Who we are

Our website address is: https://aromanursery.com/webstore.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Cookies are small files containing strings of text stored on your computer that we use to authenticate you in transactions made on our websites and deliver content specific to your interests and preferences.

Web beacons are used often together with cookies. We use web beacons to monitor the user’s activity on our website, specifically on how long users visit our web pages, so we would be able to generate reviews and results on website traffic, unique visitor counts, and other impression functions.

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

Who we share your data with and How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

What data information we collect

We collect the following information related to your use of our website and we use all these information to improve the functionality of the website.

Log information may include website requests,operating system,browser details,date and time of your request, and cookies that may identify your browser.

We use IP addresses to analyse trends, administer the site, track user's movement, and gather broad demographic information for operational use. IP addresses are not linked to personally identifiable information.

Acquiring your personal data may occur in the following circumstances whenever you engage with AROMA:

• When you register for our services on both the physical store and online store
• When you shop with us online, browse our websites, or use our mobile applications
• When you use our online or printed vouchers or coupons
• When you contact us or we contact you or you join our promotions, competitions, surveys, and products reviews about our services

While you are transacting on our website, personally identifiable information collected about you may include:

• First and last name, email address, contact details including phone numbers, and PIN/ZIP code
• Your opinion on services, products, and features on our website/li>
• The pages you visit/access
• The links you click on our website
• The number of times you access the page
• Things you view, add to bag, add to wish list

How we use data information

Using personal data may happen in the following circumstances regarding product and service fulfillment and transactions between the user and AROMA.

Operational procedures and transactions:

Fulfilling and managing purchases and enabling sales, processing and settling payments, handling orders, and providing receipts in both physical store and online shop

Providing customer service, processing and assistance with dispute resolution, payment processing including returns, refunds, and other transaction-related issues

Managing subscription services, including order management, billing, improving reorder experiences, communicating with the user about subscription, and offer other products and services

Preventing fraudulent transactions, monitor against theft and otherwise protect our guests and our business

Online marketing and social media

Sending promotional campaigns, surveys, new product and website features, and service or policy update notices through official marketing channels, such as SMS, email, and social media; wherein both auto-generated and customised messages are sent with personalised content based on the user’s personal characteristics or preferences (if you opt in to receiving such information)

Delivering coupons, mobile coupons, newsletters, in-store receipt messages, e-mails, mobile messages, and social media notifications, and administering raffle draws and contests in both physical store and e-commerce

Responding to requests for information about our products and services in our stores and on our websites or mobile application and connecting with the user through phone call, email, online shop, or social media for communications regarding transactions and inquiries

Disclosure to third parties

We disclose personal data to other organisations/companies that perform services for the requirements of our transactions—courier companies for delivery of the products and other service providers that may require personal data for efficient implementation of processes related only to this website. We do not sell, share, or rent any such personal information, unless required by special circumstances such as compliance with subpoenas, court orders, requests from legal authorities or law enforcement agencies requiring such disclosure. This website takes every precaution to protect users' information. When users submit sensitive information via the website, your information is protected both online and off-line.

Social media

We operate channels, pages and accounts on some social media sites to inform, assist and engage with customers. We monitor and record comments and posts made on these channels about us so that we can improve our services.

AROMA is not responsible for any information posted on those sites other than information we have posted ourselves. We do not endorse the social media sites themselves or any information posted on them by third parties.

The following companies, Facebook, Twitter, Instagram, Youtube, Google and Linkedin, may use data for their own purposes, specifically to market to you through their social media platforms and allow engagement on our websites. This includes profiling and targeting you with other advertising.

Your rights and access to information

All information that we have collected is available in our database of contacts. For users who registered on AROMA, the e-commerce platform for a big variety of products, all information are available online in your account and you may access to such information at any time by logging in to your account through our website.

In relation to your personal data, you have the followings rights, as mentioned below:

Request correction or updation of the personal data that we have with us about you. This enables us to correct or update any incomplete or inaccurate data we have about you. However, we may need to verify the accuracy of the corrected or updated data provided to us by you, to secure the data and comply with our data accuracy policies

Request to delete the personal data. You may request to delete or remove personal data where there are no reasons for us processing that data. However, in special cases we may not be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Objection regarding processing your personal data, where we are relying on a legitimate interest and there is something about your particular situation that makes you want to object processing on this ground if you feel it impacts on your fundamental rights and freedom.

Request restriction of processing your personal data. In such circumstances that you have successfully made a request for restriction of your personal data, we will suspend the processing of your personal data—where you wish to cancel all services and close your accounts; or where you are challenging the accuracy of the personal data we hold, and where you may want to exercise or defend legal claims when we would normally delete or anonymise the data.