Loading
Loading
Legal
Plain-English summary of what we collect, why we collect it, and how we keep it safe.
Last updated · 2026-09-21
Account details (name and email), shipping address, order history, design files you upload, and first-party page and product-view analytics when your tracking preference permits it.
To produce and ship the orders you place, to support you afterwards, and to understand how to improve the product.
Customer data lives in our database with role-based access. Design assets are stored on encrypted object storage. Payment data is handled by our payment provider — we never see card numbers.
If you message our customer-service WhatsApp number, the messages and attachments exchanged on that number — including recent conversation history synced when the number is connected to our systems — may be stored in our back office for up to 24 months and used to handle your order and support requests. Access is role-based and logged. Personal WhatsApp numbers of our staff are not synced. Email privacy@aromaroads.co.uk to ask about or delete these records.
After we ship a genuine order, we may share your name, email address, order reference, language or locale, and the contents of the shipping notification — including the order number, carrier, tracking details and our support contact — with Trustpilot A/S. We do this so Trustpilot can send a neutral invitation asking for honest feedback about your experience with Aroma Roads. Invitations are applied consistently and are not used for advertising or linked to incentives. Trustpilot handles the invitation and any review you choose to submit under its own privacy policy. You can use any unsubscribe or privacy control Trustpilot provides in the invitation, or email privacy@aromaroads.co.uk to ask us to stop future Trustpilot invitations and exercise your data rights. Choosing not to review will not affect your order or support.
You can request a copy of the data we hold on you, ask us to update it, or ask us to delete it. Email privacy@aromaroads.co.uk and we'll respond within 30 days.
Essential cookies keep you logged in and remember your cart. For analytics, we use a first-party consent cookie for 365 days and a random first-party visitor identifier for up to 90 days. Raw web events are retained for 90 days. We do not fingerprint your device, track you across other sites, or sell behavioural data. In the UK, EU, EEA and Switzerland — and when we cannot determine the visitor country — analytics starts only after acceptance. Other launch markets receive notice and may opt out at any time.
Use Manage tracking below to accept or opt out. Opting out stops new non-essential analytics events and withdraws the server-side visitor identity where one exists. Anonymous visitors who clear all browser storage cannot be recognised without fingerprinting, which we deliberately do not use.