Privacy Policy

1.Information we collect

We collect information you provide directly, information generated automatically when you use the site, and information from the providers that help us operate. Specifically, we may collect:

• Identity & contact details — your name, email address, and phone number (if provided);
• Shipping & billing address — the address you give us to deliver and invoice your order;
• Order information — the Products you buy, order value, and order history;
• Payment information — your payment is handled directly by Stripe. We do not collect or store your full card number; we receive only limited confirmation details such as a transaction reference, the last four digits, and whether the payment succeeded;
• Contact-form messages — the name, email, topic, and message content you submit through our contact form;
• Usage & device data — analytics and technical information such as your IP address, browser type, device, pages viewed, and referring links, collected through cookies and similar technologies; and
• Security data — information processed by Cloudflare Turnstile on our forms to distinguish humans from automated bots and protect the site from abuse.

2.How we use your information

We use your personal information to:

• Process, fulfill, ship, and confirm your orders, and provide customer support;
• Respond to your inquiries and messages submitted through the contact form;
• Process payments through Stripe and detect and prevent fraud;
• Send transactional emails, such as order confirmations and shipping updates, through our email provider;
• Operate, maintain, secure, and improve the site, including analytics and bot protection;
• Comply with our legal obligations, enforce our Terms, and protect our rights and those of others; and
• Send marketing or promotional messages only where you have asked to receive them; you may unsubscribe at any time.

3.Service providers we share with

We do not sell your personal information. We share it only with the trusted providers that help us run the store, and only as needed. These providers process your information under their own privacy policies:

We may also use shipping carriers to deliver your order, which requires sharing your name and shipping address with the carrier.

4.When we may disclose information

Beyond our providers, we may disclose your information: (a) to comply with law or lawful requests; (b) to enforce our Terms; (c) to detect or prevent fraud and security issues; (d) to protect the rights, property, or safety of Essence, our customers, or others; and (e) in connection with a merger, acquisition, or sale of our business, subject to protections consistent with this Policy.

5.Cookies & analytics

We use cookies and similar technologies to operate the site, remember your preferences (such as your chosen language and your cart), keep the site secure, and understand usage through analytics. Essential cookies are necessary for the site to function; analytics cookies help us measure traffic and improve the site.

You can control cookies through your browser settings, including blocking or deleting them; disabling essential cookies may affect how the site works. Where required by law, we will ask for your consent before placing non-essential cookies.

6.Data retention

We keep your personal information only as long as needed for the purposes in this Policy — to fulfill your order, provide support, and meet legal, accounting, and tax obligations. When information is no longer needed, we delete or de-identify it.

7.Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your information; opt out of marketing; and opt out of any "sale" or "sharing" of personal information (we do not sell your information). To exercise these rights, contact us using the details below. We may need to verify your identity, and we will not discriminate against you for exercising your rights.

8.California privacy rights (CCPA/CPRA)

If you are a California resident, the CCPA, as amended by the CPRA, gives you the right to know, access, delete, and correct your personal information, and to opt out of the sale or sharing of personal information and limit the use of sensitive information. We do not sell your personal information or share it for cross-context behavioral advertising. You may exercise these rights, including through an authorized agent, by contacting us below.

9.EEA/UK privacy rights (GDPR-style)

If you are in the EEA, the UK, or a similar jurisdiction, you have the right to access, rectify, erase, restrict, or object to our processing, the right to data portability, and the right to withdraw consent. We rely on lawful bases including contract performance, consent, legal obligations, and our legitimate interests. You may also lodge a complaint with your local data-protection authority.

10.Children's privacy

Our site and Products are intended for adults. We do not knowingly collect personal information from children under thirteen (13), and our store is not directed to children. If you believe a child has provided us with information, please contact us and we will delete it as required by law.

11.Data security

We take reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS), reputable processors such as Stripe for payments, and Cloudflare for security and bot protection. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

12.International data transfers

We operate from Puerto Rico and serve customers across the United States. Your information may be processed and stored in the United States or other countries with different data-protection laws. Where required, we use appropriate safeguards for such transfers.

13.Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date and post the new version here. Material changes may be communicated by additional notice. Your continued use after changes are posted means you accept the updated Policy.

14.How to contact us

To ask a question about this Policy or exercise any of your privacy rights, reach us through our contact form or by email at hello@essencesoaps.com. We are a handcrafted soap and candle business based in Puerto Rico.