or HELP for help.

Who Your Information Goes To

  • Shopify — accounts, carts, orders, and the payment details you enter at checkout. Runs our store and payment processing.
  • Twilio delivers our text messages.
  • Google Analytics — website usage data, tied to a random cookie identifier rather than your name.
  • Klaviyo — our email marketing; on-site activity for website visitors identified by email address; and the Ask Ellee analytics events on the website and in the app.
  • Cloudflare — hosts our checkout, notification, and assistant services.
  • Expo and Apple — deliver push notifications to your device.

Each handles data under its own privacy policy. We don't share your information with anyone else, and we don't share it for advertising.

How Long We Keep Things

Account, order, and payment records are held by Shopify under its retention practices and our obligations as a merchant. Notification pairings last while you have notifications switched on. Analytics data expires on Google Analytics' own schedule. Saved Ask Ellee questions are kept for 30 days and then deleted automatically. Anything stored on your device — login session, cart identifier, saved items — goes when you sign out, clear your browser data, or delete the app.

Your Choices and Rights

You can turn notifications off in device settings, sign out to clear your session, block cookies in your browser, or delete the app to remove everything held locally.

Depending on where you live, you may also have the right to access, correct, delete, or receive a copy of your personal information, and to object to certain uses of it. Email us at info@polymorphbeauty.com and we'll action it with Shopify. We won't treat you differently for exercising these rights.

Children

Our products and training are intended for professionals and adult retail customers. We don't knowingly collect information from children under 13.

Changes

If this policy changes in a meaningful way we'll update the date at the top and, where it matters, tell you directly.

Questions about your information, or want a copy of what we hold? Contact us at info@polymorphbeauty.com or (775) 420-4459.

Polymorph Beauty
3095 Heatheridge Lane
Reno, NV 89509