Privacy Policy

Privacy Policy

Last Updated: 23.09.2026 

Welcome to Naticandles. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website naticandles.co.uk or make a purchase from our shop. 

1. The Personal Data We Collect

When you interact with our website, we collect certain personal information necessary to fulfil your order and improve your shopping experience. This includes: 

  • Identity & Contact Data: Your full name, email address, telephone number, billing address, and delivery address. 
  • Transaction Data: Details about the products you have purchased from us, order history, and payment status. 
  • Technical Data: Your IP address, browser type, operating system, and data about how you browse and use our website. 

2. How and Why We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use it for the following legal reasons: 

  • To Fulfil Our Contract With You: Processing your payment, packaging your handcrafted candles/wax melts, and arranging courier delivery to your address. 
  • Legitimate Interests: To respond to your customer service enquiries, manage your account, or ask for product reviews to improve our business. 
  • Your Consent: If you explicitly opt-in to join our newsletter mailing list, we will use your email to send you updates and exclusive discounts. 

3. Payment Processing & Sharing with Third Parties

We never sell your personal details to third parties. However, we must share your data with trusted partners who help us run our online shop: 

  • E-commerce Platform: Our website is built on WooCommerce. Your basic customer data and order details are securely managed through our WooCommerce database. 
  • Payment Gateways: We do not store your financial details. Depending on your choice at checkout, your transaction data is processed securely by Stripe, PayPal, or Klarna. 
  • Klarna Special Disclosure: In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice. 
  • Delivery Services: Royal Mail, Evri, DPD, or other couriers so they can deliver your package. 

4. Data Security & Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, altered, or accessed without authorisation. 

  • We retain transactional records for 6 years under UK tax law requirements. 

5. Your Legal Rights (UK GDPR)

Under the UK General Data Protection Regulation, you have the following rights regarding your data: 

  • The Right to Access: You can request a copy of the personal data we hold about you. 
  • The Right to Rectification: You can ask us to correct any inaccurate or incomplete information. 
  • The Right to Erasure: You can request that we delete your personal data (subject to legal retention exceptions, like tax records). 
  • The Right to Withdraw Consent: If you signed up for our newsletter, you can click “unsubscribe” at any time. 

To exercise any of these rights, please contact us directly at info@naticandles.co.uk. 

6. Cookies

Our WooCommerce store uses cookies to keep track of items in your shopping basket while you browse and to analyze website traffic. You can choose to set your browser to refuse cookies, but some parts of our site may not function properly as a result. 

7. How to Contact Us or Lodge a Complaint

If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Controller at: 

  • Business Name: Vitalija Danadzhieva 
  • Email Address: info@naticandles.co.uk 
  • Physical Address: 11 Rolling Mills Drive, Wolverhampton, WV2 2JD, UK 

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.