Privacy Policy
Effective Date: 10th November 2024
This Privacy Policy describes how The Oil & Incense Shop (“we,” “our,” or “us”) collects, uses, and protects your personal data when you visit our website [www.oilandincense.com] (the “Website”) or make a purchase through our WooCommerce store. We are committed to protecting your privacy and ensuring that your personal data is handled in a secure and responsible manner in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
By using our Website, you agree to the collection and use of your personal data in accordance with this Privacy Policy. This Privacy Policy is intended to inform you about the data practices and rights associated with your personal information. This policy applies to all visitors, customers, and users of our Website. Please review it regularly to stay informed about how we handle your data.
1. Information We Collect
We may collect the following types of personal information:
- Personal Identification Information: This includes your name, email address, shipping address, billing address, phone number, and payment information (such as credit card details) when you make a purchase on our Website.
- Account Information: If you create an account, we may collect your username, password, and any information you provide in your account profile.
- Transaction Data: We may collect details about the products you purchase, order history, and any other information related to your transactions with us.
- Usage Data: We may collect information about how you interact with our Website, such as IP address, browser type, device information, pages visited, and referral sources.
- Cookies and Tracking Data: We use cookies and similar technologies to collect information about your browsing activity to enhance your experience on our Website. For more information on how we use cookies, see our Cookie Policy.
2. How We Use Your Information
We use your personal data for the following purposes:
- Order Processing: To process and fulfil your orders, including shipping, billing, and customer service.
- Communication: To send you order confirmations, shipping updates, and other important information related to your purchase.
- Customer Support: To provide customer support and respond to your inquiries.
- Marketing Communications (Optional): With your consent, we may send you promotional emails about new products, special offers, or updates to our Website. You can opt-out of marketing emails at any time by clicking the “unsubscribe” link at the bottom of any email.
- Website Improvement: To analyse trends, track user behaviour, and improve our Website functionality and user experience.
- Legal Compliance: To comply with any legal obligations, such as tax reporting, fraud prevention, or resolving disputes.
3. How We Protect Your Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it. These include:
- Using SSL encryption to secure your personal and payment information during transmission.
- Storing payment information securely using trusted third-party payment processors such as PayPal, Stripe, or other PCI-compliant services.
- Regular security audits to ensure our Website is protected from data breaches.
However, no data transmission or storage method can be guaranteed to be 100 percent secure, so while we strive to protect your data, we cannot ensure or warrant its absolute security.
4. Sharing Your Information
We may share your personal data with third parties in the following circumstances:
- Third-Party Service Providers: We may share your information with trusted third-party vendors or service providers who assist us in operating our business, such as payment processors, shipping companies, and email marketing platforms. These third parties are required to protect your data and use it solely for the purposes we specify.
- Dropshipping Suppliers: As a dropshipping business, we may share your shipping and order details with third-party suppliers and manufacturers to fulfil your orders. They will only use this data to process and ship your orders.
- Legal Compliance: We may disclose your personal data if required to do so by law or to protect our rights, property, or the safety of our customers or others.
5. Your Rights Under GDPR
As a resident of the United Kingdom, you have the following rights regarding your personal data:
- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): You may request that we delete your personal data under certain conditions.
- Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain situations.
- Right to Data Portability: You have the right to request a transfer of your personal data to another organisation, if technically feasible.
- Right to Object: You can object to the processing of your personal data for direct marketing purposes or based on legitimate interests.
- Right to Withdraw Consent: If we process your data based on your consent (e.g. for marketing purposes), you can withdraw that consent at any time.
To exercise any of these rights, please contact us using the details below. We aim to respond to all requests within one month.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Website. Cookies are small files stored on your device that help us remember your preferences and track your browsing activity.
For more information on how we use cookies and how you can manage your cookie settings, please refer to our Cookie Policy.
7. International Transfers
We operate in the United Kingdom but may transfer your personal data to third-party service providers or dropshipping suppliers located outside the UK or the European Economic Area (EEA). In such cases, we will take steps to ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
8. Third-Party Links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external websites. We encourage you to read the privacy policies of any third-party websites you visit.
9. Children's Privacy
Our Website is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately, and we will take steps to delete such information.
10. Changes to this Privacy Policy
The Oil & Incense Shop reserves the right to modify this Privacy Policy at any time. We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on our Website and updating the “Last Updated” date above. Continued use of our Website following any updates to this Privacy Policy constitutes acceptance of the modified terms.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: enquiries@oilandincense.com
- Address: The Oil & Incense Shop, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, The United Kingdom
Thank you for visiting The Oil & Incense Shop.