Privacy Policy

‌Effective Date: October 17, 2026‌

Studio Aroma S.A. de C.V. (“we”, “us”, “our”, “Company”), operating the e-commerce website www.studioaromamex.com (the “Site”), is deeply committed to protecting the privacy, personal data rights, and informational security of every visitor, customer, and user who browses our curated collection of home fragrances, reed diffusers, car aroma products, and natural scent goods (collectively, the “Services”). This Privacy Policy is designed to be plain-language, easy to navigate, and fully transparent about how we collect, use, store, process, share, and safeguard your personal information when you interact with our Site, make a purchase, sign up for our newsletter, contact our support team, or participate in any of our user-facing features. We have tailored this policy specifically to align with our operations as a Mexico-based e-commerce business, and to comply with all applicable local and international data protection regulations, including the Mexican Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), the EU General Data Protection Regulation (GDPR) for users located in the European Economic Area, the California Consumer Privacy Act (CCPA) for users residing in California, USA, and other relevant global privacy frameworks.

By accessing, browsing, or using our Site and Services, you confirm that you have read, understood, and agree to the terms outlined in this Privacy Policy. If you do not agree with any part of this document, please refrain from using our Site or submitting your personal information to us.

1. Information We Collect From You

We only collect information that is directly relevant to providing you with a seamless, secure, and personalized shopping experience for our premium natural fragrance products. The categories of information we gather fall into the following groups:

1.1 Information You Provide Voluntarily

This is any data you actively share with us when you interact with our Site:

  • ‌Account and Purchase Information‌: When you create a customer account, place an order for reed diffusers, car diffusers, indoor fragrance products, or any other item from our store, we collect your full name, billing address, shipping address, email address, phone number, and payment method details. We never store full credit card numbers on our own servers, all payment processing is handled through PCI-DSS certified third-party payment providers to eliminate financial data security risks.
  • ‌Contact and Support Information‌: When you reach out to our customer support team via our contact page, send an email to mossie@studioaromamex.com, or call us at +52 55 5254 3645‌, we may collect your name, contact details, and the full content of your message, including any feedback, questions, or concerns you share about our products or services.
  • ‌Marketing Preference Information‌: When you sign up for our email newsletter to receive updates on new scent launches, exclusive discount codes, seasonal product drops, and home fragrance tips, we collect your email address and any optional preferences you share about the types of products you are interested in, such as aromatherapy for stress relief, pet-safe deodorizers, or car freshener variants.
  • ‌User-Generated Content‌: If you choose to leave a product review, submit a photo of your Studio Aroma fragrance setup, or participate in our community social media campaigns linked from our Site, we collect the content you submit along with your associated display name, if you choose to make that information public.

1.2 Automatically Collected Information

When you visit, browse, or navigate our Site, we automatically collect certain technical information through cookies, web beacons, and other standard tracking tools to optimize our site performance and troubleshoot technical issues:

  • ‌Device and Log Data‌: We collect your IP address, browser type and version, operating system, device type, unique device identifiers, language preference, and the timestamps of your visits to our Site.
  • ‌Usage Behavior Data‌: We collect anonymized data about which pages you visit on www.studioaromamex.com, the links you click, the products you view or add to your shopping cart, the length of time you spend on each page, your navigation paths between pages, and your search queries entered on our store.
  • ‌Cookies and Tracking Technologies‌: We use first-party cookies to remember your shopping cart contents, save your login session if you have an account, and remember your site preferences such as currency display. We also use limited third-party analytics cookies from trusted partners to understand how visitors engage with our Site, so we can improve product recommendations and user experience. All non-essential tracking cookies require your explicit opt-in consent when you first land on our Site, and you can adjust your cookie preferences at any time through the footer cookie settings panel. We have a dedicated separate Cookie Policy that provides full details on all the trackers we use, which you can access directly via the navigation links in our Site footer.

1.3 Sensitive Personal Data

We do not intentionally collect or process sensitive personal data unless you voluntarily provide it in the context of a support request, such as notifying us that a fragrance product needs to be formulated to accommodate a specific allergy or health condition. Under Mexican LFPDPPP regulations, any processing of sensitive personal data (including health information, religious beliefs, or biometric data) that you share with us will only be done with your explicit written, documented consent, strictly limited to the specific purpose you have agreed to, and aligned with the minimum necessary data retention principle. We will never share your sensitive personal data with any third parties without your separate, explicit prior approval.

