Privacy Policy
Last Updated:
1. Introduction
Candlearomaglow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at candlearomaglow.world or use our services. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
Candlearomaglow is the data controller responsible for your personal data. Our contact details are:
- Address: 1 Rochdale Rd, Shaw, Oldham OL2 8AD, United Kingdom
- Phone: +44 1706 299612
- Email: bloom@candlearomaglow.world
3. Information We Collect
We may collect and process the following types of personal data:
- Identity Data: Name, title, date of birth
- Contact Data: Billing address, delivery address, email address, telephone numbers
- Financial Data: Payment card details (processed securely through payment providers)
- Transaction Data: Details about payments and products/services you have purchased
- Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system
- Usage Data: Information about how you use our website
- Marketing Data: Your preferences in receiving marketing from us
4. How We Collect Your Data
We collect personal data through:
- Direct interactions: When you place orders, create accounts, subscribe to newsletters, or contact us
- Automated technologies: Cookies and similar technologies when you interact with our website
- Third parties: Payment processors, delivery services, and analytics providers
5. How We Use Your Data
We use your personal data for the following purposes:
- To process and deliver your orders
- To manage payments, fees, and charges
- To communicate with you about your orders and enquiries
- To send you marketing communications (with your consent)
- To improve our website and services
- To comply with legal obligations
- To detect and prevent fraud
6. Legal Basis for Processing
We process your personal data under the following legal bases:
- Performance of Contract: To fulfil orders and provide services
- Legitimate Interests: To improve our services and prevent fraud
- Consent: For marketing communications
- Legal Obligation: To comply with applicable laws
7. Data Sharing
We may share your personal data with:
- Payment processors to process payments
- Delivery companies to deliver your orders
- Service providers who assist us in operating our business
- Legal authorities when required by law
We do not sell your personal data to third parties.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Typically:
- Order data: 7 years (for accounting and tax purposes)
- Marketing data: Until you withdraw consent or unsubscribe
- Website analytics: 26 months
9. Your Rights
Under UK GDPR, you have the following rights:
- Right of Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Request transfer of your data to another service
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for marketing at any time
To exercise these rights, please contact us using the details provided in Section 2.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure.
11. International Transfers
We primarily store and process your data within the UK and European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place.
12. Cookies
Our website uses cookies to enhance your browsing experience. For detailed information about our use of cookies, please see our Cookies Policy.
13. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
15. Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
16. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: bloom@candlearomaglow.world
- Phone: +44 1706 299612
- Address: 1 Rochdale Rd, Shaw, Oldham OL2 8AD, United Kingdom
