Privacy Policy
This policy explains what personal information Rotten Fragrances collects when you visit our website or place an order, why we collect it, who we share it with, and what you can ask us to do about it. We have tried to write it in plain language. If anything here is unclear, ask us and we will explain it.
1. Who we are
Rotten Fragrances is an independent, small-batch perfume studio selling fragrance directly to customers through this website. For the purposes of data protection law, Rotten Fragrances is the business responsible for deciding how and why your personal information is processed. Our contact details are in the Contact us section below.
2. Information we collect
Information you give us
- Order information — your name, email address, phone number, billing address and shipping address.
- Payment information — card details are entered on our checkout and passed directly to our payment processor. We do not store full card numbers or security codes on our servers. We may retain the last four digits, card brand and an authorization reference so we can match a payment to an order.
- Account information — if you create an account, your login credentials and saved addresses. Passwords are stored as one-way hashes, not as readable text.
- Communications — anything you send us through our contact page, by email, or through social media, including the content of your message.
- Reviews and submissions — the review text, rating and display name you submit, plus any photos you choose to attach.
- Marketing preferences — whether you have subscribed to our email list, and whether you have later unsubscribed.
Information collected automatically
- IP address, browser type and version, operating system, device type and screen size.
- Pages viewed, products viewed, the page that referred you to us, and the dates and times of your visits.
- Cart contents, including items left in an abandoned cart.
- Session identifiers and cookie identifiers, as described in the cookies section.
Information from third parties
- Payment processors confirm whether a transaction succeeded and may return fraud-risk signals.
- Shipping carriers return tracking numbers and delivery status.
- Affiliates and referral partners may pass a referral code identifying which partner sent you to us. This code is tied to the order, not to a profile of you.
- Analytics and advertising platforms may provide aggregate reporting about how visitors reach and use the site.
We do not knowingly collect sensitive personal information such as government identification numbers, financial account numbers, precise geolocation, health information, biometric data, or information about your race, religion, political opinions, sexual orientation or union membership. Please do not send us that information.
3. Cookies and similar technologies
Cookies are small text files stored by your browser. We use them in four broad categories:
- Strictly necessary — session cookies that keep you logged in, remember what is in your cart, and protect forms against cross-site request forgery. The site does not function without these.
- Preference — cookies that remember choices such as dismissed notices or display settings.
- Analytics — cookies that help us understand which pages and products people actually look at, so we know what to make more of.
- Advertising and attribution — cookies set by advertising platforms or affiliate tracking to measure whether a campaign or partner produced a sale.
Most browsers let you refuse or delete cookies through their settings. Blocking strictly necessary cookies will break checkout and login. Blocking the other categories will not.
4. How we use your information
- To process, package, ship and track your order, and to send order confirmations and shipping notices.
- To handle damaged, incorrect or defective orders under our Shipping & Returns Policy.
- To answer questions you send us and provide customer support.
- To maintain your account and order history.
- To detect, investigate and prevent fraudulent transactions, chargeback abuse and misuse of discount codes.
- To publish reviews you submit, subject to our Terms of Service.
- To send marketing emails, if you have subscribed.
- To understand site traffic, improve the website, and decide which fragrances to release or restock.
- To comply with tax, accounting, consumer protection and other legal obligations.
We do not use your information to make automated decisions that produce legal or similarly significant effects about you.
5. Legal bases for processing
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:
- Performance of a contract — processing your order, taking payment, shipping goods and handling order problems.
- Legitimate interests — securing the site, preventing fraud, understanding how the site is used, and improving our products. We weigh these interests against your rights.
- Consent — marketing emails and non-essential cookies. You can withdraw consent at any time, which does not affect processing carried out before you withdrew it.
- Legal obligation — retaining transaction records for tax and accounting purposes.
6. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising in exchange for money. We do share it with service providers who need it to run the business:
- Payment processors, to authorize and settle transactions and to handle refunds and disputes.
- Shipping carriers and fulfilment services, to deliver your order.
- Email service providers, to send transactional and marketing email.
- Hosting, storage and security providers, who operate the infrastructure this site runs on.
