Privacy Policy

Aromart collects information you provide when you browse, create an account, place an order, save an address, submit a return request, contact support, review a product, or apply to sell on the marketplace.

This can include your name, email address, phone number, delivery address, billing details, account preferences, order details, support messages, review content, and seller application details where applicable.

Account data may include your login email, password credential record, saved addresses, wishlist activity, payment-card token references, notification preferences, and recent security events.

Passwords are hashed before storage. Aromart will not ask customers to share passwords, card PINs, one-time passcodes, or full card numbers through email, phone, chat, or informal messages.

Order data includes the products and variants purchased, product snapshots at checkout, seller and store context, delivery address, contact details, order status, payment status, shipment status, cancellation or return records, and support notes.

Order records are retained so Aromart can provide order history, coordinate fulfillment, process support requests, maintain audit trails, and resolve disputes.

Payment data is handled according to the payment method selected at checkout. Cash-on-delivery orders store operational payment status, while card payments are handled through the configured payment provider.

For PAYable card payments, Aromart stores provider references, verified callback results, and display-safe saved-card metadata when a customer chooses to save a card. Aromart does not store full card numbers or CVV values.

Aromart uses cookies and similar browser storage for authentication sessions, cart behavior, checkout continuity, security checks, and basic site functionality.

If analytics, advertising, or additional tracking tools are added later, Aromart will update this policy and any required consent notices before using them for that purpose.

For signed-in customers, Aromart may use recent product views, active cart items, wishlist items, and delivered purchase history to order related products and discovery modules. Catalog and search listing pages use marketplace ranking signals, not private personal messages.

Product-view history is retained for a limited period and is used to operate and improve marketplace discovery. Guest browsing is not used for account-level recommendation personalization.

Aromart offers promotion and discount subscription through the storefront footer, an optional checkbox during customer account registration, and account settings. The registration checkbox is not required to create an account. When you choose to subscribe, Aromart stores your normalized email address, consent time, subscription status, consent wording version and hash, and limited abuse-prevention metadata. You can withdraw consent in account settings, through the visible signed link, or through the supported mailbox one-click unsubscribe control included in each promotional email.

Aromart keeps unsubscribed and provider-suppressed records so future campaigns do not send to those addresses. Campaign reporting records delivery outcomes, one unique Aromart offer-link click per campaign recipient, and attributed unsubscribes. It does not use marketing open pixels or retain click IP addresses, browser user agents, or tracking cookies.

Customer data is used to create and manage accounts, process orders, calculate checkout totals, coordinate delivery, provide support, handle cancellations and returns, prevent fraud, secure the platform, improve product availability, and operate marketplace reporting.

Seller data is used to review seller applications, manage stores, enforce marketplace rules, process seller orders, support settlements, and maintain compliance records.

Aromart shares only the information needed for order fulfillment, delivery, support, payment processing, fraud prevention, legal compliance, and platform operations.

When marketplace seller features are enabled, the seller responsible for an order item may receive limited customer and order information needed to fulfill that seller's portion of the order.

Aromart keeps account, order, payment, support, audit, and seller records for as long as needed to operate the marketplace, meet legal or tax requirements, prevent fraud, and resolve disputes.

Customers may contact support to request account corrections, access to account information, or deletion where deletion is available. Some order, payment, tax, audit, fraud-prevention, or dispute records may need to be retained.

Aromart uses server-side authorization checks, password hashing, secure session handling, role-based access control, input validation, logging, and operational review to protect marketplace data.

No online service can guarantee absolute security. Customers should use strong passwords, keep account email access secure, and contact support immediately if they notice suspicious account, order, or payment activity.

For privacy, account, order, or support-data questions, contact Aromart support with the account email and enough context for the team to verify the request.