Privacy Policy

This Privacy Policy explains how Memorial Candles Ltd handles personal data when you visit our website, contact us or purchase a product. Memorial Candles Ltd is the controller of personal data described in this policy where we decide how and why it is used.

1. Who we are

2. Personal data we may collect

• Identity and contact information, such as your name, email address, telephone number and delivery/billing address.
• Order information, including products ordered, order value, delivery status, refunds, returns and customer-service history.
• Payment-related information provided through Stripe. Stripe processes payment method information as part of the checkout process; we receive the transaction and order information needed to manage your purchase.
• Technical information associated with use of our website or services, such as IP address, device/browser information and security logs where these are generated by our hosting, payment or security providers.
• Correspondence and information you provide when contacting us about an order, return, complaint or other enquiry.
• Marketing preferences, if you choose to receive marketing communications from us.

3. Why we use personal data and our lawful bases

Customer reviews

When you leave a review, we collect the rating, name, email address, product selected, review title and comment. We use this information to process and moderate authentic feedback, detect spam and answer review-related questions. We do not publicly display your email address. If published, your display name, star rating, selected product, title and review text may be shown on the website. We moderate for spam, abuse and personal information, not to suppress genuine negative experiences. You can ask us to remove your published review by emailing info@memorialcandles.co.uk. Review form submissions are processed via Netlify Forms, and we retain them only for as long as reasonably necessary for review management, moderation, and record keeping.

4. Stripe payments

We use Stripe to process online payments. When you use Stripe Checkout, Stripe receives and processes transaction data such as your name, email address, billing or shipping address, payment method information, purchase amount and other information required for payment processing, authentication, fraud prevention and related services.

Stripe also acts under its own privacy responsibilities for certain processing. You should review Stripe’s privacy information when using Stripe Checkout. Memorial Candles does not request that you send full payment-card details to us by email.

5. Who we may share personal data with

• Stripe and payment-method providers involved in processing and authenticating your payment.
• Delivery and courier providers to deliver your order.
• Website hosting, email, IT and security service providers where necessary to operate the business.
• Professional advisers such as accountants, insurers or legal advisers where necessary.
• Government, regulatory, law-enforcement or tax authorities where disclosure is required or permitted by law.

We do not sell your personal data to advertisers.

6. International data transfers

Some service providers may process personal data outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we expect the relevant provider or transfer mechanism to use an approved safeguard or another lawful basis for the transfer.

7. How long we keep personal data

• Order, payment and accounting records: normally for up to 6 years after the end of the relevant accounting period, or longer if required by law or a live dispute.
• Customer-service and complaint records: for as long as reasonably necessary to resolve the matter and protect legal rights.
• Marketing records: until you unsubscribe or we no longer need the information, while retaining a minimal suppression record where necessary to respect an opt-out.
• Website/security logs: according to the operational and security retention periods used by our hosting and security providers, unless longer retention is needed for a specific incident.

8. Your data-protection rights

Depending on the circumstances, you may have rights to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability, and to object to certain processing. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing.

To exercise a right, contact info@memorialcandles.co.uk. We may need to verify your identity before acting on a request.

9. Marketing

We will not send optional electronic marketing where consent or another lawful basis is required unless that requirement is met. You can opt out of marketing at any time by using an unsubscribe option where provided or by emailing us.

10. Security

We use reasonable organisational and technical measures appropriate to a small online retailer to protect personal data. No online system can guarantee absolute security, so customers should also protect their own account, email and payment credentials.

11. Cookies and similar technologies

Our use of cookies and similar storage technologies is explained in the separate Cookie Policy. Stripe Checkout is hosted by Stripe and may use its own cookies or similar technologies in accordance with Stripe’s notices and applicable law.

12. Complaints to the ICO

If you are unhappy with how we use personal data, please contact us first so we can try to resolve the issue. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Information about the ICO and how to make a complaint is available at ico.org.uk.

13. Changes to this policy

We may update this Privacy Policy when our services, legal obligations or service providers change. The current version will be published on our website with a revised “Last updated” date.