Privacy Policy
Privacy Policy for Ora-Aroma
Last Updated: August 31, 2025
1. Introduction
Welcome to Ora-Aroma (“we,” “us,” or “our”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [Your Website URL] (the “Site”), including any other media form, media channel, mobile website, or mobile application related or connected thereto.
This policy is specifically designed to comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
2. Scope of this Policy
This policy applies to all visitors, users, and others who reside in the State of California ("consumers" or "you").
3. Information We Collect
We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“Personal Information”).
We have collected the following categories of Personal Information from consumers within the last twelve (12) months:
CategoryExamplesCollected?
A. IdentifiersReal name, postal address, email address, IP address, account name.YES
B. Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))Name, address, telephone number, credit card number, debit card number.YES
C. Protected classification characteristics under California or federal lawAge, gender. (We may infer this but do not directly ask for it).MAYBE
D. Commercial InformationRecords of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.YES
E. Internet or other similar network activityBrowsing history, search history, information on a consumer's interaction with our website (e.g., clicks, time on page).YES
F. Geolocation DataApproximate physical location derived from IP address.YES
G. Sensory DataAudio, electronic, visual information (e.g., recordings of customer service calls).NO
H. Professional or employment-related information(Not applicable for a typical webshop customer).NO
I. Inferences drawn from other personal informationProfile reflecting a person's preferences, characteristics, and shopping behavior.YES
J. Sensitive Personal Information (SPI)Account log-in in combination with a password; precise geolocation; credit/debit card number in combination with security/access code.YES
Export to Sheets
We obtain the categories of Personal Information listed above from the following sources:
-
Directly from you: When you create an account, place an order, contact customer service, or subscribe to our newsletter.
-
Indirectly and automatically from you: When you navigate and interact with our Site, through the use of cookies and other tracking technologies.
-
From third-party service providers: Such as payment processors and analytics providers.
4. How We Use and Share Your Information
We use your Personal Information for a variety of business purposes:
-
To Fulfill Orders and Provide Services: To process and ship your orders, manage payments, and create and manage your account.
-
Customer Support: To respond to your inquiries and resolve any issues.
-
Marketing and Advertising: To send you promotional materials, newsletters, and other information about our products. We may "share" your information (as defined by CPRA) with advertising partners for cross-context behavioral advertising.
-
Analytics and Improvement: To understand how users interact with our Site, improve our services, and personalize your experience.
-
Security and Fraud Prevention: To detect security incidents, protect against malicious or fraudulent activity, and comply with legal obligations.
We may disclose your Personal Information to a third party for a business purpose. When we do, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performing the contract.
We share Personal Information with the following categories of third parties:
-
Service Providers: Payment processors, shipping carriers, IT and hosting providers, marketing and email service providers.
-
Advertising Partners: Social media platforms and ad networks to provide targeted advertising (this may be considered "sharing" under CPRA).
-
Analytics Providers: To help us analyze website traffic and user behavior.
-
Governmental Authorities: As required by law, regulation, or legal process.
5. Your California Privacy Rights
As a California resident, you have the following rights regarding your Personal Information:
-
The Right to Know and Access: You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months.
-
The Right to Delete: You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions.
-
The Right to Correct: You have the right to request that we correct any inaccurate Personal Information that we maintain about you.
-
The Right to Opt-Out of Sale or Sharing: You have the right to direct us not to "sell" or "share" your Personal Information. "Sharing" under the CPRA refers to sharing for cross-context behavioral advertising.
-
The Right to Limit the Use and Disclosure of Sensitive Personal Information (SPI): You have the right to direct us to limit our use of your SPI to that which is necessary to perform the services or provide the goods reasonably expected by an average consumer.
-
The Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
6. How to Exercise Your Rights
To exercise the rights described above, please submit a verifiable consumer request to us by:
-
Emailing us at: [privacy@ora-aroma.com]
-
Visiting our online rights request portal at: [Link to Your Privacy Rights Form]
-
Calling us at: [Your Toll-Free Phone Number, if applicable]
Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information.
Verification Process: We must verify your identity before processing your request. The verification process may require you to provide information such as your name, email address, and recent order history to match with our records.
7. "Do Not Sell or Share My Personal Information" and "Limit the Use of My Sensitive Personal Information"
You can exercise your right to opt-out of the sale or sharing of your Personal Information and your right to limit the use of your Sensitive Personal Information by clicking the links below:
-
[Do Not Sell or Share My Personal Information]
-
[Limit the Use of My Sensitive Personal Information]
We also honor opt-out preference signals, such as the Global Privacy Control (GPC). If we detect a GPC signal from your browser, we will automatically treat it as a valid request to opt-out of the sale or sharing of your information for that browser.
8. Data Retention
We will retain your Personal Information for as long as is necessary for the purposes set out in this Privacy Policy, or as required by law. The criteria used to determine our retention periods include the length of time we have an ongoing relationship with you, whether there is a legal obligation to which we are subject, and whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations).
9. Data Security
We have implemented and maintain reasonable administrative, technical, and physical security measures to protect the security, confidentiality, and integrity of the Personal Information we collect. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee its absolute security.
10. Children's Privacy
Our Site is not intended for individuals under the age of 16. We do not knowingly collect Personal Information from children under 16. If we become aware that we have collected Personal Information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers. If you are a California resident under 16, you have the right to opt-in, or have your parent or guardian opt-in, to the "sale" or "sharing" of your Personal Information.
11. California's "Shine the Light" Law
California Civil Code Section § 1798.83 permits users of our Site that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please contact us at the email address provided below.
12. Changes to This Privacy Policy
We reserve the right to amend this privacy policy at our discretion and at any time. When we make changes to this privacy policy, we will post the updated notice on the Website and update the policy's "Last Updated" date.
13. Contact Us
If you have any questions or comments about this policy, the ways in which we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Ora-Aroma
Email: [info@ora-aroma.com]
Website: Aroma-Ora.com