Privacy policy

Last updated: 22 June 2025

This Privacy Policy describes how Olivia Michael Candle Co. (“Olivia Michael Candle Co.”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit or make a purchase from oliviamichaelcandle.co (the “Site”).

Collecting personal information

When you visit or use our Site, we collect various types of personal information depending on how you interact with us and the services you use. Personal information refers to information that identifies or can reasonably be linked to you or another person. Below is a summary of the types of information we collect and the sources from which we obtain it:

Types of personal information collected:

  • Contact details: Name, billing address, shipping address, email address, and phone number.
  • Financial information: Payment information (including credit or debit card details), transaction details, form of payment, payment confirmation, and other payment details.
  • Account information: Username, password, security questions, account preferences and settings (if you create an account with us).
  • Device information: Web browser version, IP address, time zone, cookie information, device type and unique identifiers, operating system, browser type, screen resolution, and network connection.
  • Usage information: What sites or products you view, search terms, how you interact with the Site, items placed in your cart, items added to your wishlist, purchases, returns, exchanges, or cancellations, and your past transactions.
  • Communications: Information included in your communications with us, such as customer support inquiries, feedback, or messages.
  • Other information: Any additional information you provide to us or that is required to provide our services to you.

Sources of personal information:

We collect personal information from the following sources:

  • Directly from you: For example, when you make a purchase, create an account, fill in forms, contact customer support, or communicate with us in any way.
  • Automatically through the Site: When you visit or use our website, we collect information automatically via cookies, log files, web beacons, tags, pixels, and similar technologies.
  • From service providers: Such as payment processors, review platforms, shipping partners, and analytics providers who help us operate our business and deliver our services.
  • From partners or other third parties: Including marketing partners, advertising networks, and affiliates, as permitted by law.

We do not intentionally collect personal information from children or individuals under the age of majority in your jurisdiction. If you believe a child has provided us with personal information, please contact us at info@oliviamichaelcandle.co to request deletion.

Device information

  • Examples of Personal Information collected: The web browser version you use, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
  • Purpose of collection: to load the Site accurately for you and to perform analytics on Site usage to optimise our Site.
  • Source of collection: collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
  • Disclosure for a business purpose: shared with our processor, Shopify.

Order and transactional information

  • Examples of Personal Information collected: name, billing address, shipping address, payment information (including credit or debit card details), email address, phone number, details of items purchased, items added to your wishlist, and records of any returns, exchanges, or cancellations, as well as your past transaction history.
  • Purpose of collection: to provide products or services to you to fulfil our contract, process your payment information, arrange for shipping, handle returns, exchanges, or cancellations, manage your wishlist, provide you with invoices and/or order confirmations, communicate with you about your orders or account, screen orders for potential risk or fraud, collect and verify product reviews, and, when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
  • Source of collection: collected directly from you.
  • Disclosure for a business purpose: shared with our processor Shopify, our shipping partner Royal Mail, and judge.me, who collate and verify our product reviews.

Customer support information

  • Examples of Personal Information collected: name, email address and phone number.
  • Purpose of collection: to provide customer support.
  • Source of collection: collected from you.

Children’s data

Our services are not intended for children or individuals under the age of majority in your jurisdiction. We do not knowingly collect, use, share, or sell personal information of individuals under the age of 16.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@oliviamichaelcandle.co to request deletion.

Sharing personal information

We share your personal information with service providers to help us provide our services and fulfil our contracts with you, as described above. For example:

  • We use Shopify to power our online store. You can read more about how Shopify uses your personal information here: https://www.shopify.com/legal/privacy.
  • We use judge.me to power our review capabilities. You can read more about how judge.me uses your personal information here: https://judge.me/privacy
  • We use Royal Mail to post all packages. You can read more about how Royal Mail uses your personal information here: https://www.royalmail.com/business/privacy-policy/
  • We may share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful requests for information we receive, or to protect our rights otherwise.

Using personal information

We may use your personal information for the following purposes:

  • To provide and improve our services: Including offering products for sale, processing payments, shipping and fulfilment of your orders, handling returns or exchanges, collecting and verifying product reviews, and creating a customised shopping experience.
  • To communicate with you: Such as providing customer support, sending order confirmations, updates, and other service-related messages.
  • For marketing and advertising: To send you marketing, promotional, or advertising communications by email, text message, or post and to show you online advertisements for our products or services on our website or other websites. This may include personalising advertising based on your activity, past purchases, or items you have added to your cart or wishlist.
  • To protect against fraud and ensure security: Such as authenticating your account, investigating and preventing possible fraudulent or illegal activity, and securing our services.
  • To comply with legal obligations: Including responding to legal requests, resolving disputes, or enforcing our terms and policies.

You can opt out of marketing emails at any time by using the unsubscribe link in our emails. Even if you opt-out, you may still receive non-promotional messages, such as those about your orders or your account.

Lawful basis

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

  • Your consent;
  • The performance of the contract between you and the Site;
  • Compliance with our legal obligations;
  • To protect your vital interests;
  • To perform a task carried out in the public interest;
  • For our legitimate interests, which do not override your fundamental rights and freedoms.

Security of your information

We take reasonable steps to protect your personal information and keep it secure. However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee the absolute security of your information.

We recommend that you keep your account credentials, such as your username and password, confidential and do not share them with anyone else. If you use a public or shared device to access our website, be sure to log out after your session.

Please do not send sensitive or confidential information to us through insecure channels (such as email or social media), as we cannot guarantee the security of information transmitted this way.

If you believe your account or information has been compromised, please contact us immediately at info@oliviamichaelcandle.co.

Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, including to provide you with our services, process transactions, maintain your account, comply with our legal and regulatory obligations, resolve disputes, enforce our agreements, and protect our rights and interests.

How long we retain your information depends on the type of data, the reason it was collected, and any legal requirements that apply. When we no longer need to use your personal information, and there is no legal or business need to keep it, we will securely delete or anonymise it.

If you wish to have your personal information deleted sooner, please contact us using the details below. For more information on your right of erasure, please see the ‘Your rights’ section below.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling) when that decision-making has a legal effect on you or otherwise significantly affects you.

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor, Shopify, uses limited automated decision-making to prevent fraud that has no legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

  • Temporary denylist of IP addresses associated with repeated failed transactions. This denylist remains in effect for a short period.
  • Temporary denylist of credit cards associated with deny listed IP addresses. This denylist remains in effect for a short period.

Third-party integrations

We use third-party software to help us improve your experience on this website, including Google Analytics and Microsoft Clarity. These third-party tools have no access to your personal data. Information collected is anonymous.

Clarity is a user behaviour analytics tool that helps us to understand how you interact with our website. 

Clarity captures your interactions on our website, such as how the page is rendered, mouse movements, clicks, scrolls, and more. The code used to capture this information is open-source and available on GitHub. You can also read a summary of what data fields they collect. We specifically mask all personal information, and no recording occurs during check-out. For more information, see Microsoft Privacy Statement.

For Google Analytics, the following information may be collected about your device and browser, but it cannot be used to identify who you are:

  • device’s IP address
  • device screen resolution
  • device type (unique device identifiers), operating system, and browser type
  • geographic location (city and country only)
  • preferred page display language
  • referring domain
  • pages visited
  • preferred language used to display the webpage
  • date and time when website pages were accessed
  • mouse events (movements, location and clicks)
  • keypresses

You can opt out of Google Analytics by installing their Opt-out Browser Add-on (opens in a new tab).

Shopify enhanced features and cross-merchant data

Our store is hosted by Shopify, which collects and processes personal information about your access to and use of our Site in order to provide and improve their services for you. Shopify may use information from your interactions with our store, along with your interactions with other merchants and Shopify itself, to provide enhanced features and a better experience. For example, this may help personalise your shopping experience, improve fraud prevention, or support marketing and analytics services.

