Privacy Policy
Your privacy is important to us. This policy explains how we handle your data.
Last Updated: 2026-01-22
1. Introduction
Aroma Leaf ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website aroma-leaf.com and use our services.
We are based in Bulgaria and comply with the General Data Protection Regulation (GDPR) and Bulgarian data protection laws.
2. What Data We Collect
We collect information that you provide directly to us and information automatically collected when you use our services:
Personal Information
- Name (first and last)
- Email address
- Phone number (optional)
- Location data (country/city for service delivery)
Usage Data
- Browser type and version
- IP address
- Pages visited and time spent
- Clicks, scrolls, and other interactions
3. How We Use Your Data
We use your information for the following purposes:
- To provide and maintain our services, including course enrollment and content delivery
- To communicate with you about your account, orders, and customer support
- To send you newsletters, promotional materials, and educational content (with your consent)
- To improve our website, products, and services based on usage patterns
- To comply with legal obligations and protect our rights
4. Third-Party Processors
We share your data with the following trusted third-party service providers to operate our business:
Google Analytics
Website analytics and user behavior tracking. Data is anonymized where possible.
PostHog
Product analytics and session recordings to improve user experience. We anonymize sensitive data.
Mautic (Self-Hosted)
Email marketing automation and contact management. Your data stays on our servers.
Authentik (Self-Hosted)
Authentication and user account management. Your credentials are securely stored.
doTERRA
Affiliate links for product purchases. We may receive commission on sales through our links.
6. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Account data: Until you request deletion or 2 years of inactivity
- Contact form submissions: 2 years for customer service purposes
- Analytics data: Aggregated and anonymized after 26 months
7. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Right to Access: Request a copy of all personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing of your data for marketing purposes
- Right to Withdraw Consent: Withdraw consent for data processing at any time
To exercise any of these rights, please contact us at support@aroma-leaf.com. We will respond within 30 days.
8. Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We will notify you of significant changes via email or a prominent notice on our website.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Data Protection Inquiries
info@aroma-leaf.comQuestions About Your Data?
We're here to help. Contact us for any privacy-related inquiries.
Contact Us