Welcome to https://metabolicaesthetician.com (the “Website”). This Privacy Policy explains how Sarit Unlimited LLC, doing business as Skin Shine by Sarit (“I”, “me”, or “my”), collects, uses, shares, and protects your personal data, and what rights you have over it. Please read it carefully.
Sections 1 to 14 form my Privacy Policy. Section 13 contains additional information for residents of certain U.S. states. Where I give you a separate notice at the point of collection (for example, on a form or checkout page), that notice supplements this Privacy Policy.
1. Who I am and my commitments
I respect your right to know how your personal data is handled. For the purposes of the EU General Data Protection Regulation 2016/679 (“GDPR”), the UK GDPR, and other applicable data protection laws (together, “Data Protection Legislation”), Sarit Unlimited LLC is the controller of the personal data collected through this Website and through my related services.
Contact for privacy matters: info@themetabolicaesthetician.com
This Privacy Policy applies to everyone (“Users”) who visits the Website, buys my products, books or attends a consultation, downloads a free or paid resource, fills out a form, follows my social media channels or messages me there, receives my marketing communications, or otherwise interacts with me.
Online sales. Orders placed through the Website, and customer service for those orders, are handled directly by me. I process your data to manage your order, take payment, ship your products, provide support, and carry out related administrative tasks.
Third-party platforms. Some of my services (such as booking, digital product delivery, and supplement dispensing) run on third-party platforms. Those platforms act as processors or independent controllers under their own privacy policies, as described in Section 6.
Please tell me if your personal information changes so that my records stay accurate.
2. Applicable law
I process personal data under the laws that apply to your place of residence, including:
- for residents of the European Economic Area, the United Kingdom, and Switzerland, the GDPR and equivalent laws, without prejudice to mandatory consumer protection rules in your country; and
- for residents of U.S. states with comprehensive privacy laws, the state laws described in Section 13.
3. What personal data I collect
Depending on how you interact with me, I may collect:
- Identity and contact data: name, email address, phone number, shipping and billing address.
- Order and payment data: products purchased, order history, billing details, and transaction confirmations. Payment card details are collected and processed by my payment providers. I do not store full card numbers.
- Account and communication data: messages you send me by email, form, or direct message, your marketing preferences, and your replies to my emails.
- Consultation and wellness data: information you choose to share when you book or attend a consultation, complete an intake form, or order functional lab testing. This can include information about your skin, health history, diet, lifestyle, medications, supplements, and lab results. Some of this is “special category” (health) data under the GDPR. See Section 4.
- Skin and routine information: information you give me about your skin and skincare routine so that I can make recommendations.
- Technical and usage data: IP address, device and browser type, pages viewed, links clicked, referring site, approximate location, and cookie identifiers, collected through cookies, pixels, and similar technologies.
- Social media data: your handle and the content of comments or messages when you interact with my accounts, including when you comment a keyword to receive a resource through an automated message.
- Content you submit: photos, testimonials, reviews, or survey answers that you send to me.
I collect this data directly from you, automatically when you use the Website, and from service providers and advertising platforms (for example, when you interact with my ads).
4. Why I use your data and my legal bases
Under the GDPR I need a legal basis for each use of your personal data. The table below sets out what I do and why.
