Privacy Policy

Last Updated: September 22, 2026 • Effective Date: September 22, 2026

1. Introduction & Scope

Welcome to Lasting Aroma (lastingaroma.com), operated by Invitro Biotech Labs (“we”, “us”, or “our”). We are committed to protecting your privacy and ensuring your personal information is handled in a safe and responsible manner.

This Privacy Policy describes how we collect, use, store, and protect your information when you visit our website, create an account, purchase our aromatherapy car perfumes, diffusers, and luxury fragrances, or use our third-party social login features (such as Google Sign-In).

2. Information We Collect

We collect information that you directly provide to us, as well as data automatically generated during your browsing sessions:

• Account & Contact Information: Your full name, email address, phone number, billing address, and delivery shipping address.
• Order & Transaction Records: Products purchased, order totals, shipping preferences, and payment confirmation identifiers (such as UPI reference/UTR numbers or bank transaction numbers). Note: We do not store credit/debit card numbers or bank passwords.
• Technical & Browsing Data: IP address, device type, browser user-agent, operating system, and pages visited, collected for fraud prevention and performance optimization.

4. How We Use Your Information

We utilize collected customer information solely for legitimate business operations:

• Processing, packaging, and dispatching your orders to your delivery address.
• Verifying payments made via Direct UPI, Bank Transfer (NEFT/RTGS), or Cash on Delivery.
• Sending order confirmation receipts, shipment dispatch notices, and tracking numbers.
• Responding to customer care inquiries and resolving replacement or return requests.
• Ensuring website security, preventing malicious orders, and complying with statutory tax obligations under Indian law.

5. Data Sharing & Third-Party Disclosure

We do not sell, rent, lease, or monetize your personal data to data brokers or third-party advertisers.

We only share data with essential service providers necessary to fulfill your orders:

• Logistics & Courier Partners: (e.g. Blue Dart, Delhivery, India Post) to ship products to your destination.
• Hosting & Security Providers: To maintain website availability, speed, and SSL encryption.
• Legal Authorities: Only when strictly required by applicable law, court order, or governmental regulation in India.

6. Cookies and Tracking Technologies

We use essential functional cookies to keep track of your shopping cart contents and remember your logged-in session. We may also use anonymous analytics cookies to understand site performance and visitor flow. You can control cookie preferences directly through your browser settings.

7. Data Storage & Security Measures

We implement stringent administrative and technical security safeguards, including 256-bit SSL encryption across all web traffic, secure database storage, and restricted administrative access to protect your personal information against unauthorized disclosure, alteration, or destruction.

9. Contact Information & Grievance Redressal

For questions, clarifications, privacy inquiries, or data requests, please contact our Grievance Officer: