Privacy Notice

This Privacy Notice explains how EARTH CANDLE CO LIMITED ("Earth Candle Co", "we", "us") collects and uses personal data when you visit earthcandlecolimited.top, contact us, or buy our scented soy candles, diffusers and gift sets online. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

EARTH CANDLE CO LIMITED is the data controller for the personal data described in this notice.

2. The data we collect

• Contact data: your name, email address and the content of messages you send us.
• Order data: when you buy from us, your name, delivery and billing address, email address, phone number (if given), the products you order and any gift message. Card payments are processed by our payment providers; we do not store your full card details.
• Technical data: our hosting provider may log your IP address, browser type and the pages you visit, to keep the website secure and working.

3. The contact form on this website

The contact form on our home page is currently for display only. It checks what you type in your browser but does not send or store your details.

4. How and why we use your data

• to process, dispatch and deliver your order, and handle returns and refunds – performance of a contract;
• to reply to your questions about our candles, diffusers and gift sets – legitimate interests;
• to keep accounting and tax records – legal obligation;
• to keep our website and shop secure and prevent fraud – legitimate interests;
• to send you news and offers by email, only if you have opted in – consent, which you can withdraw at any time.

5. Who we share your data with

We do not sell your personal data. We share it only with service providers who help us run our online shop – such as e-commerce and website hosting platforms, payment providers, couriers and postal services, and email providers – and only as far as needed for their service. We may also share data where required by law.

6. International transfers

Some of our service providers may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place as required by UK data protection law.

7. Cookies

This website does not use analytics or advertising cookies. Fonts are loaded from Google Fonts, which means your IP address is shared with Google when the page loads. If we introduce non-essential cookies in future, we will ask for your consent first.

8. How long we keep your data

We keep order and accounting records for as long as UK law requires (generally six years). Messages are kept for as long as needed to deal with your enquiry.

9. Your rights

Under UK GDPR you have the right to access your personal data, have it corrected or erased, restrict or object to its processing, request data portability, and withdraw consent at any time. To exercise these rights, email us at rajasimapolologs@gmail.com or Thomas@earthcandlecolimited.top, or write to our registered address above. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to this notice

We may update this Privacy Notice from time to time. The date at the top of this page shows when it was last changed.