Notice at Collection

Last updated: 16 September 2026

This is a short summary of the personal information Aromha, Inc. collects and why, provided at the point of collection as California law requires. The full detail is in our Privacy Policy.

What we collect, and why

CategoryExamplesWhy we collect itHow long we keep it
Identifiersname, email, phone, shipping and billing addressto sell you the test, ship it, and support youseven years after your last order, then deleted or de-identified
Commercial informationyour order and purchase historyto process and support your purchasesame
Sensitive personal information, healthyour ABHT responses and the result the test producesto deliver the test and return your result to you, and to improve the test internallyas long as you may want to retrieve it, plus the same period
Internet or network activityIP address, browser type, standard web-server logsto serve the site and protect it from abuseshort operational retention by our hosting provider
Payment informationhandled by our payment processor; we never see or store your full card numberto complete your purchaseheld by the processor under its own terms

Where it comes from. Directly from you, automatically from your device when you visit, and from the service providers listed in the Privacy Policy.

This site sets no cookies and runs no analytics or advertising technology. The internet-activity row above is ordinary web-server information, not tracking.

Do we sell or share your personal information?

No. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not sell identifiable health data. We have not done either in the last twelve months.

We may create de-identified data, which is no longer personal information. We will not release de-identified data outside Aromha until it has cleared a qualified expert determination under the HIPAA de-identification rule, and we have not completed that yet.

Your rights

You may ask us to tell you what we hold about you, correct it, delete it, or give you a portable copy. You may withdraw a consent you have given. You may appeal if we say no. We will not treat you differently for exercising any of these rights.

To exercise a right, write to support@aromha.com. There is no account to sign into; Aromha does not currently offer user accounts.

A note on the sensitive-information right. California lets you ask a business to limit its use of sensitive personal information. We use your health information only to deliver the test you asked for and to improve the test internally. We do not use it for advertising and we do not use it to infer characteristics about you. So there is little for that right to restrict here, but you are welcome to exercise it and we will confirm what we do.

Contact

Aromha, Inc. 10008 Hemswell Lane, Potomac, MD 20854 support@aromha.com