Privacy Policy

 1. Who we are

Data controller: [Justin Quinn]
Trading name: Your Scent

Registered office: 31 Colwyn Close Callands Warrington Cheshire WA5 9SL
Email: greatscentdealzuk@gmail.com
Phone: 01925 418100

We do not have a Data Protection Officer. For privacy questions, use the email above.

2. What personal information we collect
Depending on how you use the site, we may collect:Identity and contact details
Name, billing address, delivery address, email address, phone number.Order and payment details
Items ordered, order history, delivery notes, payment status. We do not store full card numbers. Payments are handled by our payment provider(s): [Stripe / PayPal / Shopify Payments / other].Account details (only if you create an account)
Login email, password (stored in hashed form by the platform), saved addresses, order history, marketing preferences.Customer service information
Messages you send us by email, contact form, or social media, and any notes needed to deal with your query or a return.Website and device information
IP address, browser type, device type, pages viewed, referring site, and similar technical data. This may come from cookies or similar technologies (see section 9).Marketing information
Whether you have opted in or out of emails, and how you interact with our emails (opens/clicks), if we use an email platform.We do not intentionally collect special category data (for example health data). If you tell us about an allergy or sensitivity so we can help with a product query, we will only use that information for that purpose.We do not sell to children. Our site is intended for people aged 18 and over. We do not knowingly collect children’s personal data.

3. How we collect it
Directly from you when you place an order, create an account, contact us, or sign up to emails
Automatically when you browse the site (cookies, logs, analytics — if used)
From payment, delivery and website providers acting on our instructions
From public sources only where needed (for example to confirm a delivery address or prevent fraud)

4. Why we use your information and our lawful bases

Legitimate interests, where used, are: running and protecting a small UK online shop, fulfilling orders safely, preventing fraud, and telling existing customers about similar products. You can object to processing based on legitimate interests (see section 8).We will not use your data for a new, incompatible purpose without telling you, and getting consent where the law requires it.

5. Who we share data with
We do not sell your personal data.We share only what is needed with trusted providers who help us run the shop:
Website / shop platform: [Shopify / WooCommerce / Squarespace / other]
Payment providers: [Stripe / PayPal / Klarna / other]
Delivery partners: [Royal Mail / Evri / DPD / ParcelForce / other] — name, address, phone and order details so they can deliver in the UK/NI
Email / customer service tools: [e.g. Mailchimp, Klaviyo, Gorgias — or “none beyond our email inbox”]
Accountants, professional advisers and insurers where necessary
HMRC, police or other authorities if the law requires it
A buyer of the business, if we sell or restructure the business (they would have to use the data as this notice describes)
All processors should only use your data on our instructions and under a written contract.

6. Transfers outside the UK
Some providers (for example certain shop platforms, payment or email tools) may process data in the USA or other countries.Where that happens, we rely on a UK-lawful transfer mechanism, such as:
a UK adequacy regulation, or
the UK International Data Transfer Agreement / Addendum and/or EU Standard Contractual Clauses, plus extra checks where needed.
If you want more detail about a specific provider, email us.

7. How long we keep information
We keep data only as long as needed for the purpose, then delete or anonymise it.Typical periods:
Orders, invoices and tax records: 6 years after the end of the tax year (legal/accounting requirement; many shops keep 7 years to be safe)
Delivery details: for the life of the order plus a short period for lost-parcel queries
Customer accounts: while the account is active, then deleted or anonymised on request unless we must keep records
Customer service emails: usually up to 2 years after the last contact, unless needed for a dispute
Marketing list: until you unsubscribe, withdraw consent, or the list becomes inactive
Cookie / analytics data: according to each cookie’s lifetime (see cookie notice)
If there is a dispute, chargeback or legal claim, we may keep relevant records until that is resolved.

8. Your rights
You have the right to:
access your personal data
correct inaccurate or incomplete data
erase data in certain cases
restrict how we use it
object to processing based on legitimate interests, and to direct marketing (we will always stop marketing if you object)
data portability for data you gave us and that we process by contract or consent
withdraw consent at any time, where consent is the basis (this does not affect earlier lawful use)
To use these rights, email [privacy contact]. We will reply without undue delay and within one month (we can extend this in complex cases, and will tell you if so). We may need to verify your identity.Some rights are limited. For example, we cannot delete invoices we must keep for HMRC.

9. Cookies and similar technologies
We use cookies and similar tools as follows.Strictly necessary
Needed for the site and checkout to work (basket, login, security, payment). These do not need consent.Analytics / statistics
If we only use analytics for aggregated statistics to improve the site, UK PECR (as updated in 2026) may allow this without consent, provided we explain it clearly and offer a simple free way to object. We will still describe those tools here. Non-essential / marketing cookies
Advertising, extra tracking, or analytics that identify you personally need consent before they are set. You can accept or reject these in the cookie banner. Rejecting them will not stop you buying from the site.[List your actual cookies / tools here, e.g. Shopify session cookies, Google Analytics, Meta Pixel — or state “We only use essential cookies.”]You can also control cookies in your browser settings.

10. Direct marketing
If you buy from us, we may email you about similar fragrance products and offers, as long as we gave you a chance to opt out when you ordered and we include an unsubscribe link in every email (PECR soft opt-in).
If you have not bought from us, we will only email you if you have opted in.
You can unsubscribe at any time via the link in the email or by contacting us.
We will not pass your details to other companies for their marketing.

11. How we keep data secure
We use appropriate technical and organisational measures, including:
HTTPS on the website
payment handled by PCI-compliant providers
access to customer data limited to people who need it
reputable hosting and shop software
No online transmission is completely secure, but we take reasonable steps to protect your information.

12. How to complain
If you are unhappy with how we have used your personal data, please contact us first at greatscentdealzuk@gmail.com

.From June 2026, UK law requires us to have a data-protection complaints process. We will acknowledge a data-protection complaint within 30 days and investigate and respond without undue delay.

If you are still unhappy, you can complain to the ICO:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF Helpline: 0303 123 1113
https://www.ico.org.uk/make-a-complaint

13. Changes to this notice
We may update this notice if our practices or the law change. The “last updated” date will change. The current version will always be on this page.