Privacy Policy

What we collect, and when

We collect information about you at four moments, and at no other time. Browsing is not one of them: visits are counted, but the count holds nothing that says the visit was yours — see how we count visits below.

When you buy

Your name, email address and shipping address, collected on our checkout page and passed to Stripe to take the payment. We also keep what you ordered, what it cost, and where it was sent.

We never see your card. Card details are entered on Stripe’s own payment page and are never sent to our servers. What we receive back is a reference, the last four digits, and whether the payment succeeded.

When you create an account

Your email address and a password. The password is stored only as a one-way hash by our authentication provider — it cannot be read back by us or by anyone else, including to help you recover it.

When you buy Home & Car

In addition to the above, we record that the purchase earned you the refill benefit, and the date it runs to. That record is what makes your refill price apply when you sign in; it holds no more than the fact, the date, and the order that earned it.

We also keep a copy of the terms shown to you at the moment you agreed to them, so that both of us can see later exactly what was agreed.

When you write to us

The name, email address and message you put in the enquiry form, or the contents of your message if you write to us on WhatsApp or by email.

What we do not collect

We think the absences matter as much as the list above, so they are stated rather than left to be assumed:

• No advertising pixel and no cross-site tracker. No Meta pixel, no Google Ads tag, no third party following you from here to anywhere else. Nobody is building a profile of you.
• Nothing that says which visit was yours. We do count visits — see below — and that counting carries no name, no email and no account, so a page view cannot be traced back to a person.
• No fonts loaded from elsewhere. The typefaces are served from our own site rather than from a font network, so reading a page does not tell a third party that you did.
• No card details. As above — they never reach us.
• No location beyond your shipping address, which you type in yourself.

How we count visits

We use Vercel Analytics, which is the counting service our host runs. It records the page that was opened, roughly where in the world the request came from, whether it was a phone or a desktop, and which site linked here — and it does that without setting a cookieand without an identifier that follows you to other sites. That is why this site has no cookie banner to dismiss.

Alongside the page count, a few moments in the shop are counted: a product added to the basket, a checkout started, an order completed, a sample request opened. What travels with those is the product and the amount — never who you are. An order in that count is a number; the order with your name on it lives in your account, which only you and the shop can open.

We also measure how fast pages load for real visitors, through Vercel Speed Insights. It reports timings, not people.

Cookies and what is stored in your browser

We use no advertising cookies, and the visit counting described above sets no cookie either — which is why there is no consent banner to dismiss. What is stored is limited to two things:

• A session cookie, once you sign in, so that you stay signed in. Removing it signs you out.
• Your cart, kept in your own browser’s storage so it survives a refresh. It stays on your device and is not sent to us until you check out.

Who else sees your information

Only the companies that make the shop work, and only the part each one needs:

Stripe — payments

Receives your name, email, billing and shipping address and card details in order to take payment. Your card details go to Stripe directly; they never pass through or are stored on our servers.

Supabase — database and sign-in

Stores your account, your orders and your refill benefit on our behalf.

Vercel — hosting, and the visit counting

Serves the site. Like any web host it processes the technical request data — IP address, browser — needed to deliver a page.

USPS and FedEx — shipping

Receive the destination postcode when a shipping price is calculated, and the full delivery address when a parcel is actually sent.

DreamHost — email

Delivers the mail this shop sends you: your receipt, the notice that your parcel has shipped, and any reply we write. Your name, your email address and what you ordered pass through it, because that is what a receipt is.

WhatsApp (Meta) — when we message you, and when the shop is alerted

If you write to us on WhatsApp, Meta carries that conversation. The shop also receives its own alerts there — a refund, a payment that failed — and those alerts name the customer concerned, so an email address can reach Meta that way even if you never opened WhatsApp yourself. The alert travels through an automation service operated by the people who built this site before it reaches WhatsApp.

We do not sell your information, and we do not share it for advertising. Nobody outside the list above receives it.

How long we keep it

Order and payment records are kept for as long as tax and accounting rules require. Your account and its history are kept until you ask us to remove them. Enquiries are kept while we deal with them and for a reasonable period afterwards in case you write again about the same thing.

Your choices

You can ask us to:

• tell you what we hold about you;
• correct anything that is wrong;
• delete your account and personal details, except records we are required to keep for tax purposes.

Write to contact@ambianceairscents.com and we will answer. You can also see your own orders, and your refill benefit and the date it runs to, at any time by signing in.

Children

This shop is not intended for children, and we do not knowingly collect information from anyone under 13. If you believe a child has given us their details, write to us and we will remove them.

Where we operate

We ship within the United States only. The shop is operated by Ambiance AirScents Inc, of 1000 Legion Pl, Ste 900, Orlando, FL 32801.

Changes to this policy

If this policy changes we will update the date at the top of this page. If a change materially affects what we collect or who we send it to, we will say so plainly rather than relying on the date alone.