Privacy Policy

Last updated: May 26, 2026

This Privacy Policy describes how ONCE (once skin, doing business as ONCE) collects, uses, and shares your personal information when you use our website at onceskin.com or purchase our custom Korean skincare routine service.

Questions or concerns? Contact us at contact@onceskin.com.

1. Information We Collect

We collect personal information that you provide directly to us, including:

• Email address
• Skin and health information (provided through our quiz — skin type, concerns, sensitivities, prescription skincare use)
• Payment information (processed and stored by Stripe — we do not store your card details)

The skin information you provide may be considered sensitive health data in certain jurisdictions. We process it solely to generate your personalized skincare routine.

2. How We Use Your Information

We use your information to:

• Generate and deliver your personalized skincare routine
• Process and fulfill your order
• Send transactional emails (order confirmation, routine delivery)
• Send marketing communications (you can unsubscribe at any time)
• Comply with legal obligations

3. AI-Based Processing

ONCE uses artificial intelligence to analyze your quiz responses and generate a personalized skincare routine. Your quiz data is sent to Anthropic (Claude AI) for this purpose. Anthropic processes your data in accordance with their privacy policy and data processing agreement. You may opt out of AI-based processing by not submitting the quiz, or by contacting us at contact@onceskin.com to request deletion of your data.

4. Third Parties We Share Data With

We share your data with the following third-party service providers to operate our service:

• Stripe — Payment processing. Privacy policy
• Anthropic — AI routine generation
• Resend — Transactional email delivery
• Mailchimp — Marketing email communications
• Cloudflare — Website hosting and infrastructure

We do not sell your personal information to third parties.

5. International Data Transfers

Our service providers are based in the United States. If you are located in the EU, UK, or other regions with data transfer restrictions, your data may be transferred internationally. All transfers are conducted under the European Commission's Standard Contractual Clauses or equivalent safeguards.

6. Data Retention

We retain your personal information for up to 2 years, or until you request deletion. Payment records may be retained longer as required by law.

7. Security

We implement appropriate technical and organizational measures to protect your personal information. However, no transmission over the internet is 100% secure and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction or deletion of your data
• Opt out of marketing communications
• Withdraw consent for processing sensitive data
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at contact@onceskin.com.

9. US State Privacy Rights

If you are a California, Colorado, Connecticut, Virginia, or other US state resident with applicable privacy rights, you have the right to know what personal information we collect, request deletion, and opt out of any sale of your data (we do not sell data). To submit a privacy request, email contact@onceskin.com.

10. Cookies

We do not use tracking cookies or web beacons on our website.

11. Children

Our service is not directed to children under 13. We do not knowingly collect information from children.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The updated date at the top of this page will reflect any changes. Continued use of our service after changes constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions, requests, or concerns:

ONCE
Email: contact@onceskin.com