Privacy Policy

ORBITOHM ("we", "us", "our") respects your privacy. This policy explains what information we collect when you shop with us, why we collect it, and the choices you have. Using the site or placing an order means you're okay with the practices described here.

What We Collect

We collect only what's needed to run your account and fulfill your orders:

• Account details — name, email, password (stored as a one-way hash, never in plain text), and phone number if you provide one.
• Shipping information — address, city, state, postal code, and country for delivering orders.
• Order history — what you've bought, when, at what price, and any coupon or loyalty points applied.
• Wishlist and quiz answers — products you've saved and your Fragrance Finder responses, used only to show you relevant recommendations and back-in-stock alerts.
• Reviews — the rating, text, and any photo you choose to submit, shown publicly under your name.
• Contact messages — anything you send us through the contact form, including your email so we can reply.
• Basic technical data — IP address and browser user-agent, used transiently for security (login rate-limiting) and anonymized same-day analytics (see Cookies & Analytics below). We do not build a long-term browsing profile tied to your identity.

We never ask for more than an order actually requires — we don't collect government ID numbers, financial account details, or anything beyond standard checkout fields.

How We Use It

Your information is used to: process and ship orders; send transactional emails (order confirmations, shipping updates, back-in-stock alerts, password resets); calculate and award loyalty points and referral rewards; respond to support requests; and detect fraudulent or abusive activity (like checkout abuse or repeated failed logins). We do not use your data to build targeted advertising profiles, and we don't run third-party ad tracking on this site at all.

Payments

Card, UPI, netbanking, and wallet payments are collected and processed directly by Stripe and Razorpay, both PCI-DSS compliant payment processors. Your full card number, CVV, and UPI PIN are entered directly into their secure interfaces and never pass through or get stored on ORBITOHM's own servers — we only ever receive a payment confirmation and the last few digits needed to identify your payment method on your order history.

Cookies & Analytics

We keep this deliberately minimal:

• Session cookie — required to keep you signed in and remember your shopping bag between pages. This is functional, not tracking, and there's no way to use the site without it.
• No third-party trackers — no Google Analytics, no ad pixels, no cross-site cookies. Our on-site analytics (ORBITOHM Insights) is self-hosted: it logs page paths and a same-day hash of your IP and browser (never your raw IP, and the hash changes every day so it can't be used to follow you over time) purely to show us aggregate traffic trends.
• Local storage — your theme (light/dark) and accent color preference are saved in your browser only, never sent to our servers.

Sharing Your Data

We do not sell, rent, or trade your personal data. We share the minimum necessary with:

• Stripe / Razorpay — to process payments.
• Our email delivery provider — to send transactional email (order confirmations, password resets, shipping updates). If no provider is configured, transactional emails aren't sent externally at all.
• Shipping carriers — your name, address, and phone number, solely to deliver your order.
• Law enforcement — only if legally required to (e.g. a valid court order), and never as a first resort.

Data Retention

We keep order records for as long as your account exists, since they're the basis for returns, warranty, and loyalty-point history. Anonymous analytics rows are automatically purged after 90 days. If you delete your account, we remove your personal profile data; order records may be retained in anonymized form for accounting purposes where required by law.

Your Rights

You can, at any time:

• Access your data — most of it is already visible in My Account and Order History.
• Correct your profile details directly from My Account.
• Request a full export of your data by contacting us.
• Request deletion of your account and personal data, subject to what we're legally required to retain (e.g. completed order/tax records).
• Opt out of non-transactional email at any time — every marketing email includes an unsubscribe option, and transactional emails (order confirmations, password resets) are never optional since they're required to run your order.

Security

Passwords are stored using industry-standard one-way hashing (bcrypt) — we can't see your actual password, even internally. Admin accounts can enable two-factor authentication. Login attempts are rate-limited to slow down automated guessing. All traffic to this site should be served over HTTPS in production.

Children's Privacy

ORBITOHM is not directed at children, and we don't knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we'll remove it.

Changes to This Policy

If we materially change how we handle your data, we'll update the date at the top of this page. Continuing to use the site after a change means you accept the update — for significant changes, we'll also note it in the announcement bar or via email.

Contact Us

Questions about this policy or your data? Reach us any time via the contact form or at no-reply@orbitohm.com.