Privacy Policy

---

Sp3ctrum Creation Lab – Privacy Policy

Last updated: June 1 2025

1. Who We Are

Sp3ctrum Creation Lab (“Sp3ctrum,” “we,” “our,” “us”) is a boutique perfume studio based in California. This Policy explains how we handle personal information collected through sp3ctrumcreationlab.com and any related booking or email-marketing tools.

2. What We Collect & Why

Category (CPRA) Examples Purpose(s) Legal basis* Identifiers Name, email, phone, postal/ZIP code

• Send marketing newsletters you opt-into
• Confirm & manage lab appointmentsConsent / Legitimate interest

Internet activity IP address, device ID, pages viewed, cookies

• Site analytics & performance (Google Analytics)
• Spam & fraud prevention

Legitimate interest 

Commercial info

Appointment date/time, purchase history

• Process orders & maintain “Scent DNA” re-order records

Contract performance 

* “Legal basis” is shown for GDPR transparency. U.S. laws don’t require it but it helps EU/UK visitors.

We do not collect “sensitive personal information” (CPRA §1798.121) or children’s data (<13 yrs). We do not sell or “share” personal data for cross-context behavioural ads (CPRA §§1798.140(ah), (ae)).

3. How We Collect

• Directly from you – webforms, checkout pages, appointment scheduler.
• Automatically – cookies and similar tech (see § 8).
• From trusted service providers – e.g., payment processor and email platform when you engage with our emails.

4. How We Use Your Data

• Send the newsletters you requested.
• Book and remind you of booked appointments.
• Fulfil purchases and keep your custom fragrance formula on file.
• Improve site performance and security.
• Comply with legal obligations (tax, bookkeeping, fraud prevention).

5. When We Share (Spoiler: Almost never!)

We only disclose data to:

Recipient Why Safeguards Email service provider (e.g., Mailchimp)

Deliver newsletters Data-processing agreement; EU SCCs if applicable Booking platform (GoDaddy)

Schedule/reschedule your session 

Same Payment processor (Visa/GoDaddy Processing)

Complete purchases PCI-DSS compliance Law-enforcement or tax authorities

When legally required Court order / statutory duty

We do not permit these providers to use your data for their own marketing.

6. Your Privacy Rights

California residents (CCPA/CPRA) may:

• Know – request the categories and specific pieces of data we hold.
• Delete – ask us to erase information, subject to legal retention rules.
• Correct inaccuracies.
• Opt-out of sale/sharing – (we don’t sell/share, but you still have the right).
• Limit use of sensitive data – (not collected).

EU/UK residents may also: object to processing, request portability, and lodge a complaint with a supervisory authority.

To exercise any right, email privacy@sp3ctrumlab.com or submit the request form at /do-not-sell-my-info. We’ll verify your identity and respond within 45 days (30 days for GDPR).

7. Data Retention

We keep contact information for as long as you remain subscribed or have an active “Scent DNA” record, then purge or anonymise it after 24 months of inactivity. Transactional records are retained for 7 years to meet tax requirements.

8. Cookies & Similar Tech

We use first-party session cookies for site functionality and Google Analytics for aggregated traffic stats. You can disable cookies in your browser; the site will still work, but booking may require you to re-enter details.

9. Security

• HTTPS across the entire site
• Regular vulnerability scans
• Role-based access and 2FA for staff tools
• Encrypted backups stored in the U.S.

10. International Transfers

We host on servers located in the United States. If you access our site from outside the U.S., you consent to transferring your data to us. For EU/UK data, we rely on Standard Contractual Clauses with our processors.

11. Children’s Privacy

Our services are not directed to children under 13. We don’t knowingly collect their data. If you believe we have, email privacy@sp3ctrumlab.com and we’ll delete it.

12. Changes to This Policy

We’ll post any updates here and change the “Last updated” date. Significant changes will be announced via email.

13. Contact Us 

Questions? Email privacy@sp3ctrumlab.com or write to:
Sp3ctrum Creation Lab
9093 Elk Grove Blvd Suite 100
Sacramento, CA 95814 USA