Privacy Policy

At JS Fragrance, your trust matters more than any sale. We are fully committed to protecting your personal information and ensuring it stays safe, secure, and private.

We will never sell, leak, share, rent, or trade your personal data with any third party. Your information is used solely to fulfill your orders and improve your shopping experience.

When you create an account, place an order, submit feedback, or contact us, we may collect:

• ◆Full name and email address
• ◆Phone number (for delivery coordination)
• ◆Delivery address (street, barangay, city, province, ZIP code)
• ◆Payment proof (screenshot of your GCash / bank / e-wallet transaction)
• ◆Optional profile photo (only if you choose to upload one)
• ◆Google profile basic info (only if you sign in with Google)
• ◆Order history, wishlist, and saved addresses
• ◆Reviews, feedback messages, contact-form submissions, and any photos you attach
• ◆Custom Scent Builder responses (your selected notes/preferences)

If you join as an ambassador or distributor, we additionally collect and store:

• ◆Your unique referral slug (auto-generated from your name when your account is created)
• ◆Your social media handle and the main platform you'll promote on
• ◆Audience-size and monthly-sales-estimate ranges (only if you provided them)
• ◆Why-us motivation text from your application form
• ◆Your tester-kit payment proof image (e.g., GCash / bank screenshot)
• ◆The ambassador who referred you (if you joined via someone's ?ref= link)
• ◆Your ambassador wallet balance and transaction history
• ◆Your manual / chat orders (recorded by admin so they count toward your leaderboard)
• ◆Monthly Top-Seller prize claims you submit (year/month, your bottle count + revenue snapshot, your GCash number and scent-choice note, plus admin's internal fulfilment notes)

What is publicly visible to other ambassadors on the team leaderboard inside the dashboard: your display name, tier badge, total bottles sold, and revenue. Your phone, email, address, payment proof, audience size, motivation text, and prize-claim notes are never displayed to other users.

Wholesale pricing is stored confidentially and gated behind authentication — only verified active ambassadors / distributors / admins can see distributor tier pricing.

• ◆Process and fulfill your orders, verify payments, and coordinate delivery
• ◆Communicate order updates, shipping notifications, and (with your consent) promotional emails
• ◆Provide customer support when you contact us
• ◆Improve our products, product recommendations, and the website experience
• ◆Detect and prevent fraud, abuse, or unauthorized access
• ◆Calculate ambassador referral commissions when applicable

We use a small number of technologies to keep the site running smoothly:

• ◆Essential cookies: session, login state, cart contents, and bot-prevention.
• ◆Ambassador referral cookies: when you visit via a referral link, we store the ambassador code (typically 30 days) so the correct person gets credited if you purchase.
• ◆Referral channel analytics: when you arrive via a referral link with UTM parameters (e.g., ?utm_source=tiktok), we log the source, medium, campaign, and the visited path so admins and ambassadors can see which channel (TikTok vs Facebook vs IG vs DM) actually drives traffic. We log only the UTM tags plus a coarse referer/user-agent string — no email, name, or browsing history.
• ◆Anonymous analytics: aggregated visitor counts, page views, and conversion funnels — used to improve UX. No individually identifying data is sold to analytics partners.
• ◆Service worker: a Progressive Web App cache to make the site fast and work offline. No personal data leaves your device.
• ◆localStorage: stores your cart, wishlist, recently-viewed products, your Compare Scents selection (max 3 product IDs), and UI preferences — never transmitted to us unless you take an action that requires it.

You can clear cookies and local storage at any time via your browser settings.

You have full control over your account information. From your account page you can:

• ◆View and edit your name and phone number at any time
• ◆Upload or remove your profile photo
• ◆Manage your saved delivery addresses
• ◆View your order history, track active orders, and one-click Reorder any past order
• ◆Manage your wishlist, recently-viewed list, and Compare Scents selection
• ◆Request password reset via the Forgot Password page
• ◆Request full account deletion by contacting support (order records may be retained for tax compliance)

Passwords are encrypted using bcrypt hashing. We physically cannot see your real password — we can only verify whether a password matches. Admin accounts require two-factor authentication (2FA).

We rate-limit login attempts (8 attempts per IP per 5 minutes) to prevent brute-force attacks.

• ◆All data is transmitted over HTTPS (TLS) — we force-redirect HTTP to HTTPS on every route.
• ◆Passwords are hashed and never stored in plain text.
• ◆Payment proofs are stored in encrypted object storage and only accessible to authorized admins.
• ◆Admin access is logged in a tamper-evident audit log for accountability.
• ◆We regularly review security practices and apply patches promptly.

• ✕Sell your personal information to third parties
• ✕Share your data with advertisers or data brokers
• ✕Use your data for purposes beyond what's described in this policy
• ✕Send you spam or unsolicited messages
• ✕Expose your payment proof, address, or contact details publicly

If you sign in with Google, we receive your name, email address, and profile picture only. We do not access your contacts, calendar, Drive, or any other Google service data.

When you submit a review or feedback, the name you provide and your comment text may be displayed publicly on our website after admin approval. Your email address is never displayed publicly. Photos are stored securely and only published after approval.

Contact form submissions are visible only to JS Fragrance admins via the internal Inbox. We respond within 1 business day.

JS Fragrance is intended for users aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the right to:

• ◆Be informed about how your data is used
• ◆Access, correct, or update the personal data we hold about you
• ◆Object to processing or withdraw consent at any time
• ◆Request deletion of your data
• ◆Lodge a complaint with the National Privacy Commission

For privacy questions or data requests, reach out:

• ◆Email: support@jsfragrances.com
• ◆Contact form: jsfragrances.com/about#contact
• ◆Facebook: JS Fragrance