Privacy Policy

Fragscentric ("we," "us," or "our") respects your privacy and protects your personal data. This privacy policy explains how we collect, use, and safeguard your information when you browse our website, create an account, use our AI shopping assistant, contact us, or place an order.

Information We Collect

The information we collect depends on how you use Fragscentric:

• Contact and order details: name, phone number, delivery address, delivery area, ordered products, order status, and related support notes.
• Account information: email address, hashed password records, authentication session information, saved delivery preferences, wishlist items, and restock requests.
• Payment information: transaction IDs or references you provide as proof of payment, payment method, and payment status. We do not collect or store bank account, card, or mobile-wallet login credentials.
• Shopping preferences: fragrance preferences, budget, recently recommended products, wishlist items, and marketing SMS choice.
• Communications: messages sent through our AI shopping assistant, email, social media, Messenger, WhatsApp, or other support channels.
• Technical information: IP address and request metadata used for security and rate limiting, browser and device details, cookie and storage preferences, and optional analytics events.

How We Use Your Information

• To create and secure customer accounts
• To process payment, fulfill orders, arrange delivery, and provide order tracking
• To send transactional order, account, security, and restock communications
• To personalize fragrance suggestions and remember chat preferences in your browser
• To send marketing or new-arrival SMS only when you explicitly opt in
• To prevent fraud, abuse, and security incidents
• To understand and improve our website when optional analytics is enabled
• To comply with legal obligations and resolve disputes

Transactional order SMS messages are sent to process your order. Marketing or broadcast SMS messages are sent only when the latest checkout preference for your phone number is opted in.

AI Shopping Assistant

The shopping assistant is powered by artificial intelligence. When you send a message, we may send the message, relevant recent chat history, and structured shopping preferences to Z.ai so it can generate a response. If you are signed in, the request may also include a limited shopping summary such as signed-in status, delivery-area category, order counts and status categories, recent product names, wishlist or restock product names, and preferred budget.

The AI assistant is for fragrance and storefront guidance, not identity verification, payment support, or secure order lookup. Do not enter phone numbers, email addresses, delivery addresses, payment references, passwords, tracking keys, or order numbers in AI chat. Anything typed into a chat message may form part of the recent context sent with a later AI request. Use your account pages or the secure Track Order page for order information.

We do not save AI chat transcripts in our customer or order database. Chat history is kept in your browser until you start a new chat or clear site data. Z.ai's current API data terms state that API content is processed in real time and is not stored on its servers. Z.ai may still process request metadata and other API-service data under those terms.

Cookies and Browser Storage

We use essential cookies and browser storage to operate the storefront, including:

• Authentication and security cookies for signed-in accounts
• Local storage for your cart, consent choice, AI chat history, and chat preferences
• Session storage for short-lived order-tracking state and chat interface notices

You can remove this data through your browser settings. Clearing essential storage may sign you out, empty your cart, remove chat history, or require you to verify an order again. See our Cookie Policy for more information.

Analytics (Optional)

If you accept analytics in our cookie banner, we collect aggregated usage data to understand how the shop performs:

• Events: page views, product views, cart actions, checkout, and purchases (no ads or cross-site tracking).
• Session identifier: a daily hash derived from your IP address, browser type, and date. It does not include your name or phone number.
• Retention: detailed events are kept about 90 days, then deleted after daily summaries are stored.
• Cloudflare Web Analytics: if enabled, loads Cloudflare’s privacy-oriented performance beacon (see our Cookie Policy).

You can decline analytics at any time via the cookie banner; essential cart storage still works. To clear your consent choice, remove site data for fragscentric.com in your browser.

Third-Party Sharing

We do not sell, rent, or trade your personal data, and we do not use it for third-party behavioral advertising. We share only the information reasonably necessary with the following categories of recipients:

• Cloud and security providers: Cloudflare handles hosting, database, content delivery, traffic protection, and optional web analytics.
• AI provider: Z.ai processes shopping-assistant requests and limited context as described above.
• Payment providers: used to initiate or verify payments and transaction references.
• Delivery: we ship via Pathao, which may receive your name, phone number, delivery address, and order-delivery details.
• Communication providers: SMS, email, and staff-notification services that process the contact details and message content needed to send an order or account notice.
• Social platforms: only if you choose to contact us through Messenger, WhatsApp, Instagram, or another third-party service.
• Authorities or professional advisers when disclosure is required by law or reasonably necessary to protect rights, safety, and the integrity of our service.

International Processing

Some service providers may process information outside Bangladesh. For example, Z.ai states that its API customer data is generally processed in Singapore. Where information is processed internationally, we rely on the provider's contractual and security commitments and take reasonable steps to limit the data shared to what the service requires.

Data Security

We use reasonable technical and organizational safeguards, including HTTPS encryption, access controls, signed sessions and tracking links, rate limits, and restricted admin access. Passwords are not stored in plain text. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

Your Rights

You can delete your account at any time from the Account Security page. This permanently removes your login and profile details.

Subject to applicable law and identity verification, you may also ask us to:

• Provide access to the personal data we hold about you
• Correct inaccurate or incomplete information
• Delete or anonymize personal data that we no longer need to retain
• Explain or restrict certain processing where applicable
• Withdraw marketing SMS consent or optional analytics consent

You can also clear AI chat history with the New Chat control, remove browser data through your browser settings, update account profile details, change your password, request account deletion from the Account Security page, and change analytics consent through the cookie banner. To make another privacy request, contact us using the details below.

Data Retention

We retain information only for as long as reasonably needed for the purposes described in this policy, including order fulfillment, account operation, tax and business records, fraud prevention, support, and legal claims. Raw optional analytics events are kept for about 90 days; aggregated daily summaries may be retained longer. Browser-stored chat, cart, and consent data remains until you clear it or use the relevant reset control.

After a verified phone-based deletion request, we anonymize direct identifiers on matching order records, including name, phone, address, payment reference, and internal notes. We also remove matching restock-notification records, clear matching saved profile details, unlink the orders from an account, and turn off marketing SMS preference. Order totals and item snapshots may remain so required business records stay accurate. Account and email records are handled separately based on the scope of the request and any retention duty.

After you confirm a signed-in account-deletion request, we permanently remove the login identity, password record, active sessions, saved profile, wishlist, and account-linked restock requests. We unlink order records, clear their account-claim state, and turn off marketing SMS consent. Order and item snapshots may remain separately where reasonably needed for active fulfillment, tracking, refunds, support, fraud prevention, required business records, or legal claims. Deleting an account also clears account-derived AI chat state in that browser, while leaving the cart and secure order-tracking state available.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

Contact

If you have questions about this policy, reach out to us:

• Email: hello@fragscentric.com