2. How We Use Your Personal Information

All processing of your personal data is carried out for lawful, transparent, and specific purposes directly tied to operating our e-commerce store and delivering you the highest quality fragrance products and customer service. We use your information exclusively for the following legitimate business purposes:

  1. ‌Order Fulfillment and Transaction Management‌: We use your name, shipping address, contact phone number, and payment details to process your purchase, verify transaction security, arrange delivery of your reed diffusers, car scent products, or other orders, send you order confirmation emails, tracking number updates, and delivery status notifications, and resolve any issues related to your order, including returns, refunds, or exchanges under our posted Refund and Returns Policy.
  2. ‌Site Functionality and Personalization‌: We use your browsing behavior data and saved preferences to maintain the basic functionality of our Site, remember items in your empty or active shopping cart, serve you product recommendations tailored to your past browsing and purchase history, and customize your user experience to show the most relevant home fragrance products aligned with your interests.
  3. ‌Customer Support and Communication‌: We use your contact details to respond to your submitted support inquiries, resolve product complaints, address questions about ingredient safety, fragrance longevity, product usage instructions, or our shipping and return policies, and send you post-purchase follow-up messages to ensure you are fully satisfied with your Studio Aroma product.
  4. ‌Service Improvement and Site Optimization‌: We use aggregated, anonymized usage analytics data to identify broken site links, fix technical bugs, improve our page load speeds, test new Site features, and refine our product assortment to better match the preferences of our customer base. For example, we may analyze aggregated visitor data to identify that customers in a specific region show high interest in our natural lavender and sage diffuser, and expand our stock of that product accordingly.
  5. ‌Marketing Communications (With Your Explicit Consent)‌: Only if you have actively opted in to receive marketing emails, we will use your email address to send you our newsletter, announce new product launches for seasonal scents such as our holiday cinnamon and orange potpourri, share exclusive promotional offers, and share home fragrance tips to help you create the perfect cozy aroma vibe in your home, office, or vehicle. You can opt out of all marketing communications at any time, at no cost to you, by clicking the “unsubscribe” link at the bottom of every marketing email, or by sending us a request to mossie@studioaromamex.com. Even if you opt out of marketing messages, we will still send you non-promotional transactional communications related to your existing orders, account security alerts, and important updates to our legal policies such as this Privacy Policy or our Terms of Service.
  6. ‌Legal Compliance and Fraud Protection‌: We process your personal information as required to comply with applicable Mexican laws, regulatory requests from the Mexican National Institute of Transparency, Access to Information and Personal Data Protection (INAI), prevent fraudulent payment transactions, unauthorized account access, and other illegal activities that could harm our business, our customers, or our payment processing partners, and enforce the terms outlined in our Terms of Service posted on our Site.
  7. ‌Safety and Security‌: We process your data to monitor and protect the security of our Site, our customer databases, and our internal IT systems, to prevent data breaches, unauthorized access, and cyberattacks that could put your personal information at risk.

3. Legal Bases For Processing Your Data

Depending on your location, we process your personal information on the following lawful legal bases:

  • For all customers globally, processing your data is necessary to perform the contract we enter into with you when you place an order on our Site, to complete your purchase, deliver the products you ordered, and fulfill all our contractual obligations under our Terms of Service.
  • For users located in the European Economic Area under GDPR regulations, additional legal bases include our legitimate business interests to maintain a secure, functional e-commerce site and improve our product offerings, which are never overridden by your individual privacy rights, plus your explicit consent for all non-essential processing such as marketing emails and non-required analytics cookies.
  • For users located in Mexico, our processing fully complies with the 11 fair information principles laid out in the LFPDPPP, with all data processing limited to the specific, disclosed purposes you have been notified of, and fully respecting all your statutory personal data rights outlined in Mexican data protection law.

