This Privacy Policy explains how [LEGAL BUSINESS NAME], trading as MC Majesty Candles ("we", "us", "our"), handles personal information collected through [WEBSITE URL] and in the course of fulfilling your order.
We are a small business. We collect what we need to send you candles and answer your questions — nothing more — and we don't sell your personal information.
The short version
We collect what an order requires: your name, contact details, delivery address, and what you bought. Payment card numbers are handled by our payment processor and never reach our systems.
We use it to fulfil orders, provide support, and — only if you opt in — send you occasional emails. We do not sell your personal information, and you can ask us to delete it at any time.
The sections below set out the detail. If anything here is unclear, ask us and we'll explain it in plain terms.
Who we are
MC Majesty Candles is operated by [LEGAL BUSINESS NAME], registered in [STATE / COUNTRY], with a business address at [BUSINESS ADDRESS].
We are the controller of the personal information described in this policy. For any privacy question, contact us at [email protected].
Information you give us
This is information you provide directly, usually at checkout or when you contact us.
- Identity
- First and last name, and any business name you supply for a wholesale enquiry.
- Contact
- Email address, phone number, billing address, and delivery address.
- Order
- Items purchased, order value, order number, delivery preferences, and gift messages.
- Account
- Login credentials and saved preferences, if you create an account.
- Correspondence
- The content of messages you send us, including photos submitted for a damage claim.
- Reviews
- Any review, rating, photo, or comment you choose to submit.
You do not have to give us this information, but we cannot process an order or answer a support request without it.
Information collected automatically
When you visit the site, some technical information is collected by default:
- IP address, approximate location derived from it, and time zone.
- Browser type and version, operating system, and device type.
- Pages viewed, products viewed, referring site, and how long you stayed.
- Cookie identifiers and similar technologies, as described in section 08.
We use this to keep the site working properly, to detect fraud and abuse, and to understand in aggregate which products and pages people find useful.
Information from other sources
We may receive limited information about you from the services we rely on to run the business — for example, order and fraud-screening data from our payment processor, delivery status from carriers, and interaction data if you contact us through a social media platform.
We do not buy marketing lists or acquire personal information from data brokers.
How we use your information
- To fulfil your order — taking payment, packing, shipping, and sending confirmations and tracking updates.
- To provide support — answering questions, handling returns, and resolving damage claims.
- To manage your account — if you choose to create one.
- To send marketing — only where you have opted in, and only until you opt out.
- To improve our products and site — using aggregated analytics rather than individual profiles.
- To protect the business — preventing fraud, abuse, and unauthorised access.
- To meet legal obligations — including tax, accounting, and consumer protection requirements.
We do not use your personal information to make automated decisions that produce legal or similarly significant effects on you.
Our legal bases
Where data protection law requires a legal basis for processing, we rely on the following:
- Performance of a contract — to process and deliver the order you placed.
- Legitimate interests — to secure our site, prevent fraud, and improve our products, balanced against your rights.
- Consent — for marketing communications and non-essential cookies. You may withdraw consent at any time.
- Legal obligation — to retain transaction records where the law requires it.
Cookies and tracking
Cookies are small files stored on your device. We use them in four ways:
- Essential — to keep your cart and session working. These cannot be switched off.
- Preference — to remember choices such as your region or saved details.
- Analytics — to understand site usage in aggregate.
- Marketing — to measure advertising performance and, where permitted, show you relevant ads.
You can block or delete cookies through your browser settings, and where required we ask for your consent before setting non-essential cookies. Blocking essential cookies will prevent checkout from working.
Some browsers send a Global Privacy Control or "Do Not Track" signal. Where we are legally required to honour such a signal, we do.
Marketing emails and texts
We send marketing only to people who have asked for it. Every marketing email includes an unsubscribe link, and unsubscribing takes effect promptly.
If you opt in to text messages, message and data rates may apply, and you can stop them by replying STOP.
Opting out of marketing does not stop transactional messages such as order confirmations, shipping notifications, and replies to your support requests — those are part of fulfilling your order.
