1. Information we collect
We may collect your name, email, telephone number, delivery address, gift message, scent preferences, customer-support messages and order details. XPAY and its card-processing partners collect payment credentials during checkout; TadaDrop does not receive or store complete card numbers.
2. Information collected automatically
Hosting and security services may receive device and browser information, IP address, approximate location and technical request records needed to deliver and protect the site. If you allow optional measurement, Google Analytics and TikTok may receive page, referral, campaign, browser and shopping-event information to measure site use and advertising performance. Checkout contact details, addresses and payment credentials are not included in Google Analytics shopping events.
3. How we use information
We use information to operate and secure the site; personalize, process and fulfill orders; provide tracking and customer support; prevent fraud and abuse; comply with legal obligations; and understand advertising performance.
4. Service providers
We share only the information reasonably needed with service providers that support payment, hosting, security, analytics, delivery, email, messaging and customer care. If you contact us through WhatsApp, your phone number, message and related communication metadata are processed by WhatsApp and Meta under their own terms and privacy policy. Do not send payment card details through a support message. We do not sell personal information for money.
5. Retention and security
We retain information for as long as reasonably needed for orders, support, fraud prevention, legal obligations and legitimate business records. We use practical safeguards, but no online system can guarantee absolute security.
6. Cookies and choices
Essential browser storage keeps your bag and privacy choice working. Optional analytics and advertising measurement load only after permission. You can reopen Privacy choices at any time and switch to Essential only.
7. Your rights
Depending on location, you may have rights to request access, correction, deletion or a copy of personal information, or to object to or restrict certain uses. We may verify identity before completing a request, and lawful exceptions may apply.