Privacy & Data Policy

At Saad Oudworks, we treat your personal data with the same reverence and restraint that we apply to our natural raw materials. We collect the absolute minimum data required to deliver our compositions and keep you notified of our limited releases. We strictly adhere to the General Data Protection Regulation (GDPR) and global privacy standards.

1. What Personal Data We Collect

We only collect data that you explicitly provide to us:

• Release List Email Addresses: Collected when you join our first-access release list. We send one confirmation email, and you are only added once you click its link (double opt-in). Alongside your address we keep the page you signed up from and when you signed up and confirmed, as a record of your consent. Every release email carries a one-click unsubscribe link that erases your details immediately. Addresses that bounce permanently or report our emails as spam are removed automatically.
• Checkout Information: Managed securely through our payment provider (Stripe). This includes name, delivery address, and billing details to fulfill physical perfume deliveries. We never store card numbers on our databases.
• Atelier Inquiry Form: Name, email address, and message details provided when reaching out to our customer care or perfumer.

2. Data Storage & Encryption

All waitlist and subscription email addresses are stored in a secure SQLite/Turso database with industry-standard TLS encryption during transport. Server access is restricted strictly to designated operational managers. No PII is logged in raw application server execution logs.

3. Cookies and Tracking

We use secure, functional cookies for authentication sessions and payment processes (e.g. Stripe checkout cookies and next-auth session identifiers). Analytical tracking (Vercel Web Analytics) is aggregated, anonymous, and does not record PII or map requests back to individual users.

4. Your Rights & Permanent Deletion

Under the GDPR, you have the absolute right to view, modify, or permanently delete (“Right to be Forgotten”) any of your data stored on our servers.

If you wish to permanently delete your email address and waitlist entries from our database instantly, please use the secure automated form below:

5. Protection of Minors (Children's Privacy)

Our compositions, services, and online store are intended solely for individuals who are at least 18 years of age (or the legal age of majority in their jurisdiction). We do not knowingly collect, solicit, or store personal information from children under 16 years of age in compliance with the General Data Protection Regulation (GDPR Article 8) and the Children's Online Privacy Protection Act (COPPA).

If you are a parent or legal guardian and believe your minor child has submitted personal data to us, please submit a deletion request using the form above or email us directly at saad@saadoudworks.com. We will immediately and permanently erase all associated records from our databases.