Privacy Policy
LNC Professional
Your trust matters. Here is how we handle your information, in plain language.
Last updated: 12 September 2026
Who we are
LNC Professional is the trading name under which LNC Professional (Guyana) and EMCOA Corp dba LNC Professional trade ("LNC Professional", "we", "us", "our"). We supply professional nail products to nail technicians, nail students, salon owners, resellers and distributors around the world through our website lncpronails.com and through direct enquiries.
We are the controller of the personal information described in this policy. That means we decide what is collected and why, and we are the ones you hold accountable for it.
The entities behind the name
- LNC Professional (Guyana), Georgetown, Guyana
- EMCOA Corp dba LNC Professional, Ephrata, PA, United States
Which of the two contracts with you depends on where your order is fulfilled from, and it is named on your order confirmation.
The laws we work to. We operate across four jurisdictions and we apply the standards in this policy to everyone, wherever you live, rather than sorting people by passport.
| Where | The regime we work to |
|---|---|
| Guyana | The Data Protection Act 18 of 2023 was passed on 9 August 2023 and gazetted on 16 August 2023. It is not yet in force: the commencement order required to bring it into operation had not been issued as at March 2026. We therefore apply its standards voluntarily rather than describing ourselves as bound by a law that has not commenced. If and when it commences, we will be bound by it. |
| United States | State privacy laws, including the California Consumer Privacy Act as amended by the CPRA where its thresholds are met. We honour the access, deletion and opt-out rights described below for every US resident regardless of whether a given state statute applies to us. |
| Malaysia | The Personal Data Protection Act 2010. |
| Hong Kong | The Personal Data (Privacy) Ordinance, Cap. 486. |
Where the EU or UK GDPR, or the data protection law of any other country, gives you a stronger right than this policy describes, that stronger right applies.
Our people. Your information may be seen by our staff and by staff of our group companies, who act for us and are bound by the same obligations.
How to reach us about your data:
WhatsApp is the fastest way to reach us, and the one we answer first. Message +1 (562) 548-7272 and a person will reply. It works from anywhere, it costs you nothing beyond your data, and you keep the whole conversation on your phone.
- WhatsApp (preferred): +1 (562) 548-7272
- Toll-free in the United States: 833-562-7761 (833-LNC-PRO1), the number printed on the bottle
- Email: info@lncpronails.com
- Marketing email is sent from hello@send.lncpronails.com
If you write to us about your personal information, please put "Data request" in the subject line so it reaches the right person quickly.
Data protection contact: message us on WhatsApp at +1 (562) 548-7272, which is the quickest, call toll-free on 833-562-7761 (833-LNC-PRO1), or email info@lncpronails.com. Both reach the people responsible for privacy enquiries.
Who this policy covers
This policy covers everyone whose personal information we hold: people who fill in a form on our website, message us on WhatsApp, Messenger or Instagram, email us, place an order, or apply to become a reseller or distributor.
We sell business to business. Even so, the people we deal with are individuals, and their personal information is protected in the same way. A business contact detail is still personal data when it identifies a person.
What we collect
When you fill in our lead or enquiry form, or message us:
- your name
- your email address
- your phone or WhatsApp number
- your country
- your buyer type (nail technician, salon owner, student, reseller, or distributor)
- a record of the consent you gave, including the date and time
- the advertisement or campaign your enquiry came from
When you order from us or correspond with us:
- the products you ask about or buy, and your order and enquiry correspondence
- the delivery details needed to get your order to you
When you message us on WhatsApp, Facebook Messenger or Instagram Direct:
- your name, your public profile information, and the content of the messages you send us
When you visit our website:
- cookie and pixel information, described in our separate Cookie Policy, and technical information such as your IP address and browser type that is generated automatically when any website is loaded
What we do not collect: we do not ask for, and do not want, sensitive categories of information such as health data, religious or political beliefs, or biometric data. Please do not send them to us.
Payment details: payments are handled by third-party payment processors. We never see or store your card details, and card data does not reach LNC Professional systems at any point.