4. Third-Party Information Sharing

We never sell, rent, lease, or trade your personal information to unrelated third parties for their own marketing purposes, at any time. We only share your limited personal data with carefully vetted third-party service providers who are contractually bound to uphold strict data protection standards, and exclusively for the limited purposes required to operate our business and fulfill your orders. The categories of third parties we may share your information with include:

  • ‌Payment Processors‌: We share your payment-related details with PCI-DSS certified payment service providers to process your transactions securely, prevent payment fraud, and complete your purchase. These providers are prohibited from using your personal data for any other purposes unrelated to payment processing.
  • ‌Shipping and Logistics Partners‌: We share your name, shipping address, and contact phone number with our trusted courier and delivery partners to arrange the shipment of your purchased fragrance products to your designated delivery address, and ensure successful last-mile delivery. Our shipping providers will only use this information to process your delivery and provide you with delivery updates.
  • ‌Analytics and Site Hosting Providers‌: We work with reputable web hosting services to keep our Site online, and limited analytics providers to help us understand anonymized site traffic patterns, to optimize our site performance. All these providers operate under strict data processing agreements that require them to protect your personal information and not use it for their own independent purposes.
  • ‌Legal Authorities and Regulators‌: We may disclose your personal information if we are required to do so by binding, lawful government request, court order, or applicable law, to protect our legal rights, defend ourselves in legal proceedings, or protect the safety of our customers, our employees, and the general public.

In full compliance with CCPA requirements for users residing in California, we do not “sell” your personal information as defined under CCPA regulations, and we have never sold any customer personal data to third parties for commercial purposes at any point in our operations. There is no need for a “Do Not Sell My Personal Information” opt-out on our Site, because no such data selling activity ever takes place.

5. Your Data Rights and Choices

All users around the world hold full, enforceable rights over their personal information, and Studio Aroma S.A. de C.V. respects and facilitates all of these rights free of charge:

  1. ‌Right to Access‌: You can submit a request to receive a full copy of all the personal information we hold about you, including a full breakdown of what data we have collected, how we have processed it, and who we have shared it with, at any time.
  2. ‌Right to Rectification‌: If you notice that any of the personal information we hold about you is inaccurate, incomplete, or out of date (for example, an old shipping address or incorrect phone number), you have the right to request that we correct and update that information immediately. You can also edit most of this information directly from your customer account settings page on our Site.
  3. ‌Right to Erasure (Right to Be Forgotten)‌: You can request that we permanently delete all of your personal information from our active servers and records, subject only to limited exceptions where we are legally required to retain certain data for tax, accounting, or ongoing legal compliance purposes for a fixed mandatory retention period.
  4. ‌Right to Restrict Processing‌: You have the right to request that we temporarily pause the processing of your personal data in specific scenarios, such as if you contest the accuracy of your data, or you have objected to our legitimate interest based processing while we verify your objection.
  5. ‌Right to Data Portability‌: You can request that we send all the personal data you have provided to us, in a structured, machine-readable common format, either to you directly or to another data controller you designate, where technically feasible.
  6. ‌Right to Object‌: You have the full right to object to our processing of your personal data that is based on our legitimate business interests, at any time. If you object, we will stop processing your data unless we can demonstrate compelling, legally valid, overriding legitimate grounds for the processing that supersede your privacy rights. You also have the unconditional right to object to direct marketing communications at any time, with no justification required from you.
  7. ‌Right to Withdraw Consent‌: At any point where you have previously given us explicit consent to process your personal data for a specific purpose (such as receiving marketing emails, or allowing non-essential cookies), you have the full right to withdraw that consent, without affecting the lawfulness of processing that took place before you withdrew your consent.
  8. ‌Right to Lodge a Complaint‌: If you are located in Mexico, you have the right to submit a formal complaint about our data processing practices to the Mexican National Institute of Transparency, Access to Information and Personal Data Protection (INAI). If you are located in the European Economic Area, you can lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, you can send your request directly to our designated data protection officer by email at mossie@studioaromamex.com, or via post mail sent to our registered business address at Av. Río San Joaquín 406, Col. Ampliación Granada, Alcaldía Miguel Hidalgo, Ciudad de México, Mexico, or by calling us at +52 55 5254 3645‌. We will respond to all valid, verifiable user rights requests within 15 business days, as required by Mexican LFPDPPP regulations. We will never charge you a fee for processing your data rights request unless your request is manifestly excessive, repetitive, or unfounded, in which case we may charge a reasonable administrative fee to cover our processing costs. To protect your privacy and account security, we will first verify your identity using standard, low-friction verification steps before we fulfill any request that accesses or modifies your personal data.

We have also published a dedicated, easy-to-find page on our Site that lists direct, simple methods for customers to submit opt-out requests for all non-required data processing activities, and we have provided a dedicated customer support phone line to help you make changes to your personal data preferences directly, as part of our commitment to transparent and accessible privacy practices.

