This Privacy Policy describes how SERGIO G Candles (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from https://sergiogcandles.co.uk/ (the “Site”) or otherwise communicate with us regarding the Site (collectively, the “Services”). For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected in accordance with this Privacy Policy. 

Please read this Privacy Policy carefully. 

Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, legal requirements, or operational reasons. We will post the updated Privacy Policy on the Site and update the “Last updated” date where required under applicable law. 

How We Collect and Use Your Personal Information
To provide the Services, we collect personal information from various sources. The type of information we collect depends on how you interact with us. 

We use personal information to communicate with you, provide and improve our Services, comply with legal obligations, enforce our terms, and protect our business, customers, and rights. 

What Personal Information We Collect
“Personal information” means any information that identifies or relates to an identifiable individual. This includes: 

Information We Collect Directly from You 

  • Contact details such as name, billing address, shipping address, phone number, and email address 
  • Order and transaction details 
  • Account credentials and security information 
  • Customer support communications 

Providing some information is necessary to access certain features of the Services. If you choose not to provide it, some Services may be unavailable. 

Information We Collect Automatically
We automatically collect information about your interaction with the Site (“Usage Data”), including IP address, browser type, device information, and browsing behaviour, using cookies and similar technologies. 

Information We Receive from Third Parties
We may receive information from third-party service providers, including: 

  • Shopify and related ecommerce service providers 
  • Payment processors who handle transactions securely 
  • Analytics and marketing partners 

All third-party data is processed in line with this Privacy Policy. 

Lawful Bases for Processing (UK GDPR)
Under the UK GDPR, we process your personal information based on one or more of the following lawful bases: 

  • Contractual necessity – to process orders and provide Services 
  • Legal obligation – to comply with tax, accounting, and regulatory requirements 
  • Legitimate interests – to operate, improve, and secure our business 
  • Consent – where required for marketing communications 

How We Use Your Personal Information 

Providing Products and Services
To process payments, fulfil orders, manage accounts, arrange shipping, handle returns, and provide customer support. 

Marketing and Communications
To send promotional communications where permitted by law. You may opt out at any time. 

Security and Fraud Prevention
To protect our Site, prevent fraud, and maintain system security. 

Service Improvement
To analyse usage and improve functionality, performance, and customer experience. 

Cookies
We use cookies to operate and improve our Site. You can manage cookie preferences through your browser settings. Blocking cookies may affect Site functionality. 

How We Share Personal Information
We may share personal information with: 

  • Service providers (payment processors, hosting, analytics, shipping partners) 
  • Marketing and advertising partners 
  • Legal or regulatory authorities where required by law 
  • Business partners in the event of a merger, acquisition, or sale 

We do not sell your personal data. 

International Data Transfers
Your personal data may be transferred outside the UK. Where this occurs, we rely on appropriate safeguards such as UK-approved Standard Contractual Clauses or adequacy regulations. 

Data Retention
We retain personal data only as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting obligations. 

Your Rights Under UK GDPR
You have the right to: 

  • Access your personal data 
  • Request correction of inaccurate data 
  • Request erasure of your data 
  • Restrict processing 
  • Object to processing 
  • Data portability 
  • Withdraw consent at any time 
  • Lodge a complaint with the Information Commissioner’s Office (ICO) 

ICO website: https://ico.org.uk/ 

Children’s Data
Our Services are not intended for children under 16, and we do not knowingly collect personal data from children. 

Security
While we take appropriate technical and organisational measures to protect your data, no system is completely secure. 

Third-Party Links
We are not responsible for the privacy practices or content of third-party websites linked from our Site. 

Contact
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at: 

Email: [email protected] 

For the purposes of UK data protection laws, SERGIO G Candles is the data controller of your personal information