Why we use it, and our lawful basis for each purpose
We only use your information for the reasons below. "Lawful basis" is the legal justification we rely on, which regulators can ask us to demonstrate.
| What we do | Why | Lawful basis |
|---|---|---|
| Reply to your enquiry, quote you, and answer product questions | So we can actually help you | Steps taken at your request before entering a contract, or our legitimate interest in responding to business enquiries |
| Process and deliver your order, and handle returns | To fulfil what you bought | Performance of a contract with you |
| Route your order to the right fulfilment hub | So your order ships from the nearest location | Performance of a contract with you |
| Assess reseller and distributor applications | To decide who we can supply | Steps taken before entering a contract, and our legitimate interest in running a trade channel responsibly |
| Send you marketing emails and offers | To tell you about products, training and promotions | Your consent, which you can withdraw at any time |
| Keep a record of the consent you gave | So we can prove we asked properly | Legal obligation and our legitimate interest in being accountable |
| Measure which advertisements bring genuine enquiries | So we do not waste money advertising to the wrong people | Your consent for advertising cookies and the Meta Pixel, and our legitimate interest in understanding our own campaigns |
| Keep our systems and accounts secure, and prevent fraud | To protect you and us | Our legitimate interest in security, and legal obligation where applicable |
| Keep accounting and tax records | Because we have to | Legal obligation |
Where we rely on legitimate interests, we have thought about whether our interest is outweighed by your privacy. You can ask us to explain our reasoning, and you can object (see "Your rights" below).
An AI assistant reads and answers our messages
We want to be straightforward about this, because you deserve to know who, or what, you are talking to.
When you message us on WhatsApp, Facebook Messenger or Instagram Direct, your message is handled in the first instance by an automated AI assistant called Lilly. Lilly is software, not a person. Lilly reads the content of your message, works out what you are asking for, and drafts or sends a reply. Our human team oversees Lilly's work and steps in to take over conversations.
What this means in practice:
- the content of your messages is processed by an automated system
- your message content is sent to the AI service provider that powers Lilly in order to generate a reply
- a human being can and does review these conversations
- you can ask to speak to a human at any time. Just say so in the chat, or email info@lncpronails.com, and a person will take over.
Lilly does not make decisions that produce legal effects for you or similarly significantly affect you. She answers questions, shares product information, and passes enquiries to our team. Pricing, credit terms and distributor approvals are decided by people, not by Lilly.
AI service providers, named. The text of your message is sent to Anthropic, OpenAI and, where we fall back to an alternative model, OpenRouter. All three are in the United States. They act on our instructions, only to draft a reply to you, and may not use your message for their own purposes. A record of the conversation, including the text of your message and the reply, is kept in Airtable so we can follow up on what you asked for, and an alert containing that message may be emailed to our team through Brevo when a conversation needs a person.
Who we share it with
We do not sell your personal information. We have never done so and we do not intend to.
We share it only with service providers who help us run the business, and only for that purpose. They act on our instructions and are bound by contract. The ones we use today are:
| Provider | What they do for us | Where they process data |
|---|---|---|
| Brevo | Marketing and transactional email | European Union |
| Chatwoot | Our chat inbox, where WhatsApp, Messenger and Instagram messages arrive | Self-hosted by us on our own infrastructure, see below |
| Meta Platforms | Advertising, the Meta Pixel, and the Facebook, Instagram and WhatsApp messaging channels | Global, primarily United States and Ireland |
| Cloudflare | Website hosting, content delivery and security | Global edge network |
| Airtable | Our records of enquiries and orders, including the text of messages you send us | United States |
| Hetzner | The servers running our self-hosted database and applications | Germany (Nuremberg and Falkenstein) |
| Anthropic | One of the AI models that powers Lilly and drafts replies to your messages | United States |
| OpenAI | One of the AI models that powers Lilly, and translation between languages | United States |
| OpenRouter | Routes a message to the right AI model when we fall back to an alternative | United States |
| Apify | Checks publicly available business information when a company applies to us as a wholesale or distributor partner | Czech Republic |
We also share information with:
- our own group companies, our group companies in Hong Kong and our Guyanese operating company, where they are involved in supplying or supporting your order
- the third-party fulfilment vendors described in the transfers section below, including the independent logistics company that runs our Panama hub
And where we genuinely have to:
- with delivery and freight partners, so your order arrives
- with our accountants, auditors and legal advisers, under confidentiality
- with a regulator, court or law enforcement body where we are legally required to
- with a buyer, if the business is ever sold, in which case we will tell you first
Your use of Facebook, Instagram and WhatsApp is also governed by the privacy policies of Meta Platforms, Inc. We do not control what Meta does with data you give directly to Meta.
