Privacy Policy

Last updated October 15, 2026

This Privacy Policy explains how Dracan Market LLC ("OREUM", "we", "us" or "our") collects, uses and shares personal information when you visit this website, buy from us or write to us. It also explains your choices and your rights, including your rights under US state privacy laws, and it serves as our notice at collection under California law.

Summary

• Online payment is not open yet. Until it opens, this website has no form and asks for no personal details. The only personal information we receive today is what you send us by email and the technical information that reaches our host when you visit.
• Once payment opens, we collect only what we need to sell and deliver your order and to answer you: your name, email address, shipping and billing address, order details, your confirmation that you are 18 or older, and your messages.
• Card details are handled by our payment provider. We never see or store your full card number.
• Your cart is kept in your browser's local storage, on your device.
• We use no analytics, no advertising cookies and no tracking pixels. See our Cookie Policy.
• We do not sell your personal information and we do not share it for cross-context behavioral advertising.
• You can ask to access, correct, delete or receive a copy of your information, or to opt out, by emailing mk.beramicedracan@gmail.com. We honor Global Privacy Control.

Who is responsible for your information

Dracan Market LLC, a Wyoming limited liability company, 30 N Gould St Ste R, Sheridan, WY 82801, United States. Email: mk.beramicedracan@gmail.com.

Notice at collection

This short notice tells you, at or before the point of collection, what we collect and why. The details follow in the rest of this Policy.

Information we collect

When you visit the website

When your browser requests a page, our hosting provider's servers automatically receive technical information: your IP address, browser type and version, device type and operating system, the page requested, the referring page, and the date and time. A general location, such as your country, state or city, can be inferred from your IP address. We do not collect precise geolocation.

Your cart is kept in your browser's local storage. It stays on your device and is not sent to us. See our Cookie Policy.

When you email us

Your name, your email address, what you write to us and anything you attach, such as an order number, a delivery address or photos of a damaged item.

When you report a reaction

If you tell us about a skin or scalp reaction to one of our products, we receive health information: the product, when and how you used it, what happened and, if you send them, photos. You choose what to send. We use it only to handle your report, keep our adverse event records and, when the law requires it, report a serious event to the US Food and Drug Administration (FDA). We never sell or share it, and we never use it for marketing.

When you place an order

Nothing is collected for orders yet. Once online payment opens, we collect:

• Contact and delivery details: your name, email address, shipping address, billing address, and a phone number if you choose to give one for delivery.
• Order details: the products you buy, quantities, prices, sales tax, and order and delivery dates.
• Age confirmation: your confirmation at checkout that you are 18 or older. We do not ask for your date of birth or an ID document.
• Payment information: collected and processed directly by our payment provider. We receive only a few details, such as the type of payment method, the last four digits and expiration date of the card, the billing address and whether the payment went through.

From other sources

• Our payment provider: confirmation that your payment went through, refund status, the outcome of fraud screening and, if you dispute a charge, the details of the dispute.
• Our fulfillment partner and carriers: shipping and delivery status, and address corrections.

What we do not ask for

We do not ask for Social Security numbers, government ID numbers, your date of birth, biometric data or precise location, and we do not need any of them to sell you our products. There are no customer accounts on our website, so there is no password to keep.

How we use your information

• To process, pack, ship and deliver your order, including customs clearance for imported products.
• To take payment, issue refunds, answer card disputes, and detect and prevent fraud.
• To sell to adults, as described in our Terms of Sale.
• To send you emails about your order: confirmation, shipping and tracking, delay notices, returns and refunds.
• To answer your questions and handle cancellations, returns, warranty claims, reaction reports and privacy requests.
• To contact you about a product safety notice or a recall, if one ever concerns a product you bought.
• To run, secure and fix the website.
• To keep business, tax, accounting and cosmetic safety records and to comply with the law.
• To protect our rights and enforce our Terms of Sale.

We do not send marketing emails. If we ever start a newsletter, you will have to sign up for it yourself, and every issue will include an unsubscribe link. We do not use your information for automated decisions that have legal or similarly significant effects on you, and we do not build profiles about you.

