Privacy policy
Privacy Policy
METRE Candles Ltd. is committed to protecting the privacy, confidentiality, and security of your personal data.
This Privacy Policy provides clear, simple, and complete information about how we process the personal data you provide or that we collect while you browse our website, how it may be shared with third parties, and your rights to control your personal information and protect your privacy.
METRE Candles Ltd., a company headquartered at 3 Romeyn Road, London, SW16 2NU, United Kingdom, is the data controller of personal data collected on the website [www.metrecandles.com] (hereinafter, the "Website"). METRE Candles complies with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For international orders, Shopify acts as the sales facilitation and fulfilment partner for METRE Candles. Shopify is the data controller for personal data related to international orders. For more information on Shopify’s s data processing practices, please refer to their Privacy Policy.
---
1. What is Personal Data?
Personal data refers to any information about an identified or identifiable individual. This includes, but is not limited to, your name, email address, phone number, payment details, and browsing data.
---
2. When Do We Collect Your Personal Data?
We may collect your personal data in the following circumstances:
- When you create a customer account on our website.
- When you place an order on our website.
- When you subscribe to our newsletter or agree to receive marketing communications.
- When you contact our customer service team.
- When you participate in surveys, promotions, or events.
- When you interact with us on social media or allow us to reuse content you have posted.
- When you browse our website, including through the use of cookies or similar technologies.
---
3. What Personal Data Do We Collect?
We may collect the following types of personal data:
- Identity Information: Name, title, and date of birth.
- Contact Information: Email address, phone number, and postal address.
- Order Information: Details of your purchases, payment information, and delivery address.
- Preferences: Your preferences regarding our products and services.
- Browsing Data: Pages visited, links clicked, and other online activity (collected via cookies).
Certain data fields are marked as mandatory on our forms. If you do not provide this information, we may be unable to process your request or provide the requested service.
---
4. Why Do We Collect Your Personal Data?
We process your personal data for the following purposes:
- To create and manage your customer account.
- To process and deliver your orders.
- To manage customer service inquiries and complaints.
- To send you marketing communications (with your consent).
- To improve our products, services, and customer experience.
- To comply with legal obligations, such as tax and accounting requirements.
- To detect and prevent fraud.
For international orders, Shopify processes your data for:
- Payment and invoicing.
- Customs duties and taxes.
- Fraud checks.
- Delivery and customer service related to your order.
---
5. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual Necessity: To fulfil our obligations under a contract, such as processing your order.
- Legitimate Interests: To improve our services, prevent fraud, and manage customer relationships.
- Consent: For sending marketing communications or using cookies (where required).
- Legal Obligations: To comply with applicable laws, such as tax regulations.
---
6. Who Do We Share Your Data With?
Your personal data may be shared with:
- Service Providers: For website hosting, payment processing, logistics, and marketing.
- Global-e: For international orders (payment, delivery, and customer service).
- Social Media Platforms: For targeted advertising and audience analysis (e.g., Facebook, Instagram, TikTok).
- Legal Authorities: To comply with legal or regulatory obligations.
We ensure that all third parties processing your data provide adequate safeguards to protect your information. We only share your data with your consent.
---
7. How Do We Protect Your Data?
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. These measures include:
- Secure payment processing using SSL encryption.
- Restricted access to personal data on a need-to-know basis.
- Regular security assessments and updates.
---
8. International Data Transfers
As a UK-based company, your data may be transferred outside the UK or European Economic Area (EEA) to provide our services. When transferring data internationally, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent mechanisms.
For international orders, Global-e may transfer your data outside the EEA. Please refer to their Privacy Policy for more details.
---
9. How Long Do We Keep Your Data?
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations. Retention periods include:
- Customer Accounts: 5 years from the date of your last interaction with us.
- Orders: 6 years for tax and accounting purposes.
- Marketing Data: 3 years from the date of your last consent or interaction.
- Cookies: Up to 6 months (depending on the type of cookie).
When your data is no longer needed, it will be securely deleted or anonymized.
---
10. Your Rights
Under the UK GDPR, you have the following rights:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure: Request the deletion of your data (subject to legal obligations).
- Right to Restrict Processing: Limit how your data is used.
- Right to Data Portability: Transfer your data to another service provider.
- Right to Object: Opt out of marketing communications or data processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw your consent for data processing at any time.
To exercise your rights, please contact us at orders@metrecandles.com.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.
---
11. Cookies
We use cookies to enhance your browsing experience and analyze website traffic. For more information, please refer to our Cookie Policy.
---
12. Contact Us
For any questions or concerns about this Privacy Policy or how we handle your data, please contact:
Data Protection Officer (DPO)
Email: orders@metrecandles.com
Address: 3 Romeyn Road, London, SW16 2NU, United Kingdom
Last Updated: February 2025
