Privacy Policy

Last updated: November 1, 2026

Organic Aromas (“Organic Aromas”, “we”, “us”) respects your privacy. This policy explains what personal information we collect when you visit organicaromas.com, buy from us, or contact us, how we use it, who we share it with, and the choices you have.

Who we are

Organic Aromas
680 S Cache Street, Suite 100-8790, Jackson, WY 83001, USA
Phone: +1 (208) 508-1484
Email: [email protected]

Information we collect

Information you give us

  • Orders and accounts: name, email address, shipping and billing address, phone number, order history, and account login details.
  • Payment: card and wallet payments are handled by our payment processors (Stripe and PayPal). We do not store full card numbers on our servers.
  • Messages: emails, contact forms, warranty requests, photos or videos you send us, and conversations with our on-site chat assistant.
  • Reviews and community posts: content you choose to publish, such as product reviews or posts in our Aroma Community.
  • Newsletter and offers: your email address and preferences when you subscribe.
  • Affiliates and wholesale partners: contact, business, and payout details you provide when you apply.

Information collected automatically

  • Device and usage data: IP address, browser and device type, pages viewed, products viewed or added to cart, referring site, and approximate location derived from your IP address.
  • Cookies and similar technologies: used to keep your cart, keep you signed in, protect the site from bots, measure how the site is used, and measure and personalize advertising. See “Cookies and advertising” below.

How we use your information

  • To process and deliver orders, handle returns and warranty claims, and provide customer support.
  • To run your account and remember your cart.
  • To send order and shipping updates.
  • To send marketing emails, if you have subscribed or are an existing customer where the law allows. Every marketing email has an unsubscribe link.
  • To measure and improve our website, products, and customer experience.
  • To show you relevant ads and to measure whether our ads work (see below).
  • To prevent fraud, spam, and abuse, and to keep the site secure.
  • To comply with legal, tax, and accounting obligations.

Cookies and advertising

We and our partners use cookies, pixels, and similar tools on our site:

  • Google Analytics to understand how visitors use the site.
  • Microsoft Clarity to see aggregated heatmaps and session replays that help us fix usability problems.
  • Google Ads to measure purchases that come from our ads and to show ads to people who visited our site (remarketing).
  • Affiliate tracking (our own affiliate program and the Awin network) to credit partners who referred a sale.

Enhanced conversions and customer audiences. When you place an order, we may share your email address and phone number with Google in hashed (scrambled) form so Google can match the purchase to an ad click. We may also upload a hashed list of customer email addresses to Google and Meta to show you relevant offers, to exclude you from ads for products you already own, or to find new customers similar to ours. Hashing means the platforms receive coded values, not readable contact details, and they are contractually limited in how they can use them. You can opt out at any time by emailing [email protected], and we will remove you from future uploads.

Your ad choices. You can turn off personalized ads at https://myadcenter.google.com, https://www.facebook.com/adpreferences, and https://optout.aboutads.info. You can block or delete cookies in your browser settings; the cart and checkout may not work without essential cookies.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information for targeted advertising. For that browser, our advertising tags do not set advertising cookies or use your data for ad personalization, and our remarketing and session-recording tools do not run. GPC applies to the browser and device that send it. To also be removed from the hashed customer lists described above, email [email protected].

Who we share information with

We do not sell your personal information for money. We share it only as follows:

  • Service providers who work on our behalf under contract: payment processors (Stripe, PayPal), shipping carriers (such as FedEx), fulfillment centers (including our production center in Taiwan and Amazon fulfillment for some US orders), website hosting and security, email delivery, our chat assistant platform, customer support tools, and accounting.
  • Advertising and analytics partners (such as Google and Meta), as described above.
  • Affiliate partners and networks, only the information needed to confirm and pay a referred sale (for example an order ID and amount, not your contact details).
  • Legal and safety: when required by law, to respond to lawful requests, or to protect our rights, customers, or others.
  • Business transfers: if our business is sold or merged, your information may transfer to the new owner under this policy.

Under some US state laws, sharing data with advertising partners for cross-context behavioral advertising can count as a “sale” or “sharing”. See “Your privacy rights” for how to opt out.

International transfers

We are based in the United States and our production center is in Taiwan. If you are outside these countries, your information will be transferred to and processed in them. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses offered by our service providers.

How long we keep information

We keep order and transaction records for as long as we need them for warranty, tax, accounting, and business records, which can be longer than 7 years. We keep marketing data until you unsubscribe or ask us to delete it, and chat and support messages for as long as needed to help you and improve our service.

How we protect information

Our site uses encrypted (HTTPS) connections. Payment details are processed by PCI-compliant payment providers. Access to customer data is limited to people and providers who need it. No method of transmission or storage is completely secure, but we work to protect your information.

Your privacy rights

Depending on where you live, you may have the right to:

  • know what personal information we hold about you and get a copy;
  • correct inaccurate information;
  • delete your information;
  • opt out of marketing emails (use the unsubscribe link in any email);
  • opt out of the sale or sharing of your personal information for targeted advertising;
  • withdraw consent where we rely on it, and object to or restrict certain processing (residents of the EU, UK, and similar jurisdictions).

To make a request, email [email protected] with the subject “Privacy request”. We will verify your identity before acting and respond within the time the law requires. We will not discriminate against you for using your rights. You may use an authorized agent where the law allows. If you are in the EU or UK, you can also complain to your local data protection authority.

Children

Our site is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new “Last updated” date, and for significant changes we will give additional notice where required.

Contact us

Questions or requests about this policy: [email protected], +1 (208) 508-1484, or by mail to the address above.

Please also see our Terms and Conditions at https://organicaromas.com/pages/terms-and-conditions/.