Privacy Policy

Version 1.0, in force from 2026-09-16. An attorney review is scheduled; any change will be published here with a new version and date.

For skinbyklynn.com, operated by Skin By K.Lynn LLC, Washington, D.C. 20003.

Last updated: 2026-09-16.

KEY TERMS

STANDARD TERMS

1. What we collect

1.1 When you send a request. The request forms on this site ask for your name, your email address, your brand name, the address your samples ship from, the product names or product type you want work on, and any notes or project brief you choose to write. The testing request also carries the list of services you built on the site.

1.2 When you sign up to the newsletter. The popup asks for your email address and nothing else.

1.3 Technical information. Our host records the ordinary information a web server records, including your IP address, for security and to stop a form being flooded. We do not use it to build a profile of you and we do not combine it with anything else.

1.4 We do not ask for, and you should not send us, sensitive personal information: health data, government identifiers, or payment card numbers.

2. Cookies, trackers and browser storage

2.1 This site sets no cookies. There is no analytics, no advertising pixel, and no third-party tracker. The site loads no scripts, fonts, images or stylesheets from anyone else, and its Content Security Policy blocks it from doing so.

2.2 The site does use your own browser's local storage, which stays on your device and is never sent to us:

• skl-request-v1 holds the list of services you have added, so it survives a page reload.
• skl-news-v1 records that you have seen or dismissed the newsletter popup, so it stops reappearing.

2.3 Clearing your browser's site data for skinbyklynn.com deletes both, and clears your request list.

3. What we do with it

3.1 We use what you send us to answer your request, quote it, invoice it, and do the work. That is all.

3.2 Newsletter addresses are used to send you news about Skin By K.Lynn and nothing else.

3.3 We do not sell your information, and we do not share it for anyone else's advertising.

4. Who else touches it

4.1 SendGrid (Twilio) delivers the mail. When you send a request, SendGrid carries one email to our business inbox with what you typed, and one acknowledgement back to the address you gave.

4.2 Vercel hosts the site and runs the code that handles the form.

4.3 Cloudflare provides DNS for skinbyklynn.com and forwards mail sent to inquiry@skinbyklynn.com to the business inbox at Google (Gmail).

4.4 We share your information with a testing laboratory or a regulatory partner only when you have ordered a service that partner performs, and only what that partner needs to do the work. Those partners are under confidentiality obligations to us.

4.5 We will disclose information if the law requires it.

5. How long we keep it

5.1 Request emails stay in our business inbox for as long as needed to respond to and service the request, and for our business records after that.

5.2 Newsletter addresses stay on the list until you unsubscribe.

5.3 Records we need for tax, accounting or legal reasons are kept as long as the law requires.

5.4 Samples you send are a separate matter and are held and disposed of under the Testing and Regulatory Services Terms, not this policy.

6. Your choices

6.1 Unsubscribing from the newsletter. Reply to any newsletter email with the word "unsubscribe" and we will take you off the list by hand.

6.2 Deletion, correction, or a copy. Email inquiry@skinbyklynn.com and say what you want. We will do it, and we will tell you when it is done. We may keep what we are legally required to keep, and we will say so if that applies.

6.3 You do not need an account to do any of this, because there are no accounts.

6.4 State privacy rights. If a state privacy law gives you rights over your information, email inquiry@skinbyklynn.com and we will honor them.

7. Commercial email

7.1 We send you marketing email only if you asked for it, at the address you gave us.

7.2 Every marketing email we send identifies Skin By K.Lynn LLC, carries our postal address, tells the truth in its subject line and its from line, and gives you a way to stop receiving them. We act on an unsubscribe request within ten business days. This is what the CAN-SPAM Act requires and what we do.

7.3 Transactional email, meaning the acknowledgement of a request, an invoice, or a report, is not marketing and is sent because you asked us to do work.

8. Children

8.1 This site is for businesses, and it is not directed at children. We do not knowingly collect information from anyone under 13. If you believe a child has sent us something, email inquiry@skinbyklynn.com and we will delete it.

9. Security

9.1 The site runs over HTTPS only. Forms are signed and rate limited. We do not store your request on the website: it becomes an email and lives in our business inbox.

9.2 No system is perfectly secure, and we do not promise one is.

10. Changes

10.1 If we change this policy we publish the new version here with a new date. If the change is significant and we have your email because you subscribed, we will tell you.

11. Contact

Skin By K.Lynn LLC Washington, D.C. 20003 inquiry@skinbyklynn.com

Sources

• Common Paper standards, plain-English drafting and the Key Terms plus Standard Terms structure: https://commonpaper.com/standards
• CAN-SPAM Act of 2003, 15 U.S.C. 7701 et seq., and the FTC's CAN-SPAM Compliance Guide for Business.
• Children's Online Privacy Protection Act, 15 U.S.C. 6501 et seq.
• Verified against the site as built on 2026-09-16: site/app/actions.ts (form fields, SendGrid send, IP-based rate limit), site/lib/form-token.ts (signed form token, explicitly no cookie), site/lib/cart-store.ts (skl-request-v1), site/components/NewsletterPopup.tsx (skl-news-v1), site/next.config.ts (Content Security Policy restricting every fetch to the site's own origin), docs/status.md (Vercel hosting, Cloudflare DNS and Email Routing, no payment provider).