​

Privacy Policy for [Mallow & Moo Candles] (UK)

Last updated: [03/07/26]

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, purchase our products, or interact with us. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

[Mallow & Moo Candles} Registered in the United Kingdom

Email: [info@mallowandmoocandles.co.uk]

Address:  [Aspull. WN2]

We are the “data controller” responsible for your personal information.

2. Information We Collect

We may collect the following types of personal data:

• Identity Data: name, username, account details

• Contact Data: email address, phone number, billing/shipping address

• Transaction Data: purchase history, payment details (processed securely by third‑party payment providers)

• Technical Data: IP address, browser type, device information, cookies

• Usage Data: pages visited, time spent on site, interactions

• Marketing Data: your preferences for receiving marketing communications

3. How We Use Your Information

We use your personal data to:

• Process and deliver your orders

• Manage payments and prevent fraud

• Provide customer support

• Improve our website and product offerings

• Send marketing emails (only with your consent)

• Comply with legal obligations

4. Legal Bases for Processing

We process your data under the following lawful bases:

• Contract: to fulfil your order

• Consent: for marketing communications

• Legitimate Interests: improving our services and website

• Legal Obligation: record‑keeping, tax compliance

5. Sharing Your Information

We only share your data with trusted third parties when necessary:

• Payment processors (e.g., Stripe, PayPal)

• Delivery partners (e.g., Royal Mail, courier services)

• Website hosting and analytics providers

• Professional advisers (e.g., accountants)

We never sell your personal information.

6. International Transfers

If any third‑party service providers store data outside the UK, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place.

7. Data Security

We use technical and organisational measures to protect your data, including:

• Encrypted payment processing

• Secure servers

• Access controls

• Regular security reviews

8. Data Retention

We keep your personal data only as long as necessary:

• Order records: 6 years (legal requirement)

• Marketing data: until you withdraw consent

• Website analytics: typically 12–24 months

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion

• Restrict processing

• Object to processing

• Withdraw consent

• Request data portability

To exercise your rights, contact us at [your email].

10. Cookies

We use cookies to improve your browsing experience. You can manage or disable cookies through your browser settings. See our Cookie Policy for more details (optional).

11. Marketing Communications

You will only receive marketing emails if you opt in. You can unsubscribe at any time using the link in our emails.

12. Changes to This Policy

We may update this Privacy Policy occasionally. The latest version will always be available on our website.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact:

[Mallow and Moo Candles] Email: [info@mallowandmoocandles.co.uk] 

​

 

​