| Purpose | Examples | Legal basis |
|---|---|---|
| Fulfil orders and provide services | Processing payments, shipping products, delivering digital products, booking and holding consultations, handling returns or damage claims, customer support | Performance of a contract with you |
| Marketing emails and other direct marketing | Newsletters, educational content, product news, offers, event or launch announcements, and follow-up emails after you download a resource | Your consent, or, where the law allows (for example, for existing customers), my legitimate interest in promoting my own similar products and services. You can opt out at any time. |
| Improve my Website, products, and services | Analytics, understanding which content and products are popular, testing and improving the Website, developing new products, asking for feedback | My legitimate interests in running and improving my business, or your consent where required (for example, for non-essential cookies) |
| Personalise your experience and recommendations | Tailoring content, product suggestions, and follow-ups based on what you tell me and how you use the Website | My legitimate interests, or your consent where required |
| Advertising and measurement | Showing and measuring ads on platforms such as Meta (Facebook and Instagram) and Google, using pixels, custom audiences, and lookalike audiences | Your consent where required (for example, through my cookie banner), otherwise my legitimate interests |
| Health and wellness information you share | Reviewing your intake information and lab results to prepare your consultation and recommendations | Your explicit consent (GDPR Article 9(2)(a)). You may withdraw it at any time. |
| Security and fraud prevention | Detecting fraudulent payments, protecting accounts and the Website | My legitimate interests, and legal obligations |
| Legal and accounting compliance | Keeping tax and financial records, responding to lawful requests from authorities, establishing or defending legal claims | Legal obligation, and my legitimate interests |
| Promotions and contests | Running giveaways and notifying winners | Performance of a contract (the promotion rules), or your consent |
Health data and explicit consent. I only process health-related information you provide for consultations, intake forms, or lab testing with your explicit consent, which I ask for at the point you provide it. If you withdraw consent, I will stop that processing, although this will not affect processing that took place before withdrawal and may limit the services I can offer you.
Marketing choices. You can unsubscribe from marketing emails at any time using the “unsubscribe” link in any email, or by emailing me. If you opt out of marketing, I may still send you non-promotional messages, such as order confirmations, shipping updates, and service notices.
Automated processing. I do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. I use automation for convenience, such as automated direct-message replies when you comment a trigger word, and automated email sequences.
5. What happens if you do not provide your data
Some data is necessary to process your order (such as your name, shipping address, email, and payment details) or to book a consultation. If you do not provide it, I may be unable to complete your order or provide the service. Providing other information, such as optional survey answers or marketing preferences, is voluntary and will not affect your ability to use the Website or buy products.
6. Who I share your data with
I do not sell your personal data for money. I share it only as needed with trusted third parties that help me run my business, such as:
- E-commerce and Website hosting providers, to operate the Website and online store.
- Payment processors, to take and process payments.
- Shipping and logistics providers, to deliver and return orders.
- Booking and scheduling platforms, to manage appointments and consultations.
- Digital product and checkout platforms, to deliver ebooks, courses, and consultation bookings.
- Supplement dispensary and laboratory partners, when you choose to order supplements or functional lab tests through me. These providers may handle your information under their own privacy policies.
- Email and marketing providers, to send newsletters and manage subscriptions.
- Social media and messaging automation tools, to deliver resources you request through comments or direct messages.
- Analytics and advertising providers (for example, Google and Meta), to measure Website use and advertising performance.
- Form and data collection providers, to receive messages and sign-ups you submit.
- Professional advisers, fraud prevention services, and authorities, where needed for legal, accounting, or security reasons or where I am legally required to disclose information.
Where a provider acts as my processor, I require it by contract to protect your data and use it only on my instructions. If my business is sold or restructured, your data may be transferred to the new owner, who must continue to protect it in line with this Privacy Policy.
For advertising, I may share a hashed (scrambled) version of your email address or other identifiers with ad platforms so that I can show ads to you or to people with similar interests. The platforms are not permitted to use that data for other purposes. You can opt out as described in Sections 10 and 13.
7. International transfers
I am based in the United States, and my service providers may be located in the U.S. and other countries. If you are in the EEA, the UK, or Switzerland, your data will be transferred outside those regions. Where required, I rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Addendum, or other lawful transfer mechanisms. You can contact me for more information about these safeguards.
8. How long I keep your data
I keep personal data only for as long as needed for the purposes in this Privacy Policy:
- Order and transaction records: for as long as required by tax, accounting, and consumer laws (generally up to 7 years).
- Consultation and wellness records: for as long as I have a client relationship with you and for a reasonable period afterward, unless you ask me to delete them sooner and I am not legally required to keep them.
- Marketing data: until you unsubscribe or withdraw consent, after which I keep a minimal record so that I can honor your opt-out.
- Website and cookie data: for the periods stated in my cookie settings, generally no longer than 26 months.
When data is no longer needed, I delete or anonymize it.
9. Security
I use reasonable technical and organizational measures to protect personal data against accidental or unlawful loss, alteration, unauthorized access, or disclosure. No method of transmission over the internet is completely secure, so I cannot guarantee absolute security. I recommend you keep your devices and passwords secure.
