Privacy policy

Effective Date: July 25, 2026
Last Updated: August 17, 2026

Phoenix Crafted (“Phoenix Crafted,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit phoenix-crafted.com, purchase our products, communicate with us, use or interact with the Phoenix Operations Hub, connect an authorized third-party account to our services, or otherwise interact with Phoenix Crafted.

By using our website, the Phoenix Operations Hub, or providing personal information to us, you acknowledge the practices described in this Privacy Policy.

1. Personal Information We Collect

The personal information we collect depends on how you interact with us.

Information You Provide

We may collect information you provide directly, including:

  • Contact information: Name, email address, telephone number, billing address, shipping address, and recipient information.

  • Order information: Products purchased, order history, transaction details, gift messages, scent preferences, and custom-order specifications.

  • Account information: Login credentials and account preferences when you create a customer account.

  • Payment information: Payment-card and billing information processed by Shopify Payments or another authorized payment processor. Phoenix Crafted does not receive or store your complete payment-card number.

  • Communications: Information included in emails, contact forms, reviews, social-media messages, customer-support requests, or other communications.

  • Marketing preferences: Your decision to subscribe to or unsubscribe from promotional communications.

  • Custom-order content: Names, dates, photographs, artwork, personalization instructions, or other information you voluntarily submit for a custom product.

  • Connected-platform authorization information: Information provided when an authorized user connects a third-party business or social-media account to the Phoenix Operations Hub.

Please do not submit sensitive personal information that is unnecessary for your order or request.

Information Collected Automatically

When you use our website or authorized business systems, we and our service providers may automatically collect:

  • IP address;

  • Browser and device type;

  • Operating system;

  • Device identifiers;

  • Referring and exit pages;

  • Pages viewed and links selected;

  • Date, time, and duration of visits;

  • Cart, checkout, and purchase activity;

  • Approximate location derived from an IP address;

  • Cookie, pixel, and similar technology information;

  • Information about how you interact with our website, advertisements, and marketing communications; and

  • Technical logs, authentication events, connection status, and security information associated with authorized use of our business systems.

Information Received from Other Sources

We may receive information from:

  • Shopify and Shopify services;

  • Payment processors;

  • Shipping and delivery providers;

  • Fraud-prevention and security providers;

  • Analytics and advertising partners;

  • Email and SMS marketing platforms;

  • Social-media platforms;

  • Connected business platforms and APIs;

  • Referral sources; and

  • Other service providers that support our operations.

Information received from a third party is subject to that third party’s privacy practices as well as this Privacy Policy.

2. How We Use Personal Information

We may use personal information to:

  • Process payments and fulfill orders;

  • Prepare, personalize, package, ship, and deliver products;

  • Provide order confirmations, tracking information, and service notifications;

  • Manage customer accounts;

  • Respond to questions, complaints, returns, scent-swap requests, and customer-support inquiries;

  • Communicate about custom orders and personalized products;

  • Send marketing communications when permitted or when you have provided any required consent;

  • Personalize website content, advertisements, and product recommendations;

  • Measure website, campaign, advertising, ecommerce, and social-media performance;

  • Prepare, schedule, publish, manage, and analyze authorized business content;

  • Maintain authorized connections to ecommerce, advertising, analytics, marketing, and social-media services;

  • Maintain audit records associated with authorized business activity;

  • Maintain, troubleshoot, secure, and improve our website, products, integrations, and services;

  • Detect, investigate, and prevent fraud, abuse, security threats, and prohibited activity;

  • Maintain records and administer our business;

  • Enforce our policies and agreements;

  • Protect Phoenix Crafted, our customers, and others;

  • Comply with tax, accounting, regulatory, and legal obligations; and

  • Carry out another purpose disclosed when the information is collected.

3. Legal Bases for Processing

Where the European Economic Area, United Kingdom, Switzerland, or another jurisdiction requires a legal basis for processing, we generally rely on one or more of the following:

  • Performance of a contract: To process and fulfill an order or provide a requested service.

  • Consent: For certain marketing, advertising, cookie, personalization, account-connection, or authorization activities.

  • Legitimate interests: To operate and improve our business, provide customer support, maintain business integrations, prevent fraud, secure our services, and understand business performance, provided those interests are not overridden by your rights.

