Data Privacy Policy

We only aim to collect the information needed to serve you properly. Depending on how you shop, pay, contact us, or request delivery, this may include:

If you upload a bank transfer receipt, please avoid sending unnecessary information beyond what is needed to confirm the payment. Receipt details are used for payment verification, order processing, support, fraud prevention, and business records.

We do not ask customers to send full debit card or credit card details through ordinary messages. If a third-party payment service is used, that provider may handle payment information under its own privacy and security practices.

We use customer information for practical reasons connected to your order and customer experience, including:

• Processing and confirming orders.
• Confirming payment and reviewing uploaded bank transfer receipts.
• Updating payment status and order status.
• Arranging local delivery, courier delivery, or Knutsford Express delivery.
• Contacting you about product availability, order status, delivery timing, or support requests.
• Responding to questions, complaints, exchange requests, delivery concerns, or receipt upload issues.
• Keeping business, tax, accounting, fraud prevention, and customer service records.
• Improving our website, product listings, customer service, and shopping experience.
• Sending promotional updates only where permitted, with a way to opt out.
• Protecting our website, customers, business, and legal rights.

We do not aim to use your information for unrelated purposes without a proper reason, consent where required, or a lawful basis.

We process personal data only when there is a lawful and reasonable reason to do so. Depending on the situation, this may include:

• To complete your order: including payment confirmation, receipt review, delivery, and customer support.
• Your consent: such as when you choose to subscribe, message us, upload information, or agree to receive updates.
• Legal or record requirements: where information must be kept for accounting, tax, regulatory, legal, fraud prevention, or dispute-related reasons.
• Legitimate business interests: such as preventing fraud, improving our service, protecting the website, managing customer relationships, and keeping accurate business records while respecting your privacy rights.

We may send promotional updates, new arrival alerts, restock notices, special offers, or fragrance recommendations where you have agreed to receive them, where you are an existing customer and the message relates to similar products, or where the law allows it.

You can ask us to stop sending promotional messages at any time. Order-related messages may still be sent where needed to complete or support an active order.

We do not sell customer personal data. We only share information where it is needed to complete your order, support delivery, verify payment, protect the business, meet legal requirements, or provide customer service.

Information may be shared with:

• Delivery partners: including bearers, couriers, or Knutsford Express where needed to complete delivery.
• Payment or banking providers: where needed to confirm payments, verify receipts, or resolve payment issues.
• Website and hosting providers: where needed to operate, secure, or improve the website.
• Email, form, or order management tools: where needed to send order updates, receive receipt uploads, or manage support requests.
• Professional advisers: including accounting, legal, compliance, or business support where necessary.
• Legal authorities: where required by law, court order, lawful request, or to protect our legal rights.

When service providers handle information on our behalf, we aim to use providers that apply reasonable privacy and security measures.

We keep personal data only for as long as reasonably needed for the reason it was collected, unless a longer period is required or allowed for legal, accounting, tax, delivery, fraud prevention, customer support, or dispute purposes.

• Order records: kept for business records, accounting, support, and legal purposes.
• Delivery records: kept as needed to confirm delivery or manage delivery concerns.
• Payment confirmation and receipt records: kept for verification, accounting, dispute prevention, fraud prevention, and records.
• Customer support messages: kept as needed to understand service history and resolve concerns.
• Marketing preferences: kept until you unsubscribe, withdraw consent, or request removal where applicable.

Where an exact retention period is not stated, records are kept only as long as reasonably needed for order handling, delivery, payment verification, accounting, tax, support, dispute, fraud prevention, legal, or business record purposes.

When information is no longer needed, we will take reasonable steps to delete, anonymize, archive, or securely dispose of it.

We take reasonable steps to protect customer information from unauthorized access, misuse, accidental loss, alteration, or disclosure.

Our safeguards may include:

• Limiting access to customer information to persons who need it for business purposes.
• Using secure website, hosting, and administrative access where available.
• Maintaining reasonable password, account access, and website security practices.
• Keeping website tools, plugins, and systems updated where applicable.
• Reviewing how customer data is collected, stored, shared, and disposed of.
• Taking steps to respond to suspected data breaches.

No online system can be guaranteed completely secure, but we aim to use reasonable safeguards to protect customer information.

Subject to applicable law, identity verification, and any lawful exemptions, you may contact Upperoom Fragrances to make privacy requests about your personal data.

You may request to:

• Ask whether we process your personal data.
• Request access to personal data we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion or disposal where the law allows and where we no longer have a lawful reason to keep the data.
• Object to certain processing or ask us to stop using your data for a specific purpose where applicable.
• Withdraw consent where processing is based on consent.
• Opt out of direct marketing messages.
• Ask about automated decision-making where applicable.
• Raise a privacy concern with Upperoom Fragrances.
• Complain to the Office of the Information Commissioner if you believe your data protection rights have been breached.

To make a privacy request, contact us using the details at the end of this policy. We may need to verify your identity before processing your request so that customer information is not shared with the wrong person.

Some website, hosting, email, analytics, payment, security, form, receipt upload, or technology providers may process or store personal data outside Jamaica.

Where customer information is processed outside Jamaica, we aim to do this only where needed for our website, order processing, payment confirmation, delivery support, security, customer service, legal requirements, business records, or another lawful reason.

We also aim to use reasonable safeguards, service providers, or lawful transfer grounds where applicable, including where the destination or provider offers an adequate level of protection, where the transfer is needed to perform a service requested by the customer, or where another lawful exception applies.

Our website may use cookies and similar technologies to keep the online store working, remember cart activity, improve performance, support security, and understand how visitors use the site.

You may be able to manage or disable cookies through your browser settings. However, some website features, including cart and checkout functions, may not work properly if essential cookies are disabled.

If we become aware of a security breach or suspected breach affecting personal data, we will take reasonable steps to assess, contain, investigate, and respond to the issue.

Where required by Jamaican data protection law, Upperoom Fragrances will report a qualifying contravention or security breach affecting personal data to the Office of the Information Commissioner within 72 hours after becoming aware of the issue.

Where required, affected customers will also be notified with relevant information about the nature of the breach, steps taken or proposed to reduce possible harm, and how to contact us for support.

Our website and services are intended for general customers purchasing fragrance products. We do not knowingly collect personal data from children for marketing purposes.

If a parent or guardian believes that a child has provided personal data to us without appropriate permission, they may contact us and request review, correction, or deletion where applicable.

We may update this Data Privacy Policy from time to time to reflect changes in our business, website, legal requirements, customer service practices, payment methods, receipt upload process, delivery process, or data protection procedures.

The “Last Updated” date will be revised when updates are made. Continued use of our website or services after changes means you acknowledge the updated policy.