Sending information across borders
We operate from Guyana and the United States, and we ship worldwide from four fulfilment locations. We route each order to the one that can get it to you fastest. Not all of them are ours, and the difference matters, so here it is:
| Location | Who runs it | What that means for your data |
|---|---|---|
| United States | Fulfilment provider | |
| Central America (Panama) | An independent third-party logistics vendor, not a company we own | Your delivery details are passed to an outside company acting as our processor, under contract |
| Middle East (Dubai and Jordan), serving Africa and the MENA region | Fulfilment provider | |
| Southeast Asia (Malaysia) | Fulfilment provider |
We also work with our own group companies in Hong Kong and Guyana, and some products ship from the United States.
So your name, contact details and delivery information will be sent to whichever location is handling your order, and to the carrier delivering it. Our service providers listed above also operate internationally. Your information will cross borders. There is no way to run a global supply business otherwise, and we would rather say so plainly than bury it.
Where the Panama hub is concerned, we want to be especially clear. That hub is an outside company. It is not part of our group. It receives your delivery information because it packs and ships your order, and for no other reason. It is bound by a written contract that limits it to acting on our instructions, and it is not permitted to use your information for its own purposes.
Some of the countries involved do not have privacy laws that a European, British or Nigerian regulator would call "adequate". Where that is the case, we rely on one or more of the following safeguards:
- Standard Contractual Clauses or the equivalent transfer clauses in our contracts with the provider or vendor
- an adequacy decision where one exists for the destination country
- binding intra-group arrangements where the transfer is to our own subsidiary in Hong Kong or Guyana
- the necessity of the transfer to perform your contract, which is the position where we send your delivery details to the location and carrier that will actually ship your order
- your explicit consent to the transfer, where no other route is available
Where your data actually sits. Our servers and our email provider are in the European Union. When you place an order we share only the delivery details needed to get your parcel to you with the fulfilment provider for your region, and only for that purpose.
You can ask us for details of the safeguards that apply to your information by emailing info@lncpronails.com.
How long we keep it
We keep personal information only as long as we have a reason to.
| Information | How long we keep it | Why |
|---|---|---|
| Enquiries that did not become orders | 24 months from your last contact with us | So we can pick up a conversation you started |
| Customer and order records | 5 years from the end of the financial year the record relates to | Legal and tax obligation |
| Marketing consent records | for as long as we market to you, plus 24 months afterwards | To prove we had your permission |
| Chat conversations, including AI-handled messages | 24 months | Customer service history and quality review |
| Website and pixel data | See the Cookie Policy |
When the period ends, we delete the information or anonymise it so it can no longer identify you.
Where the law of a country we operate in requires us to keep a record for longer than the period shown, we keep it for the period the law requires and no longer.
Your rights
Wherever you live, we will honour the following. Some of these are guaranteed to you by law under the Malaysian Personal Data Protection Act 2010, the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486), United States state privacy laws, and the EU and UK GDPR, Nigeria's Data Protection Act, California's privacy laws, and the data protection laws of a growing number of CARICOM states. We apply them to everyone rather than sorting people by passport.
- Access. Ask us what we hold about you, and get a copy.
- Correction. Tell us something is wrong and we will fix it.
