Privacy
Policy

1. Scope

This Privacy Policy applies to Essentrx storefronts, including the U.S. and Dominican Republic experiences, customer accounts, fragrance quizzes, memberships, orders, support interactions, and marketing communications that link to it (the “Services”). It does not govern a third-party website or service that has its own privacy policy.

Essentrx is responsible for the personal information described here. “Personal information” means information that identifies, relates to, describes, can reasonably be linked with, or is otherwise protected as personal data about an individual under applicable law.

2. Information We Collect

Information you provide

• Identifiers and contact information, including name, email address, phone number, shipping and billing address, and account identifiers.
• Account and authentication information, such as a password hash, sign-in status, saved settings, and security events.
• Order, return, exchange, shipment, payment-status, and membership history, including payment-provider tokens or transaction identifiers. Stripe and PayPal process full payment-card or payment-account details; Essentrx does not receive or store full card numbers.
• Fragrance quiz answers, scent preferences, saved selections, ratings, recommendations, and profile details.
• Support messages, reviews, survey responses, promotion or referral details, and other content you choose to submit.
• Email and text-message preferences, consent or opt-out status, and records needed to honor those choices.

Information collected automatically

• IP address, browser and operating-system details, device and advertising identifiers, user agent, approximate location derived from IP, language, and network information.
• Cookie, session, referral, attribution, and campaign data.
• Pages viewed, links and searches, quiz interactions, cart and checkout events, purchases, message or advertisement interactions, errors, and performance data.

We do not intentionally collect government identification, precise geolocation, or sensitive medical information through the ordinary storefront. Please do not send such information unless we specifically request an appropriate method for a legally required purpose.

3. Sources

We receive information from you; your browser or device; payment providers such as Stripe and PayPal; fulfillment providers such as Shippo and delivery carriers; email and support providers such as Resend and Chatwoot; hosting and database providers such as Railway; advertising, analytics, and attribution partners such as Google, Meta, and Dub; referral or campaign partners; and public or fraud-prevention sources where lawful.

4. How We Use Information

• Provide, personalize, maintain, and troubleshoot the Services, accounts, carts, and fragrance recommendations.
• Process payments, orders, deliveries, returns, exchanges, membership renewals, and cancellations.
• Authenticate users, prevent fraud and abuse, secure the Services, and enforce our terms.
• Send transactional messages about accounts, purchases, deliveries, security, support, and memberships.
• Send optional promotional email or text messages with consent or another lawful basis, and maintain suppression records after opt-out.
• Measure site use, campaign attribution, advertising performance, conversions, and product interest.
• Improve products and customer experience, conduct internal analysis, and develop features.
• Maintain business, tax, consent, compliance, and dispute records; comply with legal obligations; and establish, exercise, or defend legal claims.

5. How We Disclose Information

We disclose information for the purposes described above to service providers and processors that help run the Services, including payment, fraud-prevention, fulfillment, delivery, email, customer-support, analytics, advertising, attribution, hosting, database, and professional-adviser providers.

Advertising and analytics partners may receive online identifiers, device and browser information, IP address, user agent, campaign data, browsing and shopping events, and, where configured, hashed customer identifiers. Hashing does not necessarily make information anonymous.

We may also disclose information to: authorities or other parties when reasonably necessary to comply with law, protect rights or safety, investigate fraud, or respond to valid legal process; professional advisers subject to appropriate duties; and parties involved in a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable safeguards.

We do not disclose text-message opt-in data to third parties for their own unrelated marketing. We may provide it to messaging vendors and carriers that deliver messages for us, or as otherwise required by law.

6. Sale, Sharing, and Targeted Advertising

Essentrx does not sell personal information for money. Some disclosures to advertising or analytics partners may nevertheless be considered a “sale,” “sharing” for cross-context behavioral advertising, or targeted advertising under certain U.S. state privacy laws.

You can opt out for this browser through Your Privacy Choices. We also recognize Global Privacy Control (“GPC”) as an opt-out signal. We apply an opt-out by preventing Google Analytics/Ads, Meta Pixel and Conversions API, and Dub analytics from loading or receiving new events from that browser. Essential account, cart, security, checkout, payment, shipping, and support functions continue.

7. Cookies and Similar Technologies

Essential technologies support sign-in, carts, checkout, security, routing, attribution needed to honor a requested promotion, saved choices, and basic operation. Analytics and advertising technologies measure use, campaign results, and conversions. Some providers may combine information under their own policies where permitted.

The Essentrx opt-out is stored in a first-party cookie and applies to the browser or device where it is set. Clearing cookies may clear the choice. Because there is no uniform legal or technical standard for other “Do Not Track” signals, we do not respond to them separately from GPC.

8. Communication Choices

Use the unsubscribe link in a promotional email to stop marketing email. Reply STOP to a promotional text to opt out or HELP for help. Service messages necessary for an order, account, security, or active membership may still be sent. We may retain a limited suppression record so we do not restart marketing you declined.

9. Retention

We keep personal information only as long as reasonably needed for the purposes described in this policy. The period depends on the record type, whether an account or membership remains active, order fulfillment and support needs, payment and fraud risk, applicable tax and accounting requirements, legal limitation periods, disputes, and whether deletion is requested. Order and transaction records are generally kept for the legally required accounting, tax, fraud-prevention, and dispute period. Account and preference information is generally kept while the account is active and for a reasonable period afterward. Marketing consent, opt-out, security, and legal-compliance records may be kept as needed to demonstrate and honor those choices. We delete, deidentify, or restrict information when it is no longer reasonably needed, subject to technical backup cycles and legal exceptions.

10. Privacy Rights

Depending on where you live and the law that applies, you may have a right to request access to, correction of, deletion of, or a portable copy of eligible personal information; information about categories, sources, purposes, or recipients; opt-out of sale, sharing, or targeted advertising; withdraw consent; limit certain uses of sensitive information; or appeal a denied request.

Submit a request through Your Privacy Choices or email support@essentrx.com with the subject “Privacy Request.” Include your name, account email, state or country of residence, and the request. We may verify identity and authority proportionately. Authorized agents may submit requests where permitted, but we may require proof of authority and direct identity confirmation. We will respond within the period required by applicable law and explain any denial and appeal method. We will not unlawfully discriminate against you for exercising a privacy right.

Rights are subject to exceptions. For example, we may keep information needed to complete a transaction, protect security, comply with law, exercise legal rights, or maintain a requested opt-out.

11. Children

The Services are not directed to children under 13, and we do not knowingly collect their personal information. Purchases, account creation, and memberships are for people at least 18 or the legal age of majority. Contact us if you believe a child submitted personal information so we can investigate and take appropriate action.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, protected payment processing, and secure transport where appropriate. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Use a unique password and notify us promptly of suspected unauthorized access.

13. International Processing

Information may be processed in the United States and other places where our providers operate. Privacy laws may differ from those where you live. We use contractual, technical, and organizational measures as appropriate for applicable cross-border requirements. The Dominican Republic storefront may also involve local delivery providers needed to fulfill an order.

14. Changes

We may update this policy to reflect changes in the Services, providers, practices, or law. We will post the revised version, update the effective date, and provide additional notice or obtain consent where required. Material changes apply prospectively unless law permits otherwise.

15. Contact

Privacy questions and requests may be sent to support@essentrx.com. Please do not email passwords or full payment-card numbers.