Effective September 10, 2026

We respect the privacy of visitors and customers who interact with our website, purchase products, create accounts, contact customer support, or otherwise use our online services. This Privacy Policy explains the general types of information that may be collected, the purposes for which information may be used, the circumstances in which information may be shared, and the choices that may be available to individuals under applicable privacy laws. Our intention is to provide clear information about how personal data may be handled in connection with our website and retail operations.

The information we collect can vary depending on how you interact with our services. When you place an order, register for an account, contact us, subscribe to communications, submit a request, or use certain website features, we may receive information such as your name, email address, telephone number, billing details, shipping address, account information, order information, and other details necessary to provide the requested service.

Information submitted during a purchase may also include transaction-related details. Payment information is generally handled through the payment provider selected during checkout. Depending on the payment method, financial information such as payment card details may be submitted directly to an independent payment processor rather than being maintained within our own systems. We may receive information necessary to confirm a transaction, process an order, issue a refund, address a payment-related inquiry, or provide customer support.

If you create an account, we may maintain information associated with that account, including your contact details, order history, saved preferences, and other information that you voluntarily provide. We may also retain information when you communicate with customer service, submit feedback, provide a product review, ask a question, participate in a promotion, or use another website feature that allows you to provide information.

Certain technical information may be collected automatically when you visit or use the website. Depending on the technologies implemented on the site, this may include your internet protocol address, browser type, operating system, device information, referring website, pages visited, links selected, website functions used, approximate location information, date and time of activity, and other technical or usage information. This information may help us understand website performance, identify technical difficulties, improve usability, maintain security, and understand general patterns of website activity.

We may use cookies and similar technologies to support website operations and improve the online experience. These technologies may help maintain shopping cart functions, remember selected preferences, understand website traffic, measure content performance, analyze usage patterns, and support certain communications or promotional activities. Depending on your browser and device settings, you may be able to restrict or disable some cookies. Certain website functions may not operate correctly if required technologies are blocked or disabled.

Information may be obtained directly from you or, when necessary for legitimate business purposes, from service providers and other third parties. These sources may include payment processors, shipping and delivery companies, fraud prevention providers, website hosting services, analytics providers, customer support platforms, technology vendors, and other businesses that assist with website or retail operations. Information received from these sources may be used to complete transactions, provide services, maintain systems, prevent misuse, or support other legitimate business functions.

Personal information may be used to process and fulfill orders, confirm purchases, arrange delivery, respond to customer inquiries, maintain accounts, administer returns and refunds, provide requested support, and communicate with customers about their transactions. Information may also be used to maintain and improve the website, troubleshoot technical problems, analyze general usage, protect systems, identify potentially fraudulent activity, investigate security concerns, and comply with applicable legal obligations.

Where permitted by applicable law, contact information may be used to send promotional communications concerning products, services, offers, updates, or other information that may be relevant to customers. Marketing communications may include email messages or other permitted forms of communication. If you do not wish to receive promotional messages, you may generally use the unsubscribe instructions included in those communications. Opting out of marketing does not normally prevent necessary service communications, such as order confirmations, shipping updates, account notices, payment-related messages, or responses to customer inquiries.

We may rely on third-party providers to perform specific functions on our behalf. These providers may support payment processing, website hosting, order management, shipping, information technology, customer service, analytics, security, fraud prevention, communications, or other operational activities. Information may be provided to these companies only to the extent reasonably necessary for them to perform their services or support legitimate business functions, subject to applicable requirements and contractual arrangements where appropriate.

Personal information may also be disclosed when reasonably necessary to comply with applicable law, regulation, court order, legal process, or governmental request. Information may be shared when appropriate to investigate suspected fraud, unlawful activity, security incidents, misuse of the website, violations of applicable terms, or other circumstances requiring protection of our customers, business, systems, or legal interests. In the event of a business transaction such as a merger, acquisition, sale, financing, restructuring, or transfer of assets, information may be transferred as part of the relevant transaction where legally permitted.

We may use information in aggregated, statistical, anonymized, or de-identified formats when it cannot reasonably be used to identify an individual. Such information may be used for operational analysis, business planning, website performance measurement, service development, reporting, and other lawful purposes. These uses are intended to help us understand broader trends without unnecessarily identifying individual customers.

Privacy rights may vary depending on where you reside and which laws apply to your personal information. Depending on the applicable legal framework, you may have rights to request access to certain personal information, seek correction of inaccurate information, request deletion where legally available, or exercise specific choices concerning the use or disclosure of personal data. The availability and scope of these rights can differ according to jurisdiction and individual circumstances.

When a privacy request is submitted, we may need to obtain reasonable information to verify the identity of the requester. Verification is intended to reduce the risk of unauthorized access, disclosure, modification, or deletion of personal information. Where account-management functions are available, customers may also be able to update certain information directly through their account.

Individuals can generally manage certain cookie preferences through browser or device controls. Promotional email preferences can typically be changed by using the unsubscribe function included in the applicable marketing message. Even after opting out of promotional communications, customers may continue receiving messages that are necessary to provide requested services or administer existing transactions.

Our website is not intended to knowingly collect personal information from children in circumstances where doing so is prohibited by applicable law. If you believe that a child has submitted personal information to us in a manner that may violate applicable requirements, please contact us so that the situation can be reviewed and appropriate steps can be considered.

We retain personal information for periods that are reasonably related to the purposes for which it was collected and to applicable business or legal requirements. Retention may be necessary to complete transactions, provide customer assistance, maintain appropriate business and financial records, resolve disputes, prevent fraud, enforce agreements, or satisfy accounting, tax, regulatory, and other legal obligations. When information is no longer reasonably necessary, it may be deleted, securely disposed of, or converted into a form that does not reasonably identify an individual, subject to applicable retention requirements.

Reasonable administrative, technical, and organizational safeguards may be used to protect personal information against unauthorized access, misuse, alteration, loss, or disclosure. However, no online service, electronic storage system, or internet transmission method can be guaranteed to be completely secure. Customers should also take appropriate precautions to protect their own accounts and information, including using suitable passwords and avoiding unnecessary disclosure of confidential account details.

If you believe that your account credentials or personal information may have been compromised, please contact us as soon as reasonably possible. Prompt notification can help us evaluate the circumstances and determine whether additional steps may be appropriate.

Our website may contain links to third-party websites, applications, payment services, social platforms, or other external resources. These services operate independently and may collect, use, or disclose information according to their own privacy policies and terms. This Privacy Policy applies to information handled through our own website and retail activities and does not govern the privacy practices of third-party services that we do not control. We encourage visitors to review the applicable privacy information before submitting personal data to an external service.

We may update this Privacy Policy when our business practices, website functionality, technologies, information-handling procedures, or legal obligations change. A revised policy may be posted through the website and may include a new effective date when appropriate. Customers are encouraged to review this policy periodically to remain informed about how information may be handled under the current version.

If you have questions about this Privacy Policy, wish to inquire about personal information, or need to submit a privacy-related request, please contact us at bathsbomb@gmail.com. We welcome privacy inquiries and will make reasonable efforts to review requests and provide appropriate information based on the circumstances and applicable requirements.

By accessing or using the website, you acknowledge that you have had an opportunity to review this Privacy Policy. Where permitted by applicable law, continued use of the website or related services after an updated version has been made available may indicate acknowledgment of the revised practices described in that version.

This Privacy Policy is intended to provide a general explanation of our information practices and should be read together with any other applicable policies, notices, terms, or disclosures presented through the website. Our privacy practices may continue to develop as technology, business operations, customer expectations, and legal requirements evolve.