Your details,
handled with care.

Information you share

• Account details such as your name, email, phone, delivery address and area, fragrance preferences and saved scents.
• Order details such as products, delivery instructions, gift recipient and message, payment or refund status and references, discovery credit and referrals.
• Quiz answers, recommendations, images you submit and messages you send to the shop.

When you sign in with Google

If you choose Google sign-in, we use your Google account identifier, verified email and basic profile names to create or access your account. When available, we also store your Google profile-photo URL and display the photo in your signed-in profile and the site header. Your browser requests the image from Google’s image service. We do not receive your Google password or request access to your Gmail, Drive or contacts.

Connecting Google to an existing email account requires you to sign in to that account first. For email-and-password accounts, we store a password hash rather than the plain password.

How we use your information

We use these details to manage accounts and saved scents, personalise fragrance suggestions, check availability, source products, prepare and deliver orders, send order updates, handle support, manage credits and maintain financial records. Sending an order request asks us to confirm stock, the final price and delivery before payment. The simplified checkout does not automatically subscribe you to marketing.

Authorised staff access information needed for their work. Details needed to operate the shop or fulfil an order may be handled by our hosting, delivery, email and WhatsApp service providers. Messaging services are used when configured or when you choose to contact us through them.

Cookies, browser storage and usage

Essential cookies keep you signed in and protect the Google sign-in process. Browser storage remembers your shopping bag, guest saved scents and language choice. A shopping bag can include gift details you enter. Clearing cookies or browser storage may sign you out or remove these choices.

We record first-party usage events such as page views, product views, quiz, sharing, checkout and WhatsApp actions to understand shop activity and troubleshoot problems. Traffic reports use a random browser-session identifier, public page paths, general referral or campaign categories and device category. We do not include search text, private receipt links or customer contact details in these traffic records. Traffic reports use a 180-day window. Older detailed traffic events are deleted when events are recorded or reports are read. Browsers that request Do Not Track or Global Privacy Control are excluded from this analytics tracking. For the staff live-activity view, visible shop tabs send a heartbeat about every 30 seconds. Anonymous sessions active within five minutes can appear with their current public page or perfume and an approximate country and city. We derive this broad location from the request IP using a local DB-IP database; the IP is not sent to a location service, stored in analytics records or shown to staff. Live presence stays in server memory for up to 30 minutes and resets on restart. We also estimate active perfume-viewing time in short increments while the product is visible and the browser is focused, pausing after 60 seconds without interaction or while the shopping bag or account panel covers the product. We do not record what you type or the content of pointer or touch interactions. Anonymous product-stage events help staff compare product views, bag additions, checkout starts and successfully submitted order requests. Drop-off analysis separates sessions with activity in the last 30 minutes from completed browsing sessions; it does not reveal why someone left or prove that an order was paid. These timing and journey records follow the same 180-day analytics retention and privacy opt-outs. Locations may be missing or inaccurate, especially with mobile networks and VPNs. We do not request precise device location or link these live rows to customer accounts. Technical information, including an IP address used for request limits, is also processed to operate and protect the service. Hosting systems may keep technical logs, and your browser may load fonts or product images from external providers.

Sharing and external services

Sharing tools can pass your chosen image, text and product link to your device or another app. Anyone with a shared quiz or gift reveal link can view its shared content, including a gift recipient or message you supplied. Keep private receipt access links for their intended recipients.

Google, Instagram, WhatsApp and other external services handle information under their own privacy policies when you use them or follow their links.

Keeping and updating information

We keep information while it supports your account, order fulfilment, customer support, financial records and safe operation of the shop. Copies can remain in backups. Retention and deletion depend on these needs; we do not promise a fixed automatic deletion period.

You can update your profile and saved scents in your account. Contact us to request access to, correction of or deletion of your information. We may need to verify that the account or order belongs to you, and retain records needed for outstanding orders, disputes or necessary financial records.