6. Data Retention Periods

We will never keep your personal information for longer than is strictly necessary to fulfill the exact purposes we collected it for, in full alignment with the Mexican LFPDPPP minimum necessary principle:

  • For order-related transaction data: We retain your order information, purchase records, and associated payment details for 10 years, as required by Mexican tax and commercial record-keeping legal obligations.
  • For customer account data: If you create an account on our Site, we will retain all your account profile information for as long as your account remains active, or as needed to provide you our services. If you request to delete your account, we will erase all your personal account data outside of the transaction records we are legally required to retain for regulatory purposes.
  • For marketing contact information: We will retain your email address for marketing purposes only for as long as you remain opted in to receive our marketing communications, and we will immediately remove your contact details from our marketing list the moment you submit an opt-out request.
  • For support ticket records: We retain copies of your customer support messages for 3 years after your last interaction with our support team, to help us follow up on any pending product warranty claims and reference past issues to provide you more consistent support in the future, after which these records are permanently anonymized or deleted.
  • For anonymized analytics data: Aggregated data that can no longer be linked back to an individual identifiable user may be retained indefinitely for long-term site performance and product planning purposes.

7. Cross-Border Data Transfers

As a Mexico-based business, most of our personal data processing and storage operations take place on servers located within Mexican national territory. In some limited scenarios, we may transfer personal data to trusted third-party service providers located outside of Mexico, for example international payment processors or global cloud hosting partners. All such cross-border data transfers are carried out in full compliance with LFPDPPP regulations, through legally approved transfer mechanisms that guarantee an adequate level of data protection for your personal information, and fully aligned with international data protection standards that match the strict requirements of the EU GDPR. We will never transfer your personal data to any third country without verifying that the destination offers sufficient, enforceable privacy safeguards for your information.

8. Children’s Privacy

Our Site and products are intended for use by adults aged 18 years and older, and we do not knowingly collect personal information from children under the age of 13. We have a separate, dedicated clause in this Privacy Policy to explicitly address child data privacy concerns: if we discover that we have accidentally collected personal data from a child under the applicable minimum age threshold, we will immediately take steps to delete that data permanently from all our servers and records as quickly as possible. If you are a parent or legal guardian and you believe your child has submitted personal information to us, please contact us immediately at mossie@studioaromamex.com and we will resolve this issue promptly.

9. Data Security Measures

We implement industry-standard, robust administrative, technical, and physical data security measures to protect your personal information against unauthorized access, accidental loss, alteration, disclosure, destruction, or misuse. Our security protocols include end-to-end SSL encryption for all sensitive data transmitted between your browser and our Site, regular periodic security audits of our IT systems, routine employee data privacy and security training, role-based access controls that limit access to customer personal data only to the employees who need that information to fulfill their job duties for order fulfillment or customer support, and secure offsite encrypted backups of all our data. In the extremely unlikely event that we experience a personal data security breach that poses a high risk to your rights and freedoms, we will notify you and the relevant data protection regulator in full compliance with all applicable legal notification timelines.

10. Updates To This Privacy Policy

We may occasionally update and revise this Privacy Policy from time to time, to reflect changes to our business operations, new legal regulatory requirements, or new feature launches on our Site. When we make material changes to this policy, we will update the effective date posted at the top of this document, post a prominent announcement on the homepage of www.studioaromamex.com, and send a direct email notification to all customers who have provided us their email address, with a summary of the key changes to the policy. Your continued use of our Site and Services after the revised policy takes effect will constitute your acknowledgment and acceptance of the updated Privacy Policy terms. We encourage you to review this page periodically to stay informed about how we are protecting your personal information.

11. How To Contact Us

If you have any questions, comments, concerns, or complaints about this Privacy Policy, our data processing practices, or if you wish to submit a request to exercise any of your data rights, you can reach out to our dedicated data protection officer through any of the following direct contact methods:

  • ‌Email‌: mossie@studioaromamex.com
  • ‌Phone‌: +52 55 5254 3645‌
  • ‌Postal Address‌: Av. Río San Joaquín 406, Col. Ampliación Granada, Alcaldía Miguel Hidalgo, Ciudad de México, Mexico

Studio Aroma S.A. de C.V. is the data controller responsible for all personal information processing operations conducted on the www.studioaromamex.com website.