Why we are allowed to use it

In plain words, we use your information only when one of these reasons applies:

• Your order: we need it to do what you asked, that is, to sell, ship and deliver your order, handle a return or answer your message.
• The law: we must keep tax and accounting records, keep records of reactions to our cosmetics and report serious ones, and answer lawful requests from authorities.
• Running a safe business: we have a legitimate need to secure the website, prevent fraud and defend our rights, and we do so in ways you would reasonably expect, without overriding your interests.
• Your consent: when you choose to send us photos or health details, or if you ever sign up for a newsletter. You can withdraw your consent at any time by emailing us.

Service providers and other recipients

We share personal information only with the recipients below, and only as needed for the purposes above. Service providers act on our behalf, under contracts or terms that restrict how they may use it.

• Hosting: Vercel Inc., in the United States, which delivers our pages and receives the technical information described above.
• Payment: Stripe, Inc., our payment provider once online payment opens, which processes your payment and screens it for fraud under its own privacy policy.
• Shipping: our fulfillment partner overseas, the carriers and the customs brokers, which receive your name, shipping address, phone number if given and the order contents to pack, import and deliver your order.
• Email: our email provider, which stores and delivers the emails we exchange with you.
• Advisers: our accountants and lawyers, when needed.
• Customs and tax authorities, when needed to import and deliver your order or to meet our tax obligations.
• The FDA, when the law requires us to report a serious reaction to one of our cosmetics.
• Law enforcement, courts and regulators, when the law requires it or when needed to protect the rights, property or safety of our customers, our business or others.
• A buyer or successor of our business, if we are involved in a merger, acquisition or reorganization. Your information would remain protected by this Policy.
• Anyone else, with your consent or at your direction.

Where your information is processed

We are based in the United States, and this website is meant for customers in the United States. Your information is processed in the United States, where our website is hosted. To ship your order, we share your shipping details with our fulfillment partner overseas and with the carriers that handle your package, so this information is also processed outside the United States, where privacy laws may differ. We share only what is needed to pack and deliver your order, and we require our partner to use it for nothing else.

We do not sell or share your information

We do not sell personal information, and we do not share it for cross-context behavioral advertising (targeted advertising). We have not done so in the past 12 months. We do not sell or share the personal information of consumers under 16. If this ever changes, we will update this Policy before it happens and give you a clear way to opt out.

No analytics and no tracking pixels

We use no analytics or audience measurement tools, no advertising or social media pixels, no session recording and no browser fingerprinting. Our fonts are served from our own website, and our pages load no scripts from other companies. If we ever want to add any of these tools, we will update this Policy and our Cookie Policy before they are switched on, and give you the choices the law requires.

Global Privacy Control and Do Not Track

We honor the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as a valid request to opt out of the selling or sharing of your personal information, targeted advertising and profiling, for that browser and for any information we can link to it. Since we do none of these today, nothing else changes for you, but the signal will be respected if our practices ever change. Because we do not track you across websites, our website works the same whether or not your browser sends a "Do Not Track" signal.

How long we keep information

When we no longer need information, we delete it or make it anonymous.

How we protect information

We use reasonable administrative, technical and physical safeguards suited to the information we hold. The website is served over an encrypted HTTPS connection, card payments are handled by a payment provider that complies with the Payment Card Industry Data Security Standard (PCI DSS), and access to customer information is restricted to the people who need it. No system is completely secure. If a security breach affects your personal information, we will notify you as the law requires.

Children

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13, in line with the Children's Online Privacy Protection Act (COPPA). You must be at least 18 years old to place an order. If you believe a child has given us personal information, please email us and we will delete it.

Your US state privacy rights

Residents of California (under the California Consumer Privacy Act, as amended by the California Privacy Rights Act), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with similar laws, such as Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, have rights over their personal information. Some of these laws only apply to businesses above certain size thresholds. To keep things simple and fair, we honor the requests below from every US resident, subject to the exceptions the law allows.