- Deletion. Ask us to erase your information. We will, unless we have a legal reason to keep it, such as tax records for a completed order. This includes your details and message history in our chat inbox, our record of the conversation in Airtable, and any cached translation of your messages. It does not delete the copy of the conversation held in your own Facebook, Instagram or WhatsApp account, which is controlled by Meta.
- Portability. Ask for the information you gave us in a common machine readable format.
- Objection. Object to us using your information where we rely on legitimate interests. If you object to direct marketing, we will stop, full stop, no questions asked.
- Restriction. Ask us to pause using your information while a dispute about it is sorted out.
- Withdraw consent. Where we rely on your consent, you can take it back at any time. It does not undo what we lawfully did before you withdrew it.
- Opt out of sale or sharing. We do not sell personal information or share it for cross context behavioural advertising in the sense California law uses. If that ever changes, we will tell you and give you a clear way to opt out first.
- No retaliation. Exercising any of these rights will never affect your pricing, your service, or your standing as a customer.
How to exercise a right: message us on WhatsApp at +1 (562) 548-7272, which is the quickest, call toll-free on 833-562-7761 (833-LNC-PRO1), or email info@lncpronails.com. We will ask a couple of questions to confirm it is really you, because handing your data to the wrong person would be the worse mistake. We will not ask for more identification than we need.
How long we take: we aim to respond within 30 days. If your request is complicated we may need longer, and we will tell you why before the 30 days are up.
If you are not happy with how we handled it, you can complain to your data protection regulator. Depending on where you are, that may be:
- the Personal Data Protection Commissioner of Malaysia or the Privacy Commissioner for Personal Data, Hong Kong, where our processing reaches those jurisdictions
- in Guyana, the office established under the Data Protection Act 2023 once that Act is brought into force; until it commences there is no Guyanese supervisory authority to complain to, and we say so rather than pointing you at a body that does not yet operate
- the Information Commissioner's Office in the United Kingdom
- your national supervisory authority in the EU or EEA
- the Nigeria Data Protection Commission
- the California Privacy Protection Agency or the California Attorney General
- the data protection authority or ombudsman in your own country
We would rather you came to us first, but you do not have to.
How you can stop the marketing
Every marketing email we send has an unsubscribe link, and it works. You can also just tell us on WhatsApp or by email and we will take you off the list. We do not send unsolicited messages, and we do not add people to our marketing list who did not ask to be there.
Reviews, photographs and anything else you post
If you leave a review, it is public. Your review, the name you give and any photograph you attach can be seen by anyone who visits the page, and search engines may index it. Do not put anything in a review you would not want a stranger to read.
If you send us photographs of your work, for a competition, a feature or a testimonial, we will tell you at the time what we intend to do with them and we will not use them for anything else without asking you again. You can withdraw a photograph at any time by asking us, and we will remove it from anywhere we control. We cannot pull it back from someone who has already shared it onward, and we will say so rather than promise otherwise.
Removing a review removes it from the page. Our records may retain it for as long as section "How long we keep it" provides, for dispute and fraud reasons.
Analytics, and what we can see about your visit
lncpronails.com does not currently run an analytics or advertising tool. Our hosting provider keeps the ordinary technical logs any website generates, such as IP address and browser type, to deliver the site and protect it from abuse. We do not use those logs to identify you personally, and we do not sell or share them.
If we add an analytics or advertising tool, we will update this policy and our Cookie Policy first, and we will ask for your consent before any optional cookie runs.
Content embedded from other websites
Some pages include content hosted elsewhere, such as a video, a map or a social post. Embedded content behaves exactly as if you had visited that other site directly. Those sites can collect data about you, use cookies, and track your interaction with the embedded item, including if you have an account and are logged in to them. We do not control that and we cannot switch it off on their behalf.
Browsing without telling us who you are
You can read this website without giving us anything. You do not need an account to browse, and we do not require you to identify yourself to see prices, products or these policies. You give us personal information when you choose to: an order, an enquiry form, a newsletter, a WhatsApp message.
Children, and COPPA
Our products are professional products sold to nail technicians, students, salon owners and distributors. This website is not directed at children, and we do not knowingly collect personal information from anyone under 13.