10. Cookies and tracking technologies
My partners and I use cookies, pixels, web beacons, and similar technologies to make the Website work, remember your preferences, understand how the Website is used, and measure and personalize advertising.
- Essential cookies are needed for the Website to function (for example, to keep items in your cart).
- Analytics and advertising cookies are used only with your consent where the law requires it. For visitors in the EEA, UK, and Switzerland, non-essential cookies are off until you opt in.
You can manage cookies through my cookie banner or settings tool, through your browser settings, or through industry opt-out tools such as https://www.aboutads.info/choices/ and Google's ad settings. If you disable cookies, some parts of the Website may not work properly. I honor Global Privacy Control signals as described in Section 13. Because there is no common standard for “Do Not Track” signals, I do not currently respond to them.
11. Your rights under the GDPR
If the GDPR or similar laws apply to you, you have the right to:
- Access the personal data I hold about you and receive a copy.
- Rectify inaccurate or incomplete data.
- Erase your data in certain circumstances (“right to be forgotten”).
- Restrict my processing in certain circumstances.
- Data portability, meaning to receive the data you gave me in a structured, commonly used format and have it transmitted to another provider where technically feasible.
- Object to processing based on my legitimate interests, and to direct marketing at any time.
- Withdraw consent at any time where I rely on consent, without affecting the lawfulness of processing before withdrawal.
- Complain to your local data protection supervisory authority if you believe your rights have been infringed. I would appreciate the chance to resolve your concern first, so please contact me.
To exercise any right, email info@themetabolicaesthetician.com. I may need to verify your identity first. I will respond within one month, which may be extended by up to two further months for complex requests, in which case I will tell you why. I do not charge a fee unless a request is clearly unfounded or excessive.
12. Children
The Website is intended for adults who are at least 18 years old and is not directed at children. I do not knowingly collect personal data from children. If you believe a child has provided me with personal data, please contact me and I will delete it.
13. Additional information for residents of certain U.S. states
This section supplements the rest of this Privacy Policy for residents of California and other U.S. states with comprehensive privacy laws (together, “State Privacy Laws”).
Categories collected. In the past 12 months I may have collected the categories of personal data listed in Section 3, including identifiers, commercial information, internet or other electronic activity, geolocation (approximate), and inferences drawn from your interactions with me. I may also collect health-related information that you choose to provide for consultations.
Purposes and recipients. I use and disclose personal data for the purposes and with the categories of recipients described in Sections 4 and 6.
Sale, sharing, and targeted advertising. I do not sell personal data for money. However, my use of advertising and analytics cookies and pixels may be considered “sharing” for cross-context behavioral advertising or “targeted advertising” under some State Privacy Laws.
Your rights. Depending on your state, you may have the right to know and access your personal data, correct it, delete it, obtain a portable copy, opt out of targeted advertising, sales, and sharing, limit the use of sensitive personal data, and appeal my decision on a request. I will not discriminate against you for exercising these rights.
How to exercise your rights. Email info@themetabolicaesthetician.com. I may ask for information to verify your identity, and you may use an authorized agent to submit a request on your behalf, subject to verification. I aim to respond within 45 days, and to opt-out requests within 15 days. If I decline your request, you may appeal by replying to my response and asking for a review.
Opt-out preference signals. I recognize Global Privacy Control signals for cookie-based sale, sharing, and targeted advertising on the browser where the signal is enabled. You can also opt out through my cookie settings tool.
California “Shine the Light.” I do not disclose personal information to third parties for their own direct marketing purposes.
14. Third-party links and changes to this policy
The Website and my social media posts may link to third-party websites and services. I am not responsible for their privacy practices, so please review their policies.
I may update this Privacy Policy from time to time, for example to reflect changes in law or in how I handle data. The updated version will be posted on this page with a new “Last updated” date. If changes are material, I will give additional notice where required.
Contact me
Sarit Unlimited LLC, doing business as Skin Shine by Sarit
Email: info@themetabolicaesthetician.com
Website: https://metabolicaesthetician.com
