How is your data used?

Last updated: 18.01.2026

1. Introduction

Funky Candle Company respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, and protect your information when you visit or make a purchase from https://funkycandle.co.uk, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

We are the data controller for your personal data.

3. Personal Data We Collect

When you use our website or place an order, we may collect:

  • Identity Data: name, title

  • Contact Data: billing address, delivery address, email, phone number

  • Order Data: products purchased, order history, returns

  • Payment Data: payment method (note: we do not store full card details)

  • Technical Data: IP address, browser type, device information

  • Usage Data: pages viewed, interactions with the site

  • Marketing Preferences

4. How We Collect Your Data

  • When you create an account

  • When you place an order

  • When you contact customer support

  • Through cookies and similar technologies

  • Through third-party services (e.g. payment or delivery providers)

5. How We Use Your Data

We use your personal data to:

  • Process and deliver your orders

  • Manage payments, refunds, and returns

  • Communicate order updates

  • Provide customer support

  • Improve our website and services

  • Send marketing emails (where consent is given)

  • Prevent fraud

  • Comply with legal obligations

6. Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Contract: to fulfil your order

  • Legal obligation: accounting and tax requirements

  • Legitimate interests: improving services and fraud prevention

  • Consent: marketing communications

7. Payments

Payments are processed securely by third-party payment providers such as [Stripe / PayPal / Klarna].

We do not store or process your full payment card details.

8. Data Sharing

We may share your data with:

  • Payment processors

  • Delivery and courier services

  • IT and hosting providers

  • Marketing platforms (email or analytics)

  • Professional advisers

  • Authorities where legally required

We never sell your personal data.

9. International Transfers

Some service providers may be located outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as adequacy decisions or standard contractual clauses).

10. Data Security

We use appropriate technical and organisational measures to protect your personal data, including encryption, secure servers, and restricted access.

11. Data Retention

We keep personal data only for as long as necessary:

  • Order and accounting records: up to 6 years (legal requirement)

  • Marketing data: until you withdraw consent

  • Account data: until account deletion is requested

12. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

To exercise your rights, contact [email address].

13. Cookies

We use cookies to:

  • Enable site functionality

  • Analyse traffic

  • Support marketing activities

Please see our Cookie Policy for more details.

14. Third-Party Links

Our website may include links to third-party websites. We are not responsible for their privacy policies.

15. Complaints

If you have concerns, please contact us first.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page.