Privacy Policy

Your personal information

Currently, when you interact with us (Oirthir Candles) using this website (www.oirthir.co.uk), we collect and process the following information in order to provide our services:

a) The name you provide us with
b) The shipping address you provide
c) The email address and other contact details you provide
d) Any other identifying details you may voluntarily provide as part of your purchase or other interaction

This information is used for performance of our core services such as shipping and any other services which may be requested (such as gift-wrapping, etc.). We will never sell your personal data, distribute it to third parties (not including the organisations which interact with or facilitate our services, such as postal services and couriers) or authorities (unless strictly obligated to do so under UK law during the relevant period in which such data is kept in storage), or otherwise distribute it. The information is solely used to provide our core services, such as shipping. Such services will be clearly labelled before and during purchase, and are provided at the customer’s consent.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent. You are able to remove your consent at any time, and can do so by contacting us.
(b) We have a contractual obligation based on the provision of our services

At no point in the purchase process do we have access to specific details about customers’ financial or payment information; this data is handled automatically through our reputable third-party payment provider. As such we also cannot be held responsible for the security or use of such information and encourage you to consult the payment provider’s own Terms of Use and Privacy Policy.

We reserve the right to make minor alterations to this privacy policy in future based on the needs of our business or the changing circumstances of our operations.

Additionally, we encourage any concerned parties to consult Squarespace’s own Terms of Service and Privacy Policy for further information regarding the function of our website as it relates to their personal information.

Cookies

We use ‘cookies’ in order to help provide our services on this website. These cookies are primarily used for convenience and functionality - such as preserving basket and account information in the client browser session - and as dictated by the relevant GDPR regulations users are specifically prompted to give consent to the use of these cookies upon accessing the website. We do not currently make use of ‘tracking cookies’, and collect and store no information about personal data - such as users’ browsing habits, advertising demographic or external purchase activity - not strictly relevant to the purchasing experience. However, though we make every effort to preserve our customers’ privacy we can make no total assurances regarding the limited number of third parties involved in the operation of this site; namely Squarespace and our (or its) associated payment providers.

How we store your information

Your information as described above is first processed and stored via Squarespace’s e-commerce platform, and stored on a secure server system (see also Squarespace’s Security Policy). The information provided by the customer and relevant to our services is privately accessible to us via Squarespace’s seller platform. Securely-stored and handled copies of this information may be produced for legitimate reasons such as the production of necessary paperwork, as well as for the purposes of shipping and delivering our products. We take the responsibility of handling this data very seriously and will always make every effort to ensure the security and privacy of our customers.

Customer data - including names, addresses, and any provided contact details - is retained by us (on secure Squarespace account servers and in the form of any secure offline or physical copies made) for a maximum of three years, after which it will be securely destroyed (or destroyed to the best of our ability with regards to servers - we’re not big on arson). Under GDPR we are required to inform all affected customers in the unlikely event of any potential data breach.

Your data protection rights

Under data protection law, you have standard rights including:

  • Your right of access - You have the right to ask us for copies of your personal information.

  • Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

  • Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us if you wish to make a request.

How to complain about the use of your data

If you have any concerns about our use of your personal information, you can make a complaint to us via the contact details provided.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

ICO Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk