Privacy Policy

1. Introduction

This Privacy Policy explains how Candles of Provence (the “Site”) collects, uses and protects your personal data. Your information is processed transparently, securely and in accordance with applicable data protection laws, including the UK GDPR, the Data Protection Act 2018, and where relevant the EU GDPR.

2. Data Controller

Candles of Provence – Khouri
Country: France
SIRET Number: 518 555 602 000 78

For privacy and security reasons, the exact registered address and personal first name of the business owner are not publicly displayed on the Site. These details may be provided upon legitimate written request via our secure contact form or to competent authorities where legally required.

No telephone support is offered. For all questions or requests, please use our contact form only. We usually reply within 24 to 48 working hours.

3. Data We Collect

The following data may be collected when you use the Site:

• Identity data: name, surname (where necessary for order management).
• Contact data: country, billing and/or delivery address where applicable, telephone number (optional). Communication takes place via our secure contact form.
• Order data: purchased products, order totals, references, payment method (no banking data is stored on the Site).
• Delivery data: delivery address where required and parcel tracking details.
• Technical data: IP address, browser type, device type, visited pages and on-site actions (via cookies and analytics tools).
• Visual content: photographs of personalised creations made for customers, which may be shared on our website, blog or social media to showcase our craftsmanship. No face or private personal element is published without explicit consent.

4. How We Use Your Data

• Process orders, payments and deliveries.
• Create and manage your customer account.
• Respond to enquiries and customer support requests.
• Send transactional communications (order updates) and, with consent where required, newsletters or offers.
• Showcase our creations (candles, pouches, personalised gifts).
• Improve website performance, navigation and security.

Follow-up Emails & Review Requests

After an order, Candles of Provence may send an automatic email inviting customers to leave a review about their shopping experience. These are not promotional emails, but service-related feedback requests designed to improve our products and customer experience.

Where required by applicable law, the legal basis for this processing is your consent. Consent may be collected during checkout through a dedicated checkbox. No review request is sent where consent is required and has not been given.

You may withdraw your consent at any time by using the unsubscribe link in the review request email or by contacting us via the contact form.

Data used for these requests (email address, order number, first name and/or initials) is used only for this purpose and is never sold or used for unrelated advertising purposes.

5. Legal Bases for Processing

• Contract performance (purchase, delivery, after-sales support).
• Legitimate interests (site security, showcasing our creations, improving services).
• Legal obligation (accounting, tax records, compliance, evidence retention).
• Consent (marketing emails where required, non-essential cookies, identifiable photos).

6. Use of Customer Order Photos

We may photograph certain personalised creations made for customers (for example candles, pouches or personalised gifts) in order to showcase our work on our website, blog, social media or communication materials.

These photographs relate only to finished products and do not include personal data that directly identifies the customer (such as face or address). If you would like a photo removed, you may contact us at any time via the form below and we will remove the relevant content promptly.

7. Who Receives Your Data

• Payment providers (such as Stripe, PayPal) — banking details do not pass through the Site.
• Delivery providers (for shipping and parcel tracking).
• Technical service providers: hosting, maintenance, analytics tools.
• Competent authorities where legally required.

Your data is never sold, rented or transferred to third parties for unrelated commercial purposes.

8. Data Retention

• Order and invoicing data: up to 5 years (or longer where legally required).
• Inactive customer data: up to 3 years after last contact.
• Cookies: up to 13 months for non-essential analytics cookies.
• Product photos: up to 3 years unless removal is requested earlier.

9. Data Security

We implement appropriate technical and organisational measures, including HTTPS encryption, backups, access controls, data minimisation and periodic reviews where necessary.

10. Your Rights

Subject to applicable law, you may have rights of access, rectification, erasure, objection, restriction, portability and the right to withdraw consent where processing is based on consent.

To exercise your rights or request the removal of a photo, please use our contact form above. We aim to respond within 30 days. You may also lodge a complaint with your local data protection authority where applicable.

11. Cookies

The Site uses cookies necessary for its operation and, subject to your consent where required, analytics or personalisation cookies. You may manage your preferences