Who we share information with
We share personal information only with service providers who need it to help us operate, and only for that purpose. These fall into the following categories:
- Payment processing
- To take payment securely and screen for fraud.
- Shipping and fulfilment
- Carriers and label providers, who receive the name and address needed to deliver.
- Website and CRM
- Our store platform, hosting, and customer relationship tools.
- Email and messaging
- Providers who deliver transactional and, where opted in, marketing messages.
- Analytics
- Tools that report on site usage, generally in aggregated form.
- Professional advisers
- Accountants and legal advisers, where necessary and under a duty of confidence.
We may also disclose information where the law requires it, to enforce our terms, to protect our rights or someone's safety, or as part of a merger, acquisition, or sale of the business — in which case we will notify you.
We do not sell your personal information, and we do not share it with third parties for their own independent marketing.
Payment security
Card payments are processed by a third-party payment provider over an encrypted connection. We never see or store your full card number, expiry date, or security code.
Your payment provider handles that data under its own privacy policy and applicable card industry security standards. We receive only confirmation of payment and limited details such as the last four digits and card type, used to identify the transaction.
International transfers
Some of the providers we use operate in other countries, which means your information may be transferred to and stored outside the country where you live.
Where we transfer personal information across borders, we take steps to ensure it remains protected to a standard consistent with this policy, including using appropriate contractual safeguards where required by law.
How long we keep information
We keep personal information only as long as we need it for the purpose it was collected, or as long as the law requires.
- Order and transaction records — retained for the period required by tax and accounting law in our jurisdiction.
- Account details — kept while your account is active, and deleted on request.
- Marketing contacts — kept until you unsubscribe, plus a short suppression record so we don't contact you again by mistake.
- Support correspondence — kept long enough to resolve the matter and handle any follow-up.
When information is no longer needed, we delete it or anonymise it so it can no longer identify you.
How we protect information
We use encrypted connections, access controls, and reputable providers, and we limit access to personal information to those who need it to do their job.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach occurs that is likely to affect your rights, we will notify you and any relevant regulator as required by law.
Please choose a strong, unique password if you create an account, and let us know immediately if you think it has been compromised.
Your privacy rights
Depending on where you live, you may have some or all of the following rights:
- Access — to ask what personal information we hold about you and receive a copy.
- Correction — to have inaccurate or incomplete information fixed.
- Deletion — to ask us to erase your information, subject to records we must legally keep.
- Portability — to receive your information in a portable format.
- Objection and restriction — to object to certain processing or ask us to limit it.
- Withdraw consent — at any time, where we rely on consent.
- Non-discrimination — we will not give you worse service or pricing for exercising a privacy right.
To exercise any of these, email [email protected]. We may need to verify your identity before we act, and we aim to respond within the timeframe required by applicable law. If you are in the UK or EEA and are unhappy with our response, you may complain to your local supervisory authority.
Notice for California residents
If you are a California resident, you have the right to know the categories of personal information we collect, the purposes for collecting it, and the categories of third parties we disclose it to — all of which are set out in sections 03 through 10 of this policy.
You also have the right to request deletion or correction of your personal information, and the right to opt out of any sale or sharing of it.
We do not sell or share personal information as those terms are defined under California law, and we have not done so in the preceding twelve months. We do not knowingly collect or sell the personal information of anyone under 16.
You may use an authorised agent to make a request on your behalf, with proof of authorisation.
Children's privacy
Our site and products are intended for adults. We do not knowingly collect personal information from children under 16.
If you believe a child has provided us with personal information, contact us and we will delete it promptly.
Third-party links
Our site may link to other websites and social platforms that we do not control. Their privacy practices are their own, and this policy does not apply to them. We encourage you to read the privacy policy of any site you visit from ours.
Changes to this policy
We may update this policy as our business or the law changes. The "last updated" date at the top of this page shows when it was last revised.
If we make a material change to how we use your information, we will take reasonable steps to tell you — for example, by email or a notice on the site.
How to reach us
Questions, requests, or complaints about privacy can be sent to [email protected], or by post to [BUSINESS ADDRESS].
We aim to respond to all privacy enquiries within one to two business days, and to formal rights requests within the period required by applicable law.