Privacy Policy

aromart may collect information you provide when browsing, creating an account, placing an order, contacting support, or using marketplace features.

This may include name, email address, phone number, delivery address, billing details, order details, and support messages.

Account data may include your name, email address, password credentials, saved addresses, wishlist activity, and account preferences.

Passwords are stored securely using hashing. aromart should never ask for your password through email or chat.

Order data may include products purchased, product and variant snapshots, seller/store context, delivery address, contact details, order status, and support notes.

Order records are kept so aromart can provide order history, customer support, delivery coordination, and audit trails.

The MVP uses manual/cash-on-delivery payment. aromart does not currently process card payments directly.

If online payment gateways are added later, payment processing should happen through approved payment providers and this policy must be reviewed and updated.

aromart may use cookies or similar browser storage for sessions, guest cart storage, authentication, security, and basic site functionality.

Analytics and advertising cookies should not be enabled without updating this policy and any required consent notices.

Customer data may be used to process orders, provide support, manage accounts, improve product availability, prevent fraud, and operate the marketplace.

Data should only be used for legitimate platform, business, safety, or legal purposes.

aromart may share only the information needed for order fulfillment, delivery, support, payment processing, fraud prevention, or legal compliance.

Future seller marketplace features may require sharing limited fulfillment information with the seller responsible for an order item.

Customers may contact aromart to ask about account data, order data, corrections, or deletion requests where applicable.

The final rights process depends on the laws that apply to aromart and must be reviewed before public launch.

aromart uses server-side authorization, password hashing, secure sessions, and validation controls in the platform foundation.

No website can guarantee absolute security. Customers should use strong passwords and contact support if they notice suspicious account activity.