- Analytics and advertising platforms, for measurement and reporting.
- Professional advisers such as accountants and lawyers, where necessary.
These providers are permitted to use your information only to perform services for us. We may also disclose information where we are legally required to do so, where necessary to establish or defend legal claims, to investigate fraud, or in connection with a merger, acquisition or sale of business assets. If ownership changes, we will post notice on this page before your information becomes subject to a different policy.
Note that some advertising and analytics cookies may constitute a "sale" or "sharing" of personal information under California law even though no money changes hands. See Your privacy rights for how to opt out.
7. Marketing emails
We send marketing email only to people who have asked for it. Every marketing message includes an unsubscribe link that works, and unsubscribing takes effect promptly. You will still receive transactional messages about orders you have placed — order confirmations, shipping notices and replies to your support requests — because those are not marketing.
8. How long we keep information
- Order and transaction records — retained for at least seven years, to meet tax, accounting and consumer protection requirements.
- Account information — retained while your account is open, and for a reasonable period after you close it in case of disputes.
- Marketing subscriptions — retained until you unsubscribe, plus a suppression record so we do not accidentally re-add you.
- Support correspondence — typically retained for up to three years.
- Analytics and log data — typically retained in identifiable form for up to twenty-six months.
- Published reviews — retained as long as the review is published, unless you ask us to remove it.
9. How we protect information
We use encryption in transit (HTTPS) across the site, hashed password storage, access controls limiting who on our side can view customer data, and payment handling that keeps card numbers off our servers. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Use a strong, unique password for your account and tell us promptly if you believe it has been compromised.
10. Your privacy rights
Depending on where you live, you may have some or all of the rights below. We honour requests from all customers where we reasonably can, regardless of location.
- Access — ask what personal information we hold about you and get a copy.
- Correction — ask us to fix information that is wrong or out of date.
- Deletion — ask us to delete your information, subject to records we must keep by law.
- Portability — receive your information in a portable, machine-readable format.
- Opt out of marketing — unsubscribe at any time.
- Opt out of sale or sharing — direct us not to sell or share your personal information.
- Limit use of sensitive information — though as noted above, we do not collect it.
- Non-discrimination — we will not deny you products, charge you different prices, or give you a lower quality of service because you exercised a privacy right.
- Object or restrict — where we rely on legitimate interests, object to that processing or ask us to restrict it.
- Withdraw consent — where we rely on consent.
- Complain — lodge a complaint with your data protection authority. In the UK this is the Information Commissioner's Office; in the EEA it is your national supervisory authority; in California it is the California Privacy Protection Agency or the Attorney General.
11. How to exercise your rights
Email us at support@rottingturtle.com or use our contact page, and tell us which right you want to exercise. We will need to verify your identity before acting, usually by confirming the email address on file and details of a recent order. We do not require you to create an account to make a request.
We aim to respond within thirty days for California requests and within one month for EEA and UK requests, and will tell you if we need longer. An authorized agent may submit a request on your behalf with written permission, which we may ask to verify directly with you.
12. Do Not Track and Global Privacy Control
There is no single accepted standard for how websites should respond to browser Do Not Track signals, so we do not respond to DNT headers. We do treat a Global Privacy Control signal as a valid request to opt out of the sale or sharing of personal information for the browser that sends it.
13. Children's privacy
This site is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
14. Third-party links
Our site links to other websites, including social media platforms, payment pages and carrier tracking pages. We are not responsible for their privacy practices. Read their policies before giving them information.
15. International transfers
We operate from the United States, and our service providers may process information in the United States and other countries. Privacy laws in those countries may differ from those where you live. Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
16. Changes to this policy
We may update this policy as our practices or the law changes. The current version will always be posted on this page with a revised "last updated" date. If we make a material change to how we use information we already hold, we will give notice by email or by a prominent notice on the site before the change takes effect.
17. Contact us
Questions, requests or complaints about privacy:
- Rotten Fragrances
- 30 N. Gould Street, Sheridan, WY 82801
- Email: support@rottingturtle.com
- Web: rottingturtle.com/contact