Privacy Policy
Data Controller: handscentshop, 17 Jaxons Court, Wigan WN1 1LR, United Kingdom
handscentshop ("we," "our," or "us") is committed to protecting your privacy in accordance with
the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy
Policy explains how we collect, use, disclose, and safeguard your information when you visit our website
or use our event décor services.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: When you provide explicit consent for specific processing activities
- Contract: To fulfil our contractual obligations when providing services
- Legitimate Interests: For business operations, marketing (with opt-out options),
and service improvement
- Legal Obligation: To comply with applicable UK laws and regulations
Information We Collect
We collect information that you provide directly to us, including:
- Personal identification: Name, email address, telephone number, postal address
- Event details: Event type, date, venue, guest numbers, theme preferences
- Communication records: Correspondence via email, phone, or contact forms
- Payment information: Billing details (processed securely through third-party payment processors)
- Technical data: IP address, browser type, device information, website usage data
How We Use Your Information
We use the information we collect to:
- Provide and deliver our event décor services and fulfil contractual obligations
- Respond to your enquiries and requests for quotations
- Communicate with you about services, bookings, and event coordination
- Process payments and manage accounts
- Improve our website, services, and customer experience
- Send marketing communications (with your consent, which you can withdraw at any time)
- Comply with legal obligations under UK law
- Protect our legitimate business interests and prevent fraud
Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information
only in the following circumstances:
- Service Providers: With trusted third-party service providers who assist in
operating our business (e.g., payment processors, delivery services, IT support), subject to strict
confidentiality agreements
- Legal Requirements: When required by UK law, court orders, or regulatory
authorities
- Business Transfers: In connection with any merger, sale, or transfer of business
assets (with prior notice)
- With Your Consent: When you have provided explicit consent for specific sharing
arrangements
All third parties are required to process your data in accordance with UK GDPR requirements.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this
policy, unless a longer retention period is required by UK law. Typically:
- Contact form submissions: 2 years
- Service contracts and bookings: 7 years (for tax and accounting purposes)
- Marketing consent: Until withdrawn
- Technical/log data: 12 months
Data Security
We implement appropriate technical and organisational measures in accordance with UK GDPR to protect your
personal information against unauthorised access, alteration, disclosure, or destruction. These measures
include:
- Encryption of data in transit and at rest
- Secure server infrastructure and access controls
- Regular security assessments and updates
- Staff training on data protection
- Limited access to personal data on a need-to-know basis
Your Rights Under UK GDPR
Under the UK General Data Protection Regulation, you have the following rights:
- Right of Access: Request a copy of your personal data we hold
- Right to Rectification: Correct inaccurate or incomplete information
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable
format
- Right to Object: Object to processing based on legitimate interests or for direct
marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based
on consent
To exercise these rights, please contact us using the details provided below. We will respond within one
month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if
you believe we have not handled your data appropriately.
International Data Transfers
Your data is primarily processed within the United Kingdom. If we need to transfer data outside the UK,
we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience. For detailed information,
please see our Cookies Policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please
contact us at:
Data Protection Officer
Email: ask@handscentshop.world
Phone: +447883341365
Address: 17 Jaxons Court, Wigan WN1 1LR, United Kingdom
ICO Registration: If applicable, our ICO registration number will be provided upon
request.
Changes to This Policy: We may update this Privacy Policy from time to time. We will
notify you of significant changes by posting the new policy on this page and updating the "Last Updated"
date.