Your rights

• Right to know and access: to confirm whether we process your personal information, and to know the categories and specific pieces of personal information we hold about you, where it came from, why we use it and the categories of recipients we disclose it to. Where your state's law provides for it, you can also ask for the list of specific third parties to which we have disclosed it.
• Right to delete: to ask us to delete the personal information we collected from or about you. We may keep what the law requires us to keep, such as tax records and reaction records, or what we need to complete your order, handle a return or a warranty claim, or prevent fraud. If so, we will tell you.
• Right to correct: to ask us to correct inaccurate personal information.
• Right to portability: to receive your personal information in a portable and readily usable format.
• Right to opt out: of the selling of your personal information, its sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do none of these today. You can still send us an opt-out request, and we honor Global Privacy Control.
• Sensitive personal information and consumer health data: the only sensitive information we may hold is what you choose to tell us in a reaction report. We use it only to handle that report and meet our legal obligations, so there is nothing to limit. Where a state law on consumer health data applies, such as Washington's My Health My Data Act, you have the same rights over it, subject to the records the law requires us to keep: see our Consumer Health Data Privacy Policy below.
• Right to appeal: to appeal our decision if we decline your request, as described below.
• No discrimination: we will not deny you products, charge you a different price or give you a different level of service because you used any of these rights.

How to make a request

Email mk.beramicedracan@gmail.com with the subject line "Privacy request". Tell us which right you want to use and your state of residence, and include the email address you used with us and, if you have one, an order number. There is no charge, unless a request is manifestly unfounded or excessive and the law allows a fee.

How we verify your request

To protect your information, we verify each request before acting on it, usually by matching the details you give us with our records and confirming by email from the address you used with us. For requests for specific pieces of information or for deletion, we may ask for one more detail from a past order, such as its date or the items in it. We use the information you give us for verification only to handle your request. Opt-out requests do not need to be verified.

Authorized agents

You can use an authorized agent to make a request for you. The agent must give us your signed written permission or a valid power of attorney. Unless the agent holds a power of attorney, we may also ask you to verify your identity directly with us and to confirm that you gave the agent permission.

Response times

We confirm receipt of your request within 10 business days and respond within 45 calendar days. If we need more time, we may extend this once by 45 more days, and we will tell you why within the first 45 days. We act on opt-out requests as soon as possible, and within 15 business days at the latest.

Appeals

If we decline your request, in whole or in part, we will explain why. You can appeal by replying to our answer or by emailing mk.beramicedracan@gmail.com with the subject line "Privacy appeal". We will respond in writing within 45 days, explaining what we decided and why. If we deny your appeal, we will tell you how to contact the Attorney General of your state.

Categories of personal information (California disclosures)

We collect the categories below, most of them only once online payment opens, from you, from your browser and from the other sources described above, for the purposes described in this Policy. We disclose each category for business purposes only to the recipients shown. We have not sold or shared any category in the past 12 months, and we do not sell or share any.

We do not collect biometric information, precise geolocation, employment information, education information, or inferences drawn to create a profile about you.

Other state notices

• California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing purposes.
• California financial incentives: our prices are the same for everyone, and we do not provide any financial incentive, or any difference in price or service, in exchange for personal information.
• Nevada: we do not sell covered information as defined by Nevada law. You can still send us an opt-out request by email.

Consumer Health Data Privacy Policy

This section is our consumer health data privacy policy under Washington's My Health My Data Act, Nevada's consumer health data law (SB 370) and similar state laws. It applies to consumer health data as those laws define it, and it adds to the rest of this Policy.

• What we collect: only what you tell us about a skin or scalp reaction to one of our products: the product, the symptoms, the dates, and any photos you choose to send.
• Why we collect it: to handle your report and answer you, to keep the adverse event records that US cosmetic rules require, and to report serious events to the FDA when the law requires it.
• Where it comes from: from you only. We do not buy it, infer it from your browsing or collect it from anyone else.
• Who receives it: our email provider, which stores and delivers our messages; our lawyers when needed; and the FDA when the law requires a report. We share it with no one else without your consent.
• What we never do: we never sell consumer health data, and we never use it for advertising, marketing or profiling.
• Your rights: you can ask us to confirm whether we hold consumer health data about you, to access it, to have it deleted, and to withdraw your consent, and you can appeal our answer, as described under "Appeals" above. We may keep the records the law requires us to keep, and we will tell you if we do.
• How to use your rights: email mk.beramicedracan@gmail.com with the subject line "Privacy request". We answer within 45 days.

Changes to this Policy

We will post any change to this Policy on this page and update its "last updated" date. If a change materially affects how we use information we already hold, we will tell you by email or with a notice on the website before it takes effect, and ask for your consent where the law requires it.

Contact us

For any question or request about your personal information, email mk.beramicedracan@gmail.com. We reply within 2 business days, and we handle formal privacy requests within the times given above. Postal address: Dracan Market LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.