Privacy Policy

Effective July 26, 2026

Saffron Bath Co. ("we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you visit saffronbathco.com (the "Site"), how we use it, and the choices you have. By using the Site you agree to the practices described here.

Information We Collect

We collect only the information needed to operate the Site and fulfill your orders:

Order information: name, shipping and billing address, email address, phone number (optional), and the items you purchase.
Payment information: handled directly by Square, our payment processor. We never see or store your full card number, CVV, or bank details. Square returns only a transaction reference to us.
Contact form submissions: the name, email, and message you provide so we can reply.
Newsletter signups: the email address you enter in our signup form, or the address on your order if you ticked the marketing opt-in box at checkout.
Unfinished checkouts: if you enter your email address at checkout but do not complete the order, we keep that address and a list of the items in your cart so we can remind you. This is not treated as a newsletter signup — you are only added to our mailing list if you opt in.
Technical information: IP address and basic request metadata, used only to enforce rate limits and diagnose errors. We do not use third-party analytics or advertising trackers.

How We Use Your Information

To process and ship your orders.
To send order confirmations and shipping updates.
To respond to messages you send through the contact form.
To send newsletters, new-product announcements, and sale announcements — only if you opted in. Every one of those emails includes an unsubscribe link, and unsubscribing takes effect immediately.
To remind you about a cart you left behind.
To detect and prevent fraud, spam, and abuse.
To comply with our legal and tax obligations.

We do not sell, rent, or trade your personal information, and we do not use it for behavioral advertising.

Who We Share Information With

We share information only with the service providers needed to run the Site:

Square — payment processing. See Square's privacy notice.
Shipping carriers (e.g. USPS, UPS) — to deliver your order.
Email delivery provider — to send transactional messages such as order confirmations.

We may also disclose information if required by law, subpoena, or court order, or to protect our rights and the safety of others.

Cookies and Local Storage

The Site uses a small number of essential cookies and browser storage items: a session cookie for admin access (not used by customers), and local storage to remember the items in your cart between visits. We do not use advertising or cross-site tracking cookies.

Data Retention

We keep order records for as long as needed to fulfill orders, handle returns, and meet our legal and accounting obligations (generally up to seven years for tax records). Contact form messages are kept only as long as needed to resolve your inquiry.

Email addresses on our mailing list are kept until you unsubscribe or ask us to delete them. Addresses from unfinished checkouts are kept until you ask us to delete them. We do not set an automatic expiry on either — if you want yours removed, email us and we will do it.

Your Rights

You may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it (subject to the legal retention requirements above). To make a request, email us at the address below. We will respond within 30 days.

Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Security

We use HTTPS across the Site, modern hashing for any stored credentials, and limit access to your information to the people who need it to do their job. No system is perfectly secure, but we take reasonable steps to protect what you share with us.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of the page. Material changes will be highlighted on the Site.