  • Legal obligations: To comply with tax, accounting, consumer-protection, recordkeeping, or other legal requirements.

  • Establishment or defense of legal claims: When reasonably necessary to protect our legal rights.

You may withdraw consent at any time when processing is based on consent. Withdrawal does not affect processing that occurred before consent was withdrawn.

4. How We Disclose Personal Information

We may disclose personal information to service providers and business partners that help us operate Phoenix Crafted, including:

Recipient or Category Purpose
Shopify Ecommerce hosting, checkout, customer accounts, store functionality, analytics, fraud prevention, and related platform services
Shopify Payments and other payment processors Payment authorization, processing, fraud screening, and transaction administration
USPS and other delivery providers Shipping, tracking, delivery, claims, and address verification
Amazon Web Services and Phoenix Operations Hub communications infrastructure Email delivery through Amazon SES, SMS delivery where enabled, customer communications, consent and suppression management, segmentation, and campaign analysis
Google Analytics and similar providers Website measurement, analytics, and performance reporting
Google Ads and Google Merchant Center Product listings, advertising, attribution, and campaign measurement
Google and YouTube Authorized account access, video or channel management, content publishing, analytics, and related platform services
Meta, including Facebook and Instagram Advertising, authorized social-media management, publishing, engagement, audience measurement, and campaign analysis
TikTok Authorized account connection, content preparation or publishing, account information, engagement information, and performance analysis
Pinterest Authorized account connection, content and Pin management, publishing, boards, and performance analysis
LinkedIn Authorized account or organization connection, content publishing, page management, and performance analysis
Hosting, cloud, database, and infrastructure providers Hosting and operating the Phoenix Operations Hub and related internal systems
Review, customer-support, security, and fraud-prevention providers Reviews, support, website protection, fraud detection, and operational assistance
Professional advisers Accounting, tax, insurance, legal, and compliance services

These providers may process information according to our instructions, their agreements with us, permissions granted through their platforms, and their own legally required privacy notices.

We may also disclose information:

  • To comply with a subpoena, court order, legal process, or government request;

  • To investigate fraud, security incidents, or unlawful conduct;

  • To protect the rights, property, safety, or security of Phoenix Crafted, our customers, or others;

  • In connection with a merger, financing, sale, restructuring, transfer, or proposed transfer of all or part of the business; or

  • With your direction or consent.

5. Sale, Sharing, and Targeted Advertising

Phoenix Crafted does not sell personal information for money.

Certain privacy laws define “sale,” “sharing,” or “targeted advertising” broadly enough to include the disclosure of identifiers, device information, or website activity to advertising and analytics partners. Our use of services such as Meta advertising tools, Google advertising tools, or certain Shopify advertising and personalization features may be considered a sale, sharing, or targeted advertising under those definitions.

Where required, you may opt out through the Your Privacy Choices or data-sharing opt-out link available on our website, through applicable cookie controls, or by contacting us.

Where supported and legally required, we recognize browser-based opt-out preference signals such as Global Privacy Control.

We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising.

6. Shopify

Our store is hosted by Shopify. Shopify processes personal information to provide ecommerce, checkout, payment, fraud-prevention, analytics, personalization, and other services.

Depending on the Shopify services enabled for our store, Shopify may process certain information for its own purposes as described in the Shopify Consumer Privacy Policy.

Customers may also be able to submit certain privacy choices directly through Shopify’s privacy tools or privacy portal.

7. Phoenix Operations Hub and Connected Platform Data

Phoenix Crafted operates an internal business-management platform known as the Phoenix Operations Hub, available at hub.phoenix-crafted.com.

The Phoenix Operations Hub is designed to help authorized Phoenix Crafted personnel manage business operations, ecommerce information, marketing activity, reporting, social-media accounts, content workflows, and other authorized business functions.

Connected Accounts and Platforms

An authorized Phoenix Crafted user may connect third-party business accounts or services to the Phoenix Operations Hub.

Depending on the platform and permissions granted, connected services may include:

  • Shopify;

  • Google services;

  • Google Merchant Center;

  • YouTube;

  • Meta platforms, including Facebook and Instagram;

  • TikTok;

  • Pinterest;

  • LinkedIn;

  • Email and marketing platforms;

  • Analytics services; and

  • Other authorized business platforms added from time to time.

We access connected-platform information only through authorized methods made available by the applicable provider, such as OAuth authorization, approved APIs, access tokens, or other platform-approved authentication methods.

Information We May Receive from Connected Platforms

Depending on the permissions granted by the authorized user and the capabilities provided by the connected platform, we may receive or process:

  • Account identifiers;

  • User, profile, business, Page, channel, or organization identifiers;

  • Display names and usernames;

  • Profile or account information;

  • Connected Page or business-account information;

  • Authorization status and granted permissions;

  • Access-token status, expiration information, or refresh status;

  • Posts, videos, images, captions, descriptions, and other authorized media;

  • Draft or scheduled content;

  • Publishing status and publishing history;

  • Comments, reactions, engagement, and audience interaction information where permitted;

  • Content-performance and analytics information;

  • Advertising or campaign information where authorized;

  • Ecommerce or product information where authorized;

  • Account or integration health information; and

  • Technical information necessary to operate and secure the connection.

Phoenix Crafted does not request access to information beyond what is reasonably necessary for the authorized business functions being performed.

How We Use Connected-Platform Data

We may use connected-platform information to:

  • Authenticate and maintain authorized connections;

  • Identify the connected business, Page, account, channel, or profile;

  • Prepare social-media content;

  • Review and approve proposed content;

  • Schedule content;

  • Publish or upload authorized content;

  • Retrieve publishing status;

  • Manage permitted content;

  • Monitor account or connection health;

  • Retrieve permitted analytics or engagement information;

  • Measure content and campaign performance;

  • Generate internal reports;

  • Detect integration failures or unauthorized activity;

  • Maintain security and audit records;

  • Recommend business, marketing, or content improvements;

  • Support authorized artificial-intelligence-assisted workflows; and

  • Improve Phoenix Crafted’s internal business processes.

Where the Phoenix Operations Hub uses artificial intelligence to assist with business operations, AI-generated recommendations or proposed actions may be reviewed by authorized personnel before external publishing or other significant actions occur.

Access Tokens and Credentials

Authentication credentials, access tokens, refresh tokens, API credentials, and similar authorization information are intended to be used only for maintaining authorized connections to the applicable platform.

Phoenix Crafted does not sell access tokens, credentials, or connected-platform authorization information.

We use reasonable safeguards designed to restrict access to credentials and tokens and to prevent them from being unnecessarily exposed through client-side interfaces, public content, or routine application logs.

Publishing and External Actions

Where permitted by a connected platform and authorized by Phoenix Crafted, the Phoenix Operations Hub may prepare, schedule, upload, publish, update, or otherwise manage business content.

Some platforms may require additional confirmation, approval, or completion of a publishing action within the third-party platform itself.

Phoenix Crafted does not use the Phoenix Operations Hub to bypass platform restrictions, permissions, rate limits, review requirements, or other technical or policy controls.

Disconnecting a Connected Account

An authorized user may disconnect or revoke a third-party platform connection through the applicable provider or through Phoenix Crafted tools where such functionality is available.

After disconnection:

  • The Phoenix Operations Hub will no longer use the revoked authorization to request new information from that platform;

  • Publishing or other connected functions associated with that authorization may stop working;

  • Access or refresh tokens may be revoked, deleted, expired, or rendered unusable; and

  • Certain historical records may remain where reasonably necessary for security, audit, legal, accounting, dispute-resolution, or legitimate operational purposes.

You may also contact Phoenix@Phoenix-Crafted.com with questions regarding a connected account or request removal of eligible connected-platform data.

Third-Party Platform Rules

Connected platforms operate under their own terms, privacy policies, developer requirements, permissions, and technical restrictions.

Use of a connected platform through the Phoenix Operations Hub does not replace or modify the terms or privacy practices of that third-party provider.

8. Marketing Communications

When you separately choose to subscribe to Phoenix Crafted marketing communications, we may send promotional communications by email and, where you expressly opt in, by SMS or text message.

Marketing communications may include information about products, new releases, restocks, promotions, special offers, events, early access opportunities, fragrance education, and Phoenix Crafted news.

Email Marketing

If you subscribe to Phoenix Crafted marketing emails, Phoenix Crafted may send marketing email through the Phoenix Operations Hub using Amazon Simple Email Service (Amazon SES) and related Amazon Web Services infrastructure.

You may unsubscribe from marketing emails at any time by selecting the unsubscribe link included in a marketing email or by using another unsubscribe method made available in the communication.

SMS and Text Message Marketing

Phoenix Crafted offers an optional SMS marketing program.

If you separately provide your mobile telephone number and affirmatively consent to receive marketing text messages, Phoenix Crafted may send recurring promotional SMS or text messages to that number.

Messages may include product launches, restocks, promotions, special offers, early access opportunities, and other Phoenix Crafted marketing communications.

Message frequency varies. Message and data rates may apply.

Consent to receive marketing text messages is not a condition of purchasing any product or service from Phoenix Crafted.

You may opt out of marketing text messages at any time by replying STOP to a Phoenix Crafted marketing message. After an opt-out request is processed, you will no longer receive marketing SMS messages at that number unless you later provide a new valid opt-in.

For assistance with the SMS program, reply HELP to a Phoenix Crafted text message.

Phoenix Crafted may send a final confirmation message acknowledging an SMS opt-out request.

Mobile Information and SMS Consent Data

Phoenix Crafted does not sell, rent, or share mobile telephone numbers, SMS opt-in information, or SMS consent records with third parties or affiliates for their own marketing or promotional purposes.

Mobile information and SMS opt-in data may be disclosed to service providers that perform services on Phoenix Crafted's behalf, including communications, messaging, telecommunications, hosting, security, cloud-infrastructure, or technical-service providers, only as reasonably necessary to operate and support Phoenix Crafted's messaging program.

Mobile opt-in information will not be shared with unrelated third parties or affiliates for their independent SMS marketing programs.

Transactional Communications

Unsubscribing from marketing communications does not prevent us from sending transactional, service-related, or legally required communications where permitted, such as order confirmations, shipping updates, safety notices, account notices, responses to your inquiries, or other communications necessary to provide a requested service.

9. Cookies and Similar Technologies

We and our partners may use cookies, pixels, tags, local storage, and similar technologies.

These technologies may be used for:

  • Essential functions: Cart operation, checkout, login, security, fraud prevention, and website functionality.

  • Preferences: Remembering settings and improving your browsing experience.

  • Analytics: Understanding traffic, visitor activity, and website performance.

  • Marketing and advertising: Measuring campaigns, personalizing advertisements, creating audiences, and understanding interactions across websites or services.

Where required, nonessential technologies are used only after you provide consent. You may adjust available choices through our cookie banner or privacy settings.

You may also manage cookies through your browser. Blocking essential cookies may prevent portions of the website, cart, account, or checkout from functioning properly.

Third-party pixels or integrations may require separate controls beyond Shopify’s native cookie tools. We take reasonable steps to configure third-party tools consistently with applicable consent requirements.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including:

  • Completing and supporting transactions;

  • Maintaining business and customer-service records;

  • Maintaining authorized integrations;

  • Maintaining security and audit records;

  • Complying with tax, accounting, and legal obligations;

  • Preventing fraud and abuse;

  • Resolving disputes; and

  • Enforcing agreements.

Order and transaction records may generally be retained for up to seven years or longer when required by law, an active dispute, chargeback, investigation, or legal hold.

Connected-platform information is retained only for as long as reasonably necessary for the business purpose for which it was obtained, subject to applicable platform requirements, contractual obligations, legal requirements, security needs, and legitimate audit requirements.

Authentication credentials and tokens may be deleted, revoked, replaced, or allowed to expire when they are no longer required for an authorized connection.

Retention periods may vary based on the type of information, the reason it was collected, and applicable requirements. When information is no longer required, we may delete, anonymize, or securely dispose of it.

11. Data Security

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information and connected-platform information.

These measures may include:

  • HTTPS encryption;

  • Payment processing through PCI-compliant providers;

  • Account and access controls;

  • Authentication and authorization controls;

  • Restricted access to API credentials and access tokens;

  • Server-side storage of sensitive integration credentials where appropriate;

  • Limited business access to customer and connected-platform information;

  • Security and audit logging;

  • Platform and software security updates; and

  • Fraud-monitoring and security tools.

No internet transmission, electronic storage system, API connection, or security measure can be guaranteed to be completely secure.

Please contact us promptly if you believe your information, account, or an authorized Phoenix Crafted connection may have been compromised.

12. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • Request access to personal information we maintain about you;

  • Request correction of inaccurate personal information;

  • Request deletion of personal information;

  • Receive a portable copy of certain information;

  • Restrict or object to certain processing;

  • Withdraw consent;

  • Opt out of targeted advertising or certain sales or sharing;

  • Appeal a decision concerning a privacy request where applicable; and

  • Receive information about categories of personal information collected, used, or disclosed.

To submit a request, email Phoenix@Phoenix-Crafted.com with the subject line Privacy Request.

Please include enough information for us to understand and process the request. We may need to verify your identity before completing it.

Authorized agents may submit requests where permitted, but we may require proof of authorization and identity verification.

If your request concerns information received through a connected social-media or business platform, please identify the relevant platform and account where reasonably possible.

We will respond within the period required by applicable law.

We will not unlawfully discriminate against you for exercising a privacy right.

13. United States State Privacy Rights

Residents of California and certain other states may have additional rights under applicable state privacy laws, including rights relating to access, correction, deletion, portability, targeted advertising, and certain sales or sharing of personal information.

California residents may also have the right to request:

  • The categories of personal information collected;

  • The categories of sources from which it was collected;

  • The purposes for collecting, using, selling, or sharing it;

  • The categories of third parties to whom it was disclosed; and

  • Specific pieces of personal information maintained about them.

Phoenix Crafted does not offer financial incentives in exchange for personal information unless a separate legally required notice is provided.

State privacy laws contain eligibility thresholds and exceptions, so not every right or law applies to every individual or business.

14. European Economic Area, United Kingdom, and Switzerland

Individuals in the European Economic Area, United Kingdom, and Switzerland may have rights to access, rectify, erase, restrict, object to processing, receive portable data, and withdraw consent.

You may also lodge a complaint with the data-protection authority in the country or region where you live or work.

When we rely on legitimate interests, you may request information about the applicable interests and object to the processing as permitted by law.

15. International Data Transfers

Phoenix Crafted operates from the United States.

Shopify, social-media platforms, cloud providers, and other service providers may process information in the United States, Canada, or other countries where they or their subprocessors operate.

Those countries may have privacy laws that differ from those where you live.

Where required, transfers are supported by legally recognized safeguards, contractual protections, adequacy decisions, or another permitted transfer mechanism.

Using the website or authorizing a connected service does not, by itself, constitute consent to an international transfer where applicable law requires a different transfer safeguard.

16. Children’s Privacy

Phoenix Crafted’s website and products are intended for a general audience and are not directed to children under 13.

We do not knowingly collect personal information directly from children under 13.

The Phoenix Operations Hub is an internal business system and is not intended for use by children.

If you believe a child has provided personal information to us, contact Phoenix@Phoenix-Crafted.com so we can investigate and take appropriate action.

17. Third-Party Websites and Services

Our website and business systems may contain links to or integrations with social-media platforms, ecommerce platforms, payment services, advertising providers, analytics providers, articles, partner websites, or other third-party services.

Phoenix Crafted does not control and is not responsible for the privacy, security, content, availability, or independent practices of third parties.

Review their privacy notices, terms, and authorization screens before providing information or granting access.

Revoking access through a third-party provider may be necessary to fully terminate an authorization granted directly through that provider.

18. Changes to This Privacy Policy

We may revise this Privacy Policy periodically to reflect changes in our practices, services, connected platforms, technology, or legal obligations.

The updated version will be posted on this page with a revised Last Updated date.

When appropriate or legally required, we may provide additional notice by email, through the website, or through another appropriate method.

19. Contact Us

For privacy questions, concerns, or requests:

Phoenix Crafted
Email: Phoenix@Phoenix-Crafted.com
Phone: (336) 501-4286
Contact Form: phoenix-crafted.com/pages/contact-phoenix-crafted-for-custom-orders-gifts-questions

Main Business and Mailing Address

Phoenix Crafted
4616 Beth Rd.
Greensboro, NC 27406
United States

This is Phoenix Crafted’s primary business and mailing address and is not the public storefront.

Physical Storefront

Phoenix Crafted
535 Nelson St. #28
Kernersville, NC 27284
United States

The Kernersville location is Phoenix Crafted’s public physical storefront. Visits, pickups, and in-person services are subject to posted business hours and any applicable instructions.