The Children's Online Privacy Protection Act (COPPA) applies in the United States to the collection of personal information from children under 13. If you believe a child has given us personal information, tell us and we will delete it. Use any of the contact routes below.
United States state privacy notices
California. If you are a California resident, the California Consumer Privacy Act as amended by the CPRA may give you the right to know what personal information we hold about you, to have it deleted, to correct it, and to opt out of its sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioural advertising in exchange for money. You may exercise these rights using the contact routes below, and we will not treat you worse for doing so.
Nevada. Nevada law gives Nevada residents the right to tell a business not to sell certain personal information. We do not sell it. If you want that recorded against your name anyway, write to us and we will record it.
Do Not Sell or Share My Personal Information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. That has been true for as long as we have traded. We have not done either in the last 12 months, and we have no knowledge of selling or sharing information about anyone under 16.
You do not need to do anything to stay opted out. If you would like your preference recorded against your name anyway, message us on WhatsApp at +1 (562) 548-7272 with the words "Do not sell or share", or call toll-free on 833-562-7761, and we will record it. Where your browser sends a Global Privacy Control signal, we treat it as that same request.
Notice at collection. The categories of personal information we collect, the purposes we use them for, and how long we keep them are set out in "What we collect", "Why we use it" and "How long we keep it" above. We do not use sensitive personal information to infer anything about you.
Someone acting for you. You may ask an authorised agent to make a request on your behalf. We will ask the agent for your signed permission and may ask you to confirm your identity with us directly.
Everywhere else in the United States. Several other states have their own privacy statutes with similar rights. Rather than list them and get one wrong, we honour the access, correction, deletion and opt-out rights above for every United States resident, whichever state you live in.
How we keep it safe
We take security seriously and we do the following:
- our website and our systems run over encrypted connections
- our own database is self-hosted on infrastructure we control, not left on a shared consumer service
- access to customer records is limited to the people who need it to do their job
- our service providers are chosen partly on their security posture and are bound by contract
- we monitor our systems for unusual activity and we review access periodically
No system anywhere is perfectly secure, and anyone who tells you otherwise is selling something. If a security breach ever puts your information at real risk, we will tell the relevant regulator within the time the law allows, and we will tell you directly and plainly where the law requires it or where you would want to know.
Certifications: we make no claim to hold any security certification. If we obtain one, we will say so here.
Cookies and the Meta Pixel
Our website uses cookies and the Meta Pixel. These are covered in a separate document, our Cookie Policy, which explains what each one does, how long it lasts, and how to turn the optional ones off.
Automated processing
Two things on our side are automated, and we want both on the record:
- The AI assistant, Lilly, described above, reads and replies to your chat messages.
- The Meta Pixel helps Meta's advertising systems decide who sees our advertisements. That is profiling for advertising purposes, and it runs only if you consent to advertising cookies.
Neither of these makes a decision about you that has a legal effect or a similarly significant effect. We do not use automated systems to approve or refuse credit, to set your prices, or to decide whether you can be a distributor. People make those calls.
If you ever believe an automated process has produced an outcome you want reviewed, email us and a human will look at it.
Changes to this policy
If we change this policy we will update the date at the top. If the change is significant, for example a new purpose for your information or a new category of recipient, we will tell you directly rather than quietly editing the page.
Questions
Questions about your data? Message us on WhatsApp at +1 (562) 548-7272, which is the quickest, call toll-free on 833-562-7761 (833-LNC-PRO1), or email info@lncpronails.com. A person will answer.
Talk to us
The fastest way to reach us is WhatsApp. Message Lilly, LNC Professional's assistant, and a person from our team will step in whenever you need one.
Prefer to call? Our toll-free number, printed on our bottles, is 833-562-7761.
LNC Professional (Guyana) | EMCOA Corp dba LNC Professional
Georgetown, Guyana | Ephrata, PA
These policies cover our operations in Guyana, the USA, Malaysia and Hong Kong.