Privacy Policy

Last updated: 23 June 2026

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit this website or buy our products, and sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read it carefully.

1. Who we are (data controller)

This website is owned and operated by CIM RETAIL LTD, which is the “data controller” responsible for your personal data.

Company number: 10359798
Registered office address: 39 Saxlingham Road, London, England, E4 6LF
Email: info@myscent-candles.com

2. The personal data we collect

We may collect and process the following categories of personal data:

  • Identity and contact data — your name, billing and delivery address, email address and telephone number.
  • Order and transaction data — details of the products you buy, order value, personalisation/customisation details you provide, and records of your purchases.
  • Payment data — payment is processed by our payment providers; we do not store full card details. We receive confirmation of payment and limited transaction information.
  • Account data — if you create an account, your username and password (stored securely) and order history.
  • Communications data — messages and correspondence you send us (for example customer-service enquiries).
  • Technical and usage data — IP address, browser type and version, device information, time zone setting, and information about how you use our website, collected through cookies and similar technologies.
  • Marketing and consent data — your preferences in receiving marketing from us and your consent choices.

3. How we collect your data

  • Directly from you — when you place an order, create an account, contact us, or sign up for marketing.
  • Automatically — through cookies and similar technologies when you use our website (see our Cookie Policy).
  • From third parties — for example our payment processors and fraud-prevention services confirm payment and verification details.

4. How we use your data and our lawful bases

Under UK GDPR we must have a lawful basis for processing your personal data. We rely on the following:

  • Performance of a contract — to process and deliver your orders, take payment, provide customer support, and manage returns and refunds.
  • Legal obligation — to keep records for tax, accounting and consumer-law purposes and to respond to lawful requests from authorities.
  • Legitimate interests — to operate and improve our website and business, prevent fraud, ensure security, and respond to your enquiries, provided your rights do not override these interests.
  • Consent — to send you marketing communications (where required) and to set non-essential cookies. You can withdraw your consent at any time.

5. Cookies

We use cookies and similar technologies to operate our website, remember your preferences, analyse usage and (with your consent) for marketing. You can manage your preferences at any time through our cookie banner. For full details, please see our Cookie Policy.

6. Who we share your data with

We do not sell your personal data. We share it only with trusted parties who help us run our business, including:

  • Payment providers (such as Stripe and WooCommerce Payments) to process payments securely;
  • Delivery and fulfilment partners to deliver your orders;
  • IT, hosting and website service providers who host and maintain our website and tools;
  • Analytics and marketing providers (where you have consented);
  • Professional advisers such as accountants and legal advisers; and
  • Government bodies, regulators or law enforcement where we are legally required to do so.

All processors are required to keep your data secure and to use it only for the purposes we specify.

7. International transfers

Some of our service providers may be based outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure it is protected by appropriate safeguards, such as an adequacy decision (UK “adequacy regulations”) or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

8. How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out in this policy. Order and transaction records are generally retained for up to 6 years after the end of the relevant financial year to meet our legal and tax obligations. Account and marketing data are kept until you close your account or withdraw your consent, after which we will delete or anonymise it.

9. How we keep your data secure

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, including secure (SSL/TLS) connections and access controls. While we take all reasonable steps to protect your data, no transmission over the internet can be guaranteed to be completely secure.

10. Your rights

Under UK data protection law you have the following rights in relation to your personal data:

  • The right to be informed about how we use your data;
  • The right of access to a copy of the data we hold about you;
  • The right to rectification of inaccurate or incomplete data;
  • The right to erasure (“right to be forgotten”) in certain circumstances;
  • The right to restrict processing in certain circumstances;
  • The right to data portability;
  • The right to object to processing based on legitimate interests or for direct marketing;
  • Rights relating to automated decision-making and profiling — we do not carry out automated decision-making that produces legal or similarly significant effects on you; and
  • The right to withdraw consent at any time where we rely on consent.

To exercise any of these rights, please contact us at info@myscent-candles.com. We will respond within one month. There is normally no charge.

11. Marketing

Where you have consented, we may send you marketing communications about our products and offers. You can opt out at any time by using the “unsubscribe” link in our emails or by contacting us. Opting out of marketing will not affect the processing of your data needed to fulfil your orders.

12. Children’s privacy

Our website and products are intended for adults. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Complaints

If you have any concerns about how we handle your personal data, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: https://ico.org.uk/

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Please check back periodically to stay informed.

15. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

CIM RETAIL LTD
39 Saxlingham Road, London, England, E4 6LF
Email: info@myscent-candles.com