Legal

Privacy Policy

Last updated: October 2026

1. Who We Are

FragranceMaster is a UK-based fragrance sampling service operating at fragrancemaster.org. We sell fragrance samples and help customers discover new scents through our personalised quiz.

For any privacy-related queries, contact us at: fragrancemasterorg@gmail.com

2. What Data We Collect

When you place an order, we collect the following through our payment processor (Stripe):

• Your name and email address
• Your delivery address
• Payment details (handled securely by Stripe — we never see your full card number)

When you take the quiz, we collect your answers (for example scent preferences, budget, favourite perfumes, occasions and skin type). These are sent to our server and to our AI provider to generate your recommendations. We do not ask for your name or email in the quiz, and we do not save your answers after your recommendations are returned.

If you use our suggestion form, we collect whatever you choose to include in your message.

We also store the following locally on your device (not on our servers):

• Your basket contents (stored in your browser's localStorage)
• Your cookie preference (accepted or declined)

Like most websites, our hosting provider automatically processes technical data such as your IP address and browser type when you visit, in order to deliver the site and keep it secure.

3. How We Use Your Data

We use your personal data only to:

• Process and fulfil your order
• Send you an order confirmation email and a dispatch email with your tracking number
• Contact you if there is an issue with your order
• Generate fragrance recommendations from your quiz answers

We do not use your data for marketing, and we do not build profiles of you beyond the one-off quiz recommendation you request.

4. Cookies

We use only essential cookies and local storage to make the website function properly:

• Basket storage — saves your basket contents so items are not lost if you navigate between pages
• Cookie preference — remembers whether you have accepted or declined cookies

We do not use any third-party tracking cookies or analytics tools. No data from cookies is sent to external services by us.

Stripe, our payment processor, may set its own cookies when you proceed to checkout. These are governed by Stripe's Privacy Policy.

5. Who We Share Your Data With

We use the following service providers (processors). Each receives only the data it needs to do its job:

• Stripe — payment processing. Receives your name, email, delivery address and payment details. Privacy policy
• Royal Mail — delivery. Receives your name and delivery address to deliver your order. Privacy notice
• Resend — email delivery. Receives your email address, first name and order details to send your order confirmation and dispatch emails. Privacy policy
• Anthropic — AI recommendations. Receives your quiz answers (not your name, email or address) to generate your fragrance matches. Privacy policy
• Supabase — our database. Stores our product catalogue and a record of each paid order's Stripe reference, used to update stock. It does not store your name, email or address. Privacy policy
• Vercel — website hosting. Order, quiz and form data passes through Vercel's servers when you use the site, and Vercel processes technical data such as IP addresses. Privacy policy

We do not sell, rent, or trade your personal data with any third party.

6. International Transfers

Some of these providers (including Stripe, Resend, Anthropic and Vercel) are based in, or process data in, the United States or other countries outside the UK. Where personal data is transferred outside the UK, it is protected by safeguards recognised under UK GDPR, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum to standard contractual clauses.

7. How Long We Keep Your Data

Order data held by Stripe is retained in accordance with their data retention policy (typically 7 years for financial records, as required by UK law). Copies of the emails we send you are kept by Resend in line with their retention policy.

Quiz answers are not stored by us after your recommendations are returned. Our order records in Supabase contain only the Stripe order reference and processing timestamps.

Local storage data (basket, cookie preference) remains on your device until you clear your browser data.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — you can request a copy of the data we hold about you
• Right to erasure — you can ask us to delete your data
• Right to rectification — you can ask us to correct inaccurate data
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a portable format
• Right to object — you can object to how we process your data

To exercise any of these rights, contact us at fragrancemasterorg@gmail.com. We will respond within one month.

9. Legal Basis for Processing

We process your order data on the legal basis of contract performance — we need it to fulfil the order you have placed with us. Where we must keep financial records, we rely on legal obligation.

We process quiz answers on the basis of legitimate interests — providing the recommendations you ask for — and hosting/security data on the basis of our legitimate interest in running a secure website.

10. Data Security

All payments are processed by Stripe, which is PCI DSS compliant. We do not store payment card details. Our website is served over HTTPS to protect data in transit.

11. Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent update. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the UK's data protection regulator:

14. Contact Us