This is the privacy notice of Botanical and Bloom Candle Co. In this document, "we", "our", or "us" refers to Botanical and Bloom Candle Co.

1.     Introduction

1.1  This Privacy Notice outlines how the Botanical and Bloom Candle Co. will process and use any personal information about our website visitors that we collect from them and they provide to us. In this document, "we", "our", or "us" refers to Botanical and Bloom Candle Co. ‘website’ refers to Botanical and Bloom Candle Co. website at www.botanicalandbloomcandleco.co.uk.

1.2  At the Botanical and Bloom Candle Co. we are committed to respecting and protecting your privacy. We are committed to keeping your information safe and our use of your data to be secure. We have strict procedures on how personal information is used and stored, we also limit who sees it and to prevent an unauthorised person getting hold of it. 

2      Contact details and Identity

2.1  We have a legal duty to protect personal information that we collect under the General Data Protection Regulation (EU) 2016/679, (the ‘GDPR’) which came in force 25 May 2018.

2.2  For the purposes of GDPR, we control personal data collected through this website. Any questions, comments, concerns, complaints or requests regarding this Privacy Policy, our Website and/or use of your personal data should addressed to hello@theartisancareco.co.uk.

3      Personal Data We Collect from You

3.1  We may collect and use various types of personal information about visitors to our Website, details of which are outlined below: 

a)    When you enquire about our products through our website, buy from our online shop or register to our mailing list, we will collect your name, address and/or relevant contact details so we can provide you with information about the product you have requested, or send you mail. 

b)    We may collect and use certain technical information about you and your visit when you visit our Website (for further details see Cookie Notice).

4      Bases for Processing Your Data

4.1  We collect and use Website Visitors’ personal information on the following bases: 

a)    Your consent – you as a customer or potential customer have consented to processing your personal data. This will have been asking you to receive a newsletter by providing your email. You can choose to opt out of receiving this at any time you wish to do so, by clicking unsubscribe on every email.

b)    Our legitimate interests – We may process your personal data to provide you with information about our products and offers that you may be interested in. This does not affect your rights to withdraw your consent to us sending you this information, and this can be done by unsubscribing using the link send in every email.

c)     Our contract with you – if you have enquired about our products or purchased a product, then processing your personal data, provided when you originally enquired or purchased through our Website, is necessary to fulfil our contract with you.

d)    Our legal obligation – We will process personal data to fulfil legal obligations when Botanical and Bloom Candle Co. have been requested to do so. This may be with the UK authorities for example the Government, Police or other authorities.

5      Sensitive Personal Information

5.1  We do not collect sensitive personal information through our Website.

6      How We Use Personal Data

6.1  We use your personal data to provide information you have requested, to enter contacts with you, and to provide a good experience of our Website. Without this information, we may not be able to correspond with you, send you products you have ordered or send you e-mails to provide you with information on products that you have requested.

6.2  We collect and use personal information about our Website Visitors for the following reasons:

a)    Providing the product or information that you request and carrying out our obligations under any contracts that we enter with you.

b)    Providing information about other products we offer that are similar to those you have enquired about or already purchased. 

c)     Responding to any enquires from you, corresponding with you and recording any communications. 

d)    Providing information about changes to our service

e)    Upholding your right to have your data erased. 

6.3  We do not share, sell or disclose our Website Visitors personal data with third parties for marketing information. We do share information with third parties who carry out tasks on our behalf such as sending emails, quotes or delivering your orders to you. These third parties are:

a)    Squarespace – a Content Management System and Royal Mail – delivery service provider.

7      Where We Transfer and Store Personal Information 

7.1  When we share data, it may be transferred to, and processed in other countries. This is due to some of our software provider’s servers may be located abroad such as in the United States. We have protective measures in place to ensure your personal data is protected if your data does travel to another country. 

7.2  Where your personal data is transferred outside the European Economic Area (EEA), it will only be transferred to countries that are recognised under EU Data Protection Law as providing adequate protection for EEA data. Only recognised lawful data transfer mechanisms and approved Privacy Shield Frameworks will be used to transfer your data. 

8      Retaining Personal Information

8.1  We keep personal information for appropriate periods of time only. 

8.2  If you are a customer of our business we will retain the information you provide through the Website only for as long as necessary to complete our contractual commitments to you. We may be required to keep this information beyond this for required record purposes (usually six years). We will keep data used for marketing to you unless you unsubscribe. 

9      Your Rights

9.1  You have rights in respect of the information we hold about you, these have been outlined below. To exercise any of these rights, please contact us via email at hello@theartisancareco.com. 

9.2  We will process personal data in rights with your rights, to the extent required by and in accordance with applicable law (including applicable time limits and any requirements regarding fees and charges). We respect your personal information rights in respect of:

a)    Right to erasure – At your request we will erase your personal information without delay.

b)    Right to restrict processing – We will restrict processing your personal information (in certain circumstances).

c)     Right of access – If requested we will confirm whether or not we are processing and using personal information about you. If we are will provide you with a record of personal information and any other details you are entitled to. 

d)    Right to rectification – We will correct any inaccurate personal data and complete any incomplete data that we hold about you.

e)    Prevention of processing likely to cause damage or distress - We respect your rights under GDPR to require is to cease or not to begin processing your personal information in a specific way or for a specific purpose, that is likely to cause you or any third parties distress or unwarranted damage. 

10   Cookies

10.1        Our website uses ‘cookies’ and other tracking technologies, which if you agree (when you visit our Website), are placed and stored on your computer hardware drive or in your browser memory.

10.2        We use information gathered for security purposes and site management, and for the following reasons listed below: 

a)    Managing our Website and ensuring it is safe and secure 

b)    Administrating our Website and for internal operations such as data analysis, research, testing, statistics, survey and troubleshooting. 

c)     Provide you with the best experience when using our Website. This includes allowing you to navigate and use key features.

11   Changes to Our Privacy Notice  

11.1        We reserve the right to change this Privacy Notice from time to time. You should check back frequently to see any changes and/or updates.