Privacy policy
Privacy Policy
Last Updated: April 17, 2026
This Privacy Policy describes how BLDG Active, Inc. (“BLDG Active”, “we”, “us”, or “our”), the maker of Active Skin Repair® products, collects, uses, shares, and protects personal information when you visit activeskinrepair.com and any related subdomains, mobile experiences, or services (collectively, the “Site”), purchase our products, subscribe to our communications, or otherwise interact with us.
This Policy applies to personal information we collect online. It does not apply to information collected offline or by third parties whose websites or services may be linked from the Site. By using the Site or providing us with personal information, you acknowledge that you have read and understood this Policy. If you do not agree, do not use the Site.
California residents: Please see Section 11 for additional rights and disclosures required under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), including how to exercise your right to opt out of the sale or sharing of your personal information.
1. Information We Collect
We collect the following categories of personal information:
Information you provide directly. When you create an account, place an order, subscribe to emails or SMS, submit a review, enter a promotion, apply to our affiliate or wholesale programs, or contact us, you may provide:
• Identifiers: name, shipping and billing address, email address, phone number, account username and password, and, where applicable, tax ID or reseller certificate information.
• Commercial information: order history, products purchased, returns, subscription preferences, and customer service communications.
• Payment information: payment card details and billing address, which are collected and processed directly by our PCI-DSS compliant payment processors (including Shopify Payments). We do not store full payment card numbers on our systems.
• User-generated content: reviews, photos, videos, testimonials, and social media content you submit or tag us in.
• Preferences and communications: marketing preferences, survey responses, and correspondence with our customer service team.
Information collected automatically. When you visit the Site, we and our service providers automatically collect:
• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, language, and time zone.
• Usage data: pages viewed, referring and exit pages, links clicked, search terms, time spent on pages, and the dates and times of your visits.
• Location data: approximate geographic location derived from your IP address.
• Cookies and similar technologies: as described in Section 7.
Information from third parties. We may receive information about you from:
• Retailers and marketplaces (such as CVS, Amazon, and iHerb) when you purchase through them and they share order data with us.
• Advertising and analytics platforms (such as Meta, Google, and TikTok), which provide us with aggregated data about ad performance and audience characteristics.
• Affiliate and influencer partners who refer customers to us.
• Social media platforms when you interact with our content, tag us, or log in through social sign-on.
• Service providers who help us verify information, detect fraud, or enrich our customer records.
Sensitive information. We do not knowingly collect sensitive personal information (such as government IDs, precise geolocation, health data, or biometric data) in the ordinary course of our business. You should not submit sensitive information to us except where specifically requested (for example, a tax ID for wholesale accounts).
2. How We Use Your Information
We use personal information for the following purposes:
• To fulfill orders and provide services: processing transactions, shipping products, managing subscriptions, processing returns and refunds, and providing customer support.
• To operate and improve the Site: maintaining Site functionality, analyzing usage patterns, troubleshooting, developing new products and features, and conducting research.
• To communicate with you: sending order confirmations, shipping updates, subscription notices, service announcements, responses to inquiries, and — with your consent where required — marketing emails, text messages, and promotional offers.
• To personalize your experience: showing you products and content we think may be relevant, remembering your preferences, and tailoring our marketing.
• For advertising and analytics: measuring campaign performance, attributing conversions, building and targeting audiences, and serving you interest-based advertising on third-party platforms (see Sections 6 and 7).
• For safety, security, and fraud prevention: verifying identity, detecting and preventing fraud, investigating violations of our Terms of Service, and protecting our rights, property, and users.
• To comply with legal obligations: responding to subpoenas, court orders, and regulatory requests; maintaining records required by law; and enforcing our agreements.
• For business transfers: evaluating, negotiating, or completing a merger, acquisition, financing, reorganization, or sale of assets.
We may also use information in aggregated or de-identified form that cannot reasonably be used to identify you, for any lawful purpose.
3. Legal Bases for Processing
Where required by law, we rely on one or more of the following legal bases to process your personal information:
• Performance of a contract — to process and fulfill your orders and provide services you request.
