Privacy
Privacy policy
Two things on this site ask you for something: the checkout, and the box where you can request a guide. Everything else is reading. This page says what each of those collects, who it goes to, how long it stays, and how to get it back or get rid of it.
Reading the site
The model finder runs entirely in your browser. Your three answers are never sent anywhere, they aren’t stored, and they’re gone when you close the tab. That’s why it doesn’t ask you to sign in — there’s nothing to sign in to.
Our hosting provider records ordinary server logs for every request: an IP address, a timestamp, the page requested, and your browser’s user-agent string. These keep the site up and let us spot abuse. We don’t join them to anything else.
Asking for a guide
If you request a guide, we store your email address, the guide requested, the recommended model (when available), the form location, the request time and the consent wording version. When available and ad measurement is not turned off, we also store up to four campaign tags: source, medium, campaign and content. These help us understand how you found the guide. We use the current link tags, or existing browser tags from the last seven days when the current link has none. Guide signup does not collect ad click IDs or page URLs as campaign tags.
The wording beside the field says: We will email you the guide, and occasionally write about the rollers. When available, campaign tags help us understand how you found the guide. Unsubscribe in one click, any time. That’s the whole purpose, and it’s the same sentence stored against your record. If the purpose ever changes, the consent version changes with it and we ask again rather than reinterpreting an old yes.
The list is held by Klaviyo, our email provider, in the United States. Unsubscribing using the link in an email stops marketing emails; it does not automatically delete your profile. We retain the records needed to respect your unsubscribe choice. You can contact us to request deletion. Your address is never sold or used to advertise anything but our own rollers.
Buying something
Orders are processed by Shopify. Completing one collects:
- Your name, shipping address, email address, and phone number.
- The contents and value of your order.
- Payment details, handled by Shopify and its payment processors. Card numbers don’t reach us and aren’t stored on our systems.
- The customs information required to ship under DDP terms, which is passed to the carrier and to the destination customs authority. This isn’t optional: a parcel entering the United States can’t clear without it.
That data is used to fulfil the order, to handle warranty and return requests, and to meet the tax and customs record-keeping required of an importer. It’s not sold. The only part that reaches an advertising service is the one described under Cookies and measurement: that a purchase happened, its value and the models in it, sent to Meta without your name or contact details.
Order and customs records are kept for five years from the date of entry, which is the period U.S. Customs requires an importer of record to retain them. We can’t delete those earlier, and we say so plainly rather than promising a deletion we would have to refuse.
Text messages about your order
If you give us a mobile number, we may text you about that order and nothing else: that it shipped and its tracking number, that it was delivered, that a return arrived back with us, or that a delivery couldn’t be completed. These are service messages, not marketing. Message and data rates may apply and the number of messages depends on what happens to your parcel. Reply STOP to stop them, or HELP for help.
The messages are sent through Klaviyo, and the number reaches the carrier only as part of the shipping label. Mobile information and text-message consent are never shared with third parties or affiliates for marketing or promotional purposes. The only parties that see the number are the ones that have to move the parcel or send the message, and they may not use it for their own marketing.
The system that decides which of those messages to send doesn’t keep your number. It records that a message went out for a given order, the last four digits, and nothing more, so a missing notice can be traced without holding a list of phone numbers.
Cookies and measurement
Fonts are served from this domain rather than a font CDN, so loading a page doesn’t tell a font company that you visited.
To learn whether our ads lead to sales, this site and Shopify’s checkout run the Meta Pixel, from Meta Platforms, Inc. When it’s on, Meta receives the pages you view here, when you press a buy button, and, at checkout, that an order was placed with its value and the models in it. Like any web request it also receives your IP address and browser details, and it sets a Meta cookie (_fbp) to recognize the same browser later. We don’t send Meta your name, email address, phone number or shipping address. Meta uses this to report on our ads and to decide who sees them, and may connect it to a Facebook or Instagram account under Meta’s own privacy policy.
The pixel doesn’t load at all when your browser sends a Global Privacy Control or Do Not Track signal. You can also switch it off for this browser here, and manage how Meta uses this information in your Facebook or Instagram ad settings.
Shopify sets its own cookies once you open a cart or reach checkout — they’re what keeps a cart from emptying itself between pages, and they’re governed by Shopify’s own policy as well as this one.
Overall traffic is counted with Vercel Web Analytics, which works without cookies and doesn’t build a profile of anyone: page counts, not people.
When you arrive from a link that carries campaign tags (for example from a creator’s post or an ad), this browser remembers those tags and the first page you opened for seven days, and passes them to checkout with your order. That stays between us and Shopify; it tells us which page or campaign an order came from.
Your rights
Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected, to have it deleted, and to object to certain uses of it. California residents have those rights under the CCPA and we don’t sell personal information as that law defines it. Some state laws treat ad measurement like the Meta Pixel as “sharing” or “targeted advertising”; you can opt out of it as described under Cookies and measurement, and a Global Privacy Control signal does that automatically.
Write to corediet@deeprollerlabs.com and we’ll answer within 30 days. For a mailing list request there’s a faster route: the unsubscribe link in any email stops marketing emails without going through us. Deletion is a separate request.
Asking won’t change the price you pay or the service you get. Before acting on a request we may ask you to confirm it comes from the email address the data belongs to.
Children
This store isn’t directed to children under 13, and we don’t knowingly collect personal information from them. If you believe a child has given us information, write to the address above and we’ll delete it.
Who we’re
DEEPROLLER, INC., 16 West 32nd Street, Suite 503, New York, NY 10001, sells and imports in the United States. The rollers are made by Medsapiens Co., Ltd. in South Korea and ship from there, which is why an order crosses a border and why customs data appears above.
This policy is governed by the laws of the State of New York and applicable United States federal law.
Changes to this policy
When this policy changes materially, the date below changes with it, and the previous version is replaced rather than quietly edited.
Last updated: 20 October 2026.