Privacy Policy

Last updated: September 15, 2026

Pocket Products LLC ("we", "us") respects your privacy. This policy explains what we collect, why we collect it, and how we use it.

1. Information We Collect

You provide it directly: name, email, shipping address, phone number, and payment information when you place an order, sign up for emails, or contact support.

Automatically collected: device type, browser, IP address (hashed), pages visited, and referral source via cookies and similar technology.

2. How We Use It

• Fulfill orders and manage subscriptions
• Send order confirmations, shipping updates, and service messages
• Send marketing email and newsletters, but only if you opted in
• Send order updates and marketing by text message, but only if you opted in to that separately at checkout (reply STOP anytime). See section 4
• Detect fraud and secure the site
• Improve our products and website

Unsubscribing from promotional email and newsletters: you can unsubscribe at any time by emailing hello@pocketperfume.com and asking to be removed. We stop promotional email and newsletters within 10 business days, no account or login required. Transactional messages (order confirmations, shipping updates) are not affected, since those are not marketing.

3. Parties We Disclose Information To

We do not sell your personal information. We share it only with the following categories of third-party service providers, each of whom is contractually required to protect your data and use it only for the purpose of providing their service to us:

• Payment processors: Stripe, Inc. (for credit card processing, fraud detection, and payouts)
• Shipping carriers: USPS, UPS, and FedEx (for order fulfillment and tracking)
• Email and communications: Resend and Google Workspace (for transactional and support email)
• Text messaging: Twilio Inc. (to deliver the order and marketing texts you have opted in to, and only for that purpose)
• Hosting and infrastructure: Vercel (website hosting), Cloudflare (DNS and security), Supabase (database and server-side functions)
• Analytics: Aggregated, non-identifying visitor analytics to improve our site
• Legal compliance: Regulators, courts, or law enforcement when required by law

4. Text Messages (SMS)

We text you only if you asked us to. Consent is given by ticking a box at checkout that is never pre-selected, it is never required to make a purchase, and the two programs are separate: order updates and marketing offers can be taken one without the other.

• No mobile information is shared with third parties or affiliates for marketing or promotional purposes.Your mobile number and your consent are disclosed only to the messaging provider that delivers the message on our behalf (Twilio), and never sold, rented or passed on for anyone else's marketing.
• Message frequency: order updates are typically 2 to 4 texts per order. Marketing messages, if you opted in to those, are no more than 4 per month.
• Message and data rates may apply, depending on your mobile plan.
• Stopping: reply STOP to any message to opt out, or HELP for help. We record the opt-out ourselves rather than relying on the carrier alone, so it applies across every program and every number we send from.

5. Method of Disclosure

Personal information is disclosed only through encrypted, authenticated channels:

• All data transmission to payment processors, shipping carriers, and service providers is sent over HTTPS/TLS 1.2+
• Payment card information is collected directly by Stripe in an iframe we never see; we do not store card numbers on our servers
• Shipping details are transmitted to carriers via their official API over encrypted connections
• Internal access to customer data is restricted to authorized staff and protected by unique credentials and two-factor authentication

6. Data Security Practices

We take security seriously and apply the following safeguards:

• Encryption in transit: All connections to pocketperfume.com and pocketperfume.com use TLS 1.2 or higher
• Encryption at rest: Customer data in our database is encrypted at rest by Supabase using AES-256
• PCI compliance: Payment processing is handled by Stripe, a PCI-DSS Level 1 certified processor. We never store, process, or transmit raw card numbers
• Access controls: Row-level security on our database ensures customers only ever see their own data; administrative access is protected by multi-factor authentication
• Minimization: We collect only the information we need to fulfill your order and run the business
• Incident response: In the event of a data breach affecting your personal information, we will notify affected users within 72 hours and comply with applicable breach notification laws

7. Cookies

We use cookies for cart persistence, affiliate referral tracking (60-day window), and basic analytics. You can disable cookies in your browser, though some features will not work.

We also measure how our ads perform. To change that choice, reopen the cookie notice and choose Decline.

8. Your Rights

You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Email hello@pocketperfume.com and we will respond within 30 days.

9. Children

Our site is not intended for anyone under 13. We do not knowingly collect information from children.

10. Changes

We may update this policy. Material changes will be announced by email or a banner on the site. The date above reflects the most recent update.

11. Contact

Questions about this policy? Email hello@pocketperfume.com.