Chroma Aromatics (“we”, “us”) makes small-batch solid perfume balm and sells it at chromaaromatics.com. This policy explains what personal information we collect, why, who we share it with, and what you can ask us to do about it.
Last updated: September 18, 2026
Information you give us
When you place an order we collect your name, email address, billing and shipping address, phone number if you provide one, and the contents of your order. We need this to take payment, ship your order, and handle returns.
When you create an account we store your email address, an encrypted version of your password, and your order history so you can sign in and view past orders.
When you contact us or sign up for our newsletter we collect your email address and whatever you choose to write to us.
If you start checkout and do not finish, our store saves the email address you entered so we can send you a reminder that your cart is still waiting. You can opt out of these reminders using the unsubscribe link in any such email, or by emailing us.
Payment information
We do not see or store your full card number. Payments are processed by WooPayments, which is operated by Automattic and built on Stripe. Your card details go directly to the payment processor, and we receive only a confirmation, the last four digits, and the card type. Their handling of your data is governed by their own privacy policies.
Information collected automatically
Like most websites, we collect limited technical information when you visit: your IP address, browser and device type, the pages you view, and the site you arrived from. We use this to understand what people look at and to keep the store working and secure.
This is handled by Jetpack Stats and WooCommerce Analytics, both operated by Automattic. We also use Jetpack Protect and Loginizer, which record IP addresses of failed login attempts to block brute-force attacks.
Cookies
We use cookies that are necessary for the store to function, including remembering what is in your cart and keeping you signed in. We also use cookies for the analytics described above. You can block or delete cookies in your browser settings, but the cart and checkout will not work properly without the essential ones.
Who we share information with
We do not sell your personal information. We share it only with the services we need to run the store:
- Payment processing — WooPayments / Automattic and Stripe
- Shipping — the carrier fulfilling your order, which receives your name and delivery address
- Email — MailPoet, for order notifications and newsletters you have signed up for
- Analytics and security — Automattic, through Jetpack
- Hosting — our web host, which stores the site and its database
- Product listings — Google, where we submit product information such as names, images, prices, and availability. This is product data, not customer data.
We may also disclose information where we are legally required to, or to protect our rights.
How long we keep it
We keep order and transaction records for as long as required for tax, accounting, and warranty purposes, which in the United States is generally seven years. Account information is kept until you ask us to delete it. Newsletter subscriptions are kept until you unsubscribe.
Your rights
You can ask us to show you the personal information we hold about you, correct it if it is wrong, delete it, or send you a copy of it. Email support@chromaaromatics.com and we will respond within 30 days. We may need to verify your identity first, and we may have to keep certain order records even after a deletion request where the law requires it.
California residents. If you live in California, you have the right to know what personal information we collect and how we use it, to request deletion, to request a copy, and not to be discriminated against for exercising those rights. We do not sell or share your personal information as those terms are defined under California law. Use the same email address above to make a request.
Children
Our store is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, email us and we will delete it.
Security
Our site is served over an encrypted HTTPS connection and card data is handled entirely by our payment processor. No method of transmission or storage is completely secure, but we take reasonable steps to protect the information we hold.
Changes to this policy
If we change how we handle personal information, we will update this page and the date at the top.
Contact us
Questions about this policy, or about your personal information, go to support@chromaaromatics.com. You can also reach us through our contact page.