Scandinavian Candles is the data controller for personal data collected through this store. This policy explains what we collect and your rights under the GDPR.
What we collect: your name, email, shipping and billing address and order details when you order or contact us; and device and usage data via cookies when you browse.
Why (legal basis): to perform our contract with you (process and ship orders), to meet legal obligations, and — with your consent or our legitimate interest — to improve and market the store.
Who we share it with: partners that help us operate — Shopify (store and checkout), our payment processors, our fulfilment partner, and analytics and advertising partners such as Meta. Some may process data outside the EU under appropriate safeguards. We never sell your personal data.
Retention: we keep order data only as long as needed for the order and for legal and accounting purposes.
Your rights: access, rectification, erasure, restriction, portability and objection. To exercise any of these, or to withdraw consent, contact us via our Contact page.