• Your consent — for marketing communications and other processing where consent is required; you may withdraw consent at any time.
• Legitimate interests — to operate and improve our business, prevent fraud, secure our Site, and market our products, provided these interests are not overridden by your rights.
• Legal obligation — to comply with applicable laws, regulations, and legal process.
4. How We Share Your Information
We do not sell your personal information for money. However, under the broad definitions in the CCPA and similar laws, some of our data practices — particularly the use of advertising cookies and pixels — may qualify as “selling” or “sharing” personal information. See Section 11 for your opt-out rights.
We share personal information with the following categories of recipients:
Service providers and processors who perform services on our behalf and are contractually restricted from using the information for their own purposes, including:
• E-commerce and hosting: Shopify (our platform provider), which stores order and customer data on secure servers.
• Payment processors: Shopify Payments, Shop Pay, PayPal, and other PCI-DSS compliant processors that handle payment card data.
• Shipping and fulfillment: carriers (such as USPS, UPS, and FedEx) and fulfillment providers to deliver your orders.
• Email and SMS marketing: Klaviyo, which processes customer data to send transactional and marketing communications.
• Customer service and reviews: help-desk platforms, review platforms, and user-content moderation tools.
• Analytics and performance measurement: Google Analytics, Shopify Analytics, and similar tools that help us understand how the Site is used.
• Affiliate program management: Superfiliate and similar platforms that track affiliate referrals and commissions.
• Fraud prevention and security: tools that help us detect fraudulent orders and protect the Site.
Advertising partners with whom we share identifiers, cookies, device IDs, and usage data to measure advertising performance, attribute conversions, build custom and lookalike audiences, and serve interest-based ads — including Meta (Facebook/Instagram), Google (Google Ads and YouTube), TikTok, Pinterest, and other advertising networks. Under the CCPA, this sharing may qualify as “sale” or “sharing” of personal information. You may opt out as described in Section 11.
Retailers and marketplace partners (such as CVS, Amazon, Walmart, and iHerb) when you purchase our products through them or when we coordinate co-marketing activities.
Professional advisors — lawyers, accountants, auditors, and consultants — subject to confidentiality obligations.
Legal and safety recipients: law enforcement, courts, regulators, and other parties when we believe disclosure is necessary to (a) comply with a legal obligation, subpoena, or lawful request; (b) enforce our Terms of Service or other agreements; (c) protect the rights, property, or safety of BLDG Active, our customers, or others; or (d) investigate or prevent fraud or other wrongdoing.
In connection with a business transaction: if we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such transfer as required by law.
With your direction or consent — for example, when you choose to share a review publicly or tag us in social media content.
We do not share your personal information with third parties for their own independent marketing purposes without your consent.
5. Marketing Communications and Your Choices
Email. We send marketing emails with your consent or as otherwise permitted by law (including the CAN-SPAM Act). Every marketing email includes an unsubscribe link. You can also manage preferences or unsubscribe by emailing hello@activeskinrepair.com. Even after you unsubscribe, we may continue to send you transactional messages (order confirmations, shipping updates, account notices, and similar).
SMS/Text messages. Our SMS program is operated by BLDG Active through Klaviyo. Consent is not a condition of purchase. To opt out at any time, text STOP to +1 (855) 685-2201 or reply STOP to any eligible message. For help, text HELP to the same number. Full SMS terms are included in our Terms of Service.
Direct mail and phone. Where we contact you by postal mail or phone, you may opt out by contacting hello@activeskinrepair.com.
Interest-based advertising. You can limit interest-based advertising through the controls described in Section 7 and the opt-out mechanisms described in Section 11.
6. Analytics, Advertising, and Conversion Tracking
We use third-party analytics and advertising services to understand how visitors interact with the Site, measure the effectiveness of our marketing, and serve targeted advertising. These services operate by setting cookies, pixels, SDKs, and similar technologies that collect information such as your IP address, device identifiers, browser type, pages viewed, products viewed or purchased, and conversion events.
The providers we currently use include, but are not limited to:
• Meta Platforms (Facebook Pixel and Conversions API) — for advertising measurement and audience targeting on Facebook and Instagram.
• Google (Google Analytics, Google Ads, and Google Tag Manager) — for website analytics, advertising measurement, and remarketing.
• TikTok (TikTok Pixel and Events API) — for advertising measurement and audience targeting on TikTok.
• Pinterest (Pinterest Tag) — for advertising measurement and audience targeting on Pinterest.
• Shopify Analytics — for native e-commerce analytics and reporting.
• Affiliate and attribution platforms — such as Superfiliate, to track referral conversions.
These providers may combine the information they collect on the Site with information they collect from other sources, including your activity on other websites and apps. Each provider’s processing is governed by its own privacy policy. You can learn more and manage your preferences at:
• Meta: facebook.com/privacy/policy
• Google: policies.google.com/privacy and adssettings.google.com
• TikTok: tiktok.com/legal/privacy-policy
• Pinterest: policy.pinterest.com/privacy-policy
You can also opt out of many interest-based advertising programs through the Digital Advertising Alliance (optout.aboutads.info), the Network Advertising Initiative (optout.networkadvertising.org), or the European Interactive Digital Advertising Alliance (youronlinechoices.eu). Opting out does not stop all advertising — only interest-based targeting.
7. Cookies and Similar Technologies
We and our service providers use cookies, pixels, web beacons, local storage, and similar technologies (“Cookies”) to operate the Site, analyze traffic, personalize your experience, and deliver advertising.
Categories of Cookies we use:
• Strictly necessary Cookies — required for the Site to function (for example, maintaining your shopping cart, authentication, and checkout). These cannot be disabled.
• Functional Cookies — remember your preferences and settings (such as region or language).
• Analytics Cookies — help us understand how visitors use the Site so we can improve it (for example, Google Analytics and Shopify Analytics).
• Advertising Cookies — used by us and our advertising partners to deliver and measure ads, build audiences, and track conversions (for example, Meta Pixel, Google Ads tags, and TikTok Pixel).
Essential Shopify cookies include _session_id, _shopify_visit, _shopify_uniq, cart, _secure_session_id, and storefront_digest, which support session management, cart persistence, and basic site analytics.
Managing Cookies. Most browsers allow you to refuse or delete Cookies through their settings, and you can typically install browser plugins that block tracking technologies. California residents and other eligible users may also opt out of advertising-related Cookies through the “Do Not Sell or Share My Personal Information” link in our Site footer, as described in Section 11. Blocking Cookies may affect Site functionality and your user experience.
Do Not Track. Our Site does not currently respond to browser “Do Not Track” signals. However, we honor Global Privacy Control (GPC) signals from California residents and other consumers where required by applicable law, treating them as a request to opt out of the sale or sharing of personal information.
8. Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to:
• complete transactions and provide customer service;
• comply with legal, tax, accounting, and regulatory obligations (typically up to seven years for financial records);
• resolve disputes, enforce our agreements, and protect our rights;
• maintain business records and continuity; and
• support marketing where permitted.
When personal information is no longer needed, we securely delete, anonymize, or aggregate it. Specific retention periods depend on the type of information, the purpose of processing, and legal requirements. Backups and archived records may persist for additional time until they are overwritten in the ordinary course.
9. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. These include encryption of payment card data using SSL/TLS in transit and AES-256 at rest through PCI-DSS compliant processors, access controls, employee training, and vendor due diligence.
No method of transmission or storage is 100% secure. We cannot guarantee the absolute security of your information. You are responsible for maintaining the confidentiality of any account credentials and for promptly notifying us at hello@activeskinrepair.com of any suspected unauthorized access to your account.
10. Children’s Privacy
The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will delete it promptly. Parents or guardians who believe a child has provided us with personal information may contact hello@activeskinrepair.com.
For California residents, we do not knowingly sell or share the personal information of consumers under 16 years of age without affirmative authorization as required by the CCPA.
If you are between 13 and 18 years old, you should use the Site only with the involvement of a parent or guardian.
11. Your Privacy Rights
Depending on where you live, you may have the following rights with respect to your personal information. We will not discriminate against you for exercising these rights.
11.1 Rights Available to All U.S. Customers
Regardless of your state, you may:
• Access or update your account information at any time through your account dashboard.
• Unsubscribe from marketing emails and text messages as described in Section 5.
• Request deletion of your personal information, subject to legal and business-record exceptions.
• Contact us with questions or complaints at hello@activeskinrepair.com.
11.2 California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights under the CCPA:
• Right to Know — the categories and specific pieces of personal information we have collected about you; the categories of sources; the business or commercial purposes for collection; and the categories of third parties to whom we have disclosed, sold, or shared your information in the past 12 months.
• Right to Delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing — you may direct us not to sell or share (for cross-context behavioral advertising) your personal information.
• Right to Limit Use of Sensitive Personal Information — where applicable (we do not currently use sensitive personal information for purposes that trigger this right).
• Right to Non-Discrimination for exercising your CCPA rights.
Categories of personal information we collect, disclose, sell, or share. In the past 12 months, we have collected and disclosed for a business purpose the categories of personal information listed in Section 1. We have “sold” or “shared” (as broadly defined by the CCPA) the following categories for cross-context behavioral advertising: identifiers (such as device IDs and online identifiers), internet or network activity information, commercial information (such as products viewed and purchased), and inferences drawn from the foregoing. The categories of third parties to whom we have disclosed this information for advertising purposes include the advertising networks listed in Section 6.
How to submit a request. To exercise your rights, submit a request by:
• Email: hello@activeskinrepair.com (subject line: “CCPA Privacy Request”)
• Mail: BLDG Active, Inc., Attn: Privacy, 3546 Riverside Ave, Rialto, CA 92377
• Using the “Do Not Sell or Share My Personal Information” link in our Site footer
Verification. To protect your privacy, we will verify your identity before responding to a Right to Know, Delete, or Correct request. This typically means asking you to confirm information we already have on file (such as your order history or email on record). Opt-out requests do not require verification.
Authorized agents. You may designate an authorized agent to submit a request on your behalf. The agent must provide signed written permission from you, and we may ask you to verify your identity directly or confirm that you provided the agent authority.
Response time. We will respond to verifiable requests within 45 days, with a possible extension of an additional 45 days when reasonably necessary and with notice to you.
Shine the Light. California residents may also request, once per year, information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes.
11.3 Residents of Other States
If you are a resident of another U.S. state with a comprehensive privacy law — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as such laws take effect — you may have similar rights to access, delete, correct, and opt out of targeted advertising or the sale of your personal information. You may exercise these rights by contacting us at hello@activeskinrepair.com. We will process your request in accordance with applicable law, including any appeal process where required.
12. International Users
The Site is operated from the United States. If you access the Site from outside the United States, you understand and consent to the transfer of your personal information to the United States, which may have data protection laws that are different from those in your country. By using the Site or providing us with personal information, you consent to this transfer, storage, and processing in the United States.
We do not currently target or actively market to individuals in the European Economic Area, the United Kingdom, or Switzerland, and we do not offer goods or services in those jurisdictions. International customers seeking our products may be directed to authorized retailers such as iHerb.
13. Third-Party Links and Services
The Site may contain links to third-party websites, services, or platforms (including retailer partners, social media platforms, and affiliate sites). This Policy does not apply to those third parties. We are not responsible for their privacy practices and encourage you to review their privacy policies before providing them with personal information.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make material changes, we will update the “Last Updated” date above and, where appropriate, provide additional notice (such as an email or Site banner). Your continued use of the Site after the effective date of any changes constitutes acceptance of the revised Policy.
15. Contact Us
If you have questions about this Privacy Policy, wish to exercise a privacy right, or would like to file a complaint, please contact our Privacy Compliance Officer:
BLDG Active, Inc.
Attn: Privacy Compliance Officer
3546 Riverside Ave
Rialto, CA 92377
Email: hello@activeskinrepair.com