Complimentary shipping on orders over $115 · Every order will include deluxe samples from our range

Privacy

What we collect, and what we do with it.

Written plainly, and specific to what this site actually does. Last updated 29 September 2026.

Who we are

Aphora Botanicals makes botanical skincare and sells it online and at markets in the United States. If you want to reach a person about anything on this page, email contact@aphorabotanicals.com.

What we collect

WhenWhat
You join the newsletter or ask for the guideFirst name, last name, email address.
You join a product waitlistEmail address, and which product you asked about.
You contact usYour name, email address and whatever you write in the message.
You place an orderName, email, shipping and billing address, and your order contents. Payment is taken by Square on their own pages — we never see or store your card number.
You browse the sitePages viewed, products looked at, items added to cart, and technical details including IP address, browser and device. Collected through cookies and similar technologies.
You use the Aphora ConciergeYour account details, anything you tell it about your skin, and your conversations with it. That service has its own account controls, including export and deletion.

We do not ask for, or knowingly collect, information from anyone under 18.

Why we collect it

To send you what you asked for, to take and ship orders, to answer you when you write, to understand which pages and products people find useful, and — where you have given us your address for that purpose — to send you occasional email about Aphora.

We also use browsing information to measure and target advertising on Facebook and Instagram. That is the part most people care about, so it has its own section below.

Who we share it with

We do not sell your personal information for money. We do share it with the services that run the business, and one form of sharing for advertising is described in the next section.

ServiceWhat it receives
SquareCustomer records, orders and payments. Square is our shop and payment processor and holds the customer record for anyone who buys or subscribes.
Meta (Facebook and Instagram)Browsing activity, and a scrambled (hashed) form of your email address when you sign up or begin checkout. See below.
Google AnalyticsBrowsing activity, to understand how the site is used.
ResendYour email address and the contents of emails we send you.
Supabase and VercelHosting and the databases behind this site and the Concierge.
DiscordOrder and signup notifications, so we see a sale as it happens. These currently include the buyer's name, email, phone, billing and shipping address, and the card brand and last four digits. See the note below.
Anthropic and OpenAIOnly for the Aphora Concierge: the text of your conversations, to generate replies. Not used to train their models.

A note on the Discord notifications. We are telling you this because it is true, not because it is flattering. Our sale alerts currently carry more customer detail than they need to, into a private team channel. We are reducing what those messages contain. If you would rather your order details were not included, email us and we will handle your order without it.

Advertising, and the hashed email

This site runs the Meta Pixel and the Meta Conversions API. Together they tell Meta when someone views a product, adds to cart, begins checkout, buys, or signs up.

When you sign up or begin checkout, your email address is converted into a hash before it is sent — a one-way scramble that cannot be turned back into your address. Meta uses it to check whether it already knows you, so we can measure whether our advertising works and show ads to people like our customers. We never send your name, and we never send your address in readable form.

Under California law this counts as sharing personal information for cross-context behavioral advertising, even though no money changes hands. You can tell us to stop — see below.

Being straight about cookies. These scripts currently load as soon as you arrive, without asking first. We are working on a proper choice before anything loads. Until then, your browser's tracking protection or an ad blocker will stop them, and emailing us will remove you from advertising audiences.

Email, and how to stop it

We email you when you ask us to — the guide, the newsletter, a waitlist you joined — and when you order something. We do not sell or rent your address to anyone.

To stop marketing email, use the unsubscribe link in any message, or reply with the word unsubscribe, or email contact@aphorabotanicals.com. We will action it by hand within a few days at the outside. You will still receive messages about an order you have placed.

Your rights

Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or stop using it for advertising. If you are in California, those rights are specifically protected, along with the right not to be treated differently for using them — which we would not do anyway.

To exercise any of them, including “do not sell or share my personal information”, email contact@aphorabotanicals.com. We will reply within 45 days, and usually much sooner — Aphora is a small team and requests come straight to a person. We may need to check it is really you before we act.

Some records we must keep: completed orders are retained for tax and accounting even if you ask us to delete everything else.

How long we keep things

Marketing contacts until you unsubscribe or ask us to remove you. Order records for as long as tax rules require. Analytics and advertising data according to each provider's own retention, typically around two years. Concierge accounts until you delete them.

Where your information goes

Aphora is based in the United States, and the services above are US-based or operate globally. If you are writing to us from outside the US, your information will be handled in the US.

Changes

When this changes we will update the date at the top. This version is 2026-09-29. If we ever change something significant about how we use your information, we will say so rather than quietly editing the page.

Questions, or want something removed? Email contact@aphorabotanicals.com — or use the contact form.