Privacy Policy
This Privacy Policy describes how the SO Candle Company collects, uses and discloses your personal information when you visit our site, use our services or make a purchase from our online store.
​
Changes to This Privacy Policy
There may be changes made to this Privacy Policy over time. These changes may reflect changes to our operating practices relating to your personal information. Whenever a change is made the issue date and review date of the policy shall be updated to reflect this.
What Information We Collect, Use and Why
We collect or use information for a variety of purposes through the provision of our services, exactly what information we collect depends on how you interact with our site and use our services. The following sections outline the specific types of information we collect.
​
Information We Collect Directly from you
-
Contact Details – name, address, phone number and email address.
-
Order Information – name, billing address, shipping address, payment confirmation, email address and phone number.
-
Shopping Information – including the items you view, put in your cart and purchase.
-
Customer Support Information – information you include in communications.
​
Information We Collect about Your Usage
To inform us on the use of our site and our services, we may also automatically collect certain information about your interaction with the services we offer (Usage Data). To enable this, we may use cookies, pixels and similar technologies (Cookies). This Usage Data may include information about how you access and use our site, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with our site.
​
Information We Collect from Third Parties
We may also obtain information about you from third parties, including our service providers who may collect information on our behalf, this includes:
-
Our payment processors;
-
Our Webhosting provider;
Any information we obtain from a third-party source will be treated in accordance with this policy.
How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for contract fulfilment purposes, legitimate purposes and other reasons subject to this Privacy Policy. Such circumstances may include:
-
With vendors who perform a service on our behalf (e.g. IT management, payment processing and shipping).
-
In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the services, our rights, and the rights or our users or others.
Data Protection Rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the ‘UK GDPR’. You can find out more about lawful bases on the ICO’s website also.
​
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
-
Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
-
Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
-
Your right to erasure – You have the right to ask us to delete your personal information.
-
Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information.
-
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
-
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.
​​
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details in this Privacy Policy.
Data Retention
Data retention regulations require that personal data is not kept longer than necessary for its original purpose, adhering to GDPR storage limitation principles. The length of time for data retention for personal information depends on a number of different factors, such as whether we need the information to maintain accounts, provide audit records or other legal obligations.
Children's Data
The services provided by SO Candle Company are not intended for the use of children, and we do not knowingly collect, use or distribute any personal information about children. If you are the parent or legal guardian of a child who has provided us with their personal information, you may contact us using the contact details set out in this policy to request their information be deleted.
Complaints
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the bottom of this privacy notice, or via the contact us page on our website.
​
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
​
The ICO’s address:
​
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
​
Helpline number: 0303 123 1113
Contact
Should you have any questions or concerns about our privacy policy, the retention and use of your personal information or if you would like to exercise any of your legal rights regarding your personal information then please email us at support@socandlecompany.co.uk or contact us via any of the methods on the Contact Us page of our website.