Privacy Policy

This page describes what Morning Aroma actually does with your information, as the site is genuinely built today. It is not a substitute for legal advice — if you need this policy reviewed for your specific regulatory situation, please have a qualified professional review it.

What we collect

When you use Morning Aroma, we collect information you give us directly: your name and email when you create an account or sign in (including, if you choose, via "Sign in with Google" — see below); shipping details at checkout; the notes, ratings, and varieties you log in My Aroma Journey; messages you send through the contact form, the footer quotation form, the Our Services inquiry form, the Green Coffee wholesale order form, or live chat; and reviews submitted through "Leave Your Aroma," which are anonymous and not linked to your account.

We do not collect or store your full payment card details ourselves — payment is processed directly by Paystack (see below), and we only receive confirmation of whether a payment succeeded.

How we use it

We use this information to fulfil orders, respond to inquiries, personalize recommendations based on your tasting history, and improve the site. We do not sell your personal information to third parties.

Third-party services we use

Morning Aroma is built on a real backend that relies on a small number of trusted third-party services to actually operate:

• Paystack processes all real payments and subscriptions. Your card details are sent directly to Paystack, not to us — we receive only a confirmation and a transaction reference.
• Resend sends our transactional emails — account verification, password resets, and order confirmations.
• Cloudinary hosts product and content photos uploaded by our team.
• Google provides the optional "Sign in with Google" button, if you choose to use it instead of a password. If you use it, our application accesses your name, email address, and profile photo from your Google account, so we can create or sign you into your Morning Aroma account. We do not access your contacts, files, or any other Google data, and we never post to your Google account on your behalf. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Sentry receives reports when the site encounters a real bug, so we can find and fix it — but only after you've explicitly accepted our consent banner (see below). It does not receive your IP address, and we strip anything that looks like an email address out of error reports before they're sent.
• Google Analytics helps us understand how visitors use the site — which pages get visited, roughly where visitors are coming from — but only after you've explicitly accepted our consent banner (see below). We configure it to anonymize IP addresses rather than store them in full, and we do not use it for advertising or cross-site tracking.

Local storage, error monitoring, and analytics

Your shopping cart and wishlist are saved in your browser's local storage so they survive a page refresh — this specific data stays on your device and is not transmitted to us or any third party.

Error monitoring (Sentry) and analytics (Google Analytics) are both optional and consent-gated together, behind the same "Accept" in our consent banner. Neither loads at all until you've explicitly accepted, and declining has no effect on how the site functions for you.

We do not use advertising cookies or any cross-site tracking or retargeting service.

Data retention and your rights

You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete your account and associated data, by contacting us at the email address below. We retain order records as required for accounting and legal purposes; other data is kept only as long as your account is active or as needed to provide the service.

Children's privacy

Morning Aroma is not directed at children under 16, and we do not knowingly collect information from them.

Changes to this policy

If we make material changes to how we handle your data, we'll update this page and, where appropriate, notify account holders directly.

Contact

Questions about this policy can be sent to the contact details in our footer, or directly to [email protected].