Shopify is responsible for processing your personal information to enable these enhanced features. To learn more about how Shopify uses your personal information, please refer to the Shopify Consumer Privacy Policy.

Third-party websites and social media

Our Site may include links to websites, platforms, or services operated by third parties, including social media platforms and widgets. If you choose to interact with these features, such as by using a social media login or sharing content, your information may be shared with those third parties and may become publicly visible depending on your settings on those platforms.

We are not responsible for the privacy or security practices of third-party websites, services, or social media platforms. We recommend reviewing their privacy policies and terms before providing any personal information or using their features.

Your rights - GDPR

Depending on where you live, you may have some or all of the rights listed below regarding your personal information. These rights may apply only in certain circumstances and are subject to exceptions as provided by law.

  • Right to access / know: You can request access to the personal information we hold about you.
  • Right to correct: You can ask us to correct or update inaccurate or incomplete personal information.
  • Right to delete: You can request the deletion of your personal information.
  • Right of portability: You can request to receive a copy of your personal information or for us to transfer it to another provider, where feasible.
  • Right to object to processing: You can object to our processing of your personal information in certain circumstances.
  • Right to restrict processing: You can ask us to restrict the processing of your personal information in certain situations.
  • Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time (this does not affect any processing already carried out based on your consent).
  • Managing communication preferences: You may opt out of marketing emails at any time by using the unsubscribe link in our emails. Even if you opt out of marketing, you may still receive transactional or service emails.
  • Right to appeal: If you are not satisfied with how we have handled your request, you may have the right to appeal or lodge a complaint with your local data protection authority.
  • Authorised agent: Where allowed by law, you may designate an authorised agent to submit requests on your behalf.

To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before processing your request.

International data transfers

Your personal information will be processed in Ireland and may be transferred outside of Europe for storage and further processing, including to Canada and the United States. We use recognised data transfer mechanisms such as the European Commission’s Standard Contractual Clauses or other relevant safeguards unless the data is transferred to a country deemed to provide an adequate level of protection.

For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

Authorised agents and appeals

Where permitted by law, you may designate an authorised agent to make a data rights request on your behalf. Before accepting such a request, we may require your agent to provide proof that you have authorised them to act on your behalf, and we may also need to verify your identity directly with you.

If you are not satisfied with how we handle your request or with our response to your data rights request, you have the right to appeal our decision. You may also have the right to lodge a complaint with your local data protection authority. For the EEA, you can find a list of the relevant authorities here.

Cookies and analytics

We use cookies and similar technologies to improve your experience on our website, enable essential site functions, and help us understand how our website is used.

Cookies are small data files that are placed on your device when you visit our Site. They allow the website to remember your actions and preferences (such as login and region selection) and help us provide a better, more personalised experience.

For full details on the types of cookies used, how they work, and how you can manage your preferences, please refer to Shopify’s Cookies Policy: https://www.shopify.com/uk/legal/cookies

We also use analytics and reporting services provided by Shopify to help us understand site usage and improve our services.

To learn more about how Shopify collects, uses, and protects your data, please see Shopify’s Privacy Policy: https://www.shopify.com/uk/legal/privacy.

You can control and manage cookies through your browser settings. Please note that blocking or deleting cookies may affect how the website functions.

Do not track

Please note that there is no consistent industry understanding of responding to “Do Not Track” signals, so we do not alter our data collection and usage practices when we detect such a signal from your browser.

Business transfers

If we are involved in a merger, acquisition, sale of assets, bankruptcy, or other business transaction, your personal information may be transferred as part of that transaction. If such a transfer occurs, we will use reasonable efforts to ensure your personal information continues to be treated in accordance with this Privacy Policy.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Contact

For more information about our privacy practices, if you have questions, or if you would like to exercise any of your rights or make a complaint, please contact us by email at info@oliviamichaelcandle.co

For the purpose of applicable data protection laws, Olivia Michael Candle Co. is the data controller of your personal information.