PRIVACY POLICY:

Privacy Policy – Izula Aroma Craft

Effective date: 9 November 2025

This Privacy Policy explains how Izula Aroma Craft collects, uses, stores, and protects personal data of customers and website users in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

1. General Information

Izula Aroma Craft is an online store operated by:

Izabela Kaczmarska, a self-employed sole trader registered in the United Kingdom

Registered address: 112 Poppleton Close, Coventry CV1 3BN

Email: store@izula-aroma-craft.co.uk

The Store operates exclusively online and does not have a physical commercial retail premises.

2. Data We Collect

Personal Data

Name and surname, email address, phone number, billing and shipping address.

Account Data

Username and password (if an account is created). Passwords are stored in encrypted (hashed) form and are not accessible to the Seller.

Payment Data

Payment details such as card or bank account information are not stored by the Seller. Payments are processed securely by third-party payment service providers.

Website Usage Data

IP address, browser type, visited pages, cookies, and similar technical data collected to ensure proper website functionality and performance.