Submit a verifiable personal data request.
Exercise statutory data subject access rights, request information disclosures, submit record corrections, or instruct the permanent erasure of personal records held by Aroma Oil Studio.
Statutory privacy rights and scope of data handling
Aroma Oil Studio respects the privacy and individual data autonomy of our patrons, website visitors, and wholesale partners. Under Illinois state law and applicable United States privacy statutes, you possess explicit legal rights regarding the personal information collected, processed, and maintained during your interactions with our catalog. These include the right to know whether personal data is processed, the right to inspect and access specific personal data records, the right to rectify inaccurate contact or shipping profiles, and the right to request the permanent deletion of non-essential records.
Because Aroma Oil Studio operates an inquiry-only specialty catalog without third-party consumer account logins or integrated payment processing gateways, our data collection footprint is limited. We store customer contact records submitted through our workshop inquiry forms, ongoing consultation transcripts from kevo997.php, consent timestamps, and marketing campaign attribution identifiers (such as Google gclid, Microsoft msclkid, or Meta fbclid) retained strictly to evaluate paid advertising performance.
Categories of personal data subject to request
When submitting a verifiable request, you may seek disclosures, corrections, or erasure concerning four defined categories of data maintained in our studio archives:
- Direct Contact Records: Full name, organizational title, delivery or billing address, telephone number, and electronic mail address provided during formulation or pricing inquiries.
- Consultation & Specification Records: Room dimensions, diffuser mechanical types (ultrasonic, rattan reed, heat burner, ceramic stone), botanical oil preferences, and customized dosage calculations recorded during studio consultations.
- Digital Attribution & Consent Metadata: Consent Mode v2 binary records, consent election timestamps, IP connection logs, and platform click identifiers (gclid, msclkid, fbclid) captured via live paid acquisition campaigns.
- Communication Archives: Written correspondence, electronic emails sent to office@aromaoil.click, and real-time consultation messages exchanged with our Chicago formulation desk via kevo997.php.
Identity verification and submission security protocol
To safeguard individual privacy and prevent fraudulent data disclosures or unauthorized deletions, Aroma Oil Studio verifies the identity of each requesting party before releasing or modifying records. Submitting a request through the portal below triggers our two-step authentication protocol:
- Identity Matching: The full name and email address or telephone number submitted in your request are compared against our existing workshop inquiry records and consultation archives.
- Electronic Confirmation: An automated confirmation dispatch is transmitted to the email address or phone number on file. The requesting party must reply to this dispatch within ten calendar days to confirm authentic intent.
- Authorized Agents: If an authorized representative acts on your behalf, they must provide written proof of authorization signed by the data subject alongside verifiable contact credentials.
If we cannot verify your identity to a reasonable degree of commercial certainty, we will notify you within ten business days explaining the documentation required to proceed.
Formal data request intake portal
Complete the fields below to submit your request directly to Irina Petrova at our Chicago studio desk. This form transmits securely to zogu4dd.php under encrypted TLS 1.3 standards.
Statutory exceptions and record retention requirements
Certain categories of records are legally exempt from immediate deletion requests. Under Illinois commercial law and federal tax regulations, Aroma Oil Studio retains specific documentation even when an erasure request is confirmed:
- Tax & Financial Archives: Invoices, wholesale agreements, and shipping manifests are retained for seven years to satisfy Internal Revenue Service (IRS) and Illinois Department of Revenue audit mandates.
- Legal & Regulatory Claims: Correspondence regarding active dispute proceedings, product safety incidents, or formal warranty disputes is preserved until statutory limitation periods expire.
- Security & Fraud Prevention: System firewall connection logs and server audit records are retained for twelve months to protect our digital infrastructure against distributed denial-of-service (DDoS) intrusions and brute-force form exploitation.
When a deletion request is fulfilled, all non-exempt records are purged permanently from our active production database. You will receive written electronic confirmation detailing the exact date and scope of the completed purge.
Direct postal and studio contact channels
If you prefer to submit a written data access request via certified mail or consult in person regarding your privacy records, you may address our Chicago workshop:
