Natureabreath operates on a “minimum necessary data” principle. We collect only what we need to send you oil.
Information we collect:
| Category | Examples | Why we collect it |
|---|---|---|
| Identity | Name, email address | To confirm your order and send updates |
| Shipping | Street address, ZIP code | To deliver your oils |
| Payment | Card type, last four digits, billing zip | To process payment (full card numbers never touch our servers) |
| Usage | Pages visited, time on site, cart additions | To improve our website |
| Preferences | Which oil scents you buy or save | To recommend similar products |
What we do NOT collect:
- Your exact birth date
- Your social security number
- Your location after you leave our site
- Your contacts or address book
How we share data:
We share your information with exactly three types of companies:
- Shipping carriers (to deliver your package — name and address only)
- Payment processors (to charge your card — no unnecessary data)
- Email service provider (to send you order confirmations and, only if you opted in, marketing)
We do not sell data. We do not share data with advertisers. We do not allow third-party tracking scripts on our site beyond basic analytics.
Your rights under US law:
- Request a copy of all data we hold about you
- Request deletion of your account and order history
- Opt out of marketing emails (unsubscribe link is at the bottom of every email)
- Disable cookies in your browser (site remains fully functional)
Data retention:
We keep your order data for 7 years (for tax and warranty purposes). After that, it is permanently deleted. Marketing preferences are kept until you unsubscribe.
Security:
We use SSL encryption. Our website is hosted on a secure platform with daily malware scans. In the unlikely event of a data breach, we will notify affected customers within 72 hours.
Children under 13:
Natureabreath products are intended for adult use. We do not knowingly collect information from children. If you believe a child has provided us with personal data, contact us and we will delete it immediately.
Changes to this policy:
If we change this policy, we will post the new version here and update the “Last updated” date. For significant changes (e.g., new data sharing), we will also email active customers.