Privacy Policy

Welcome to Cosmetic Group USA, Inc. As an innovation-driven B2B cosmetic contract manufacturer, custom formulation specialist, and private label beauty developer serving global beauty brands across North America, Europe, and Asia-Pacific, we prioritize corporate transparency, data security, and compliance with global privacy regulations (including GDPR and CCPA).

This Privacy Policy explains how Cosmetic Group USA collects, utilizes, safeguards, and processes corporate inquiries, professional contact information, and technical usage data collected through our digital portal at www.athbeauty.com.

1. Scope of Information Collection

In the context of international B2B cosmetic contract manufacturing, custom formulation R&D, and bulk personal care production services, we collect non-sensitive professional data strictly required to evaluate projects, execute Non-Disclosure Agreements (NDAs), process sample requests, and manage OEM/ODM supply chains.

1.1 Professional Corporate & Contact Data

When business representatives, procurement officers, brand managers, or product developers initiate contact with our team, we collect business contact credentials, including:

• Full Name and Professional Title
• Registered Business / Brand Name
• Corporate Business Email Address
• Telephone / Direct Work Contact Number
• Billing & Commercial Facility Address
• Project Scope Specifications (e.g., target formulation types, estimated annual volume, market launch timeline)

1.2 Technical & Digital Usage Data

To optimize our web infrastructure for global business procurement teams and ensure robust cyber defense, our server infrastructure automatically collects technical telemetry, including:

• Internet Protocol (IP) address and geographical region
• Browser engine configuration and version
• System operating platform
• Timestamped page navigation pathways and dwell time
• HTTP referral sources and outbound technical diagnostic logs

1.3 Cookies and Enterprise Analytics

We utilize essential and performance cookie technologies to analyze visitor interaction patterns, facilitate secure site navigation, and measure digital platform performance. Enterprise site visitors retain full browser-level authority to adjust cookie consent settings or disable non-essential analytics tracking.

2. Legitimate Business Purposes & Data Utilization

Cosmetic Group USA processes client and enterprise partner data exclusively under legitimate legal bases for corporate business operations, contractual performance, and regulatory compliance:

• Project Evaluation & Quotation: Reviewing incoming custom formulation and turnkey manufacturing requests to provide formal R&D cost estimates and feasibility studies.
• Formulation & OEM Contract Execution: Facilitating sample dispatch, batch production scheduling, quality assurance reporting, and bulk delivery logistics.
• Client Communication & Support: Delivering responsive account management updates, regulatory ingredient advice, and technical specification sheets.
• Cyber Security & Infrastructure Integrity: Monitoring web application firewall metrics to defend against unauthorized penetration attempts and DDoS threats.
• Corporate Marketing: Providing industry whitepapers, formulation trend reports, and manufacturing capability updates to clients who have explicitly requested corporate communications.

3. Data Protection, Intellectual Property & Non-Disclosure Integrity

At Cosmetic Group USA, protecting our client's intellectual property (IP), custom color cosmetic formulations, proprietary skincare blends, and confidential business strategies is paramount to our standard operating procedures.

4. Information Disclosure & Third-Party Processing

Cosmetic Group USA maintains a strict enterprise policy: We do not sell, lease, rent, or trade client data or corporate contact information under any circumstances. Data disclosures are limited to necessary third-party operational partners strictly for business execution:

• Vetted Service Providers: Secure enterprise hosting partners, logistics and freight forwarders, and certified payment gateways bound by equivalent confidentiality obligations.
• Regulatory & Legal Mandates: Disclosure required under formal court sub-poena, FDA regulatory compliance audits, or law enforcement mandates to protect corporate legal rights.
• Corporate Restructuring: Transferred assets under strict NDA in the event of an institutional merger, equity acquisition, or enterprise asset sale.

5. Global Data Rights & Privacy Compliance

Depending on your corporate jurisdiction (such as the European Union under GDPR or California under CCPA/CPRA), authorized enterprise representatives possess actionable data rights regarding their professional records stored in our systems:

• Right to Access: Request a comprehensive export of personal contact data recorded in our system databases.
• Right to Rectification: Demand immediate correction of inaccurate business credentials or updated company addresses.
• Right to Erasure ("Right to be Forgotten"): Request complete deletion of personal records, excluding transactions required to be retained under US federal accounting and manufacturing law.
• Right to Opt-Out: Unsubscribe from marketing newsletters at any time via automated opt-out mechanisms or direct administrative contact.

6. Data Security Safeguards & Retention Standards

We implement multi-layered physical, technical, and administrative security protocols—including SSL/TLS transport layer encryption, network firewalls, and restricted database access controls. Corporate records are retained only for the duration required to satisfy contract obligations, regulatory audit trails, and legitimate commercial historical recordkeeping.

7. Children’s Privacy Governance

As a specialized B2B contract manufacturing facility, our digital services are tailored exclusively for professional enterprise procurement and business entities aged 18 and older. We do not knowingly collect or maintain data from individuals under 13 years of age.

8. Revisions to This Privacy Policy

Cosmetic Group USA reserves the right to periodically modify this Privacy Policy to reflect updated global regulatory frameworks, evolving cybersecurity standards, or operational enhancements. Material revisions will be posted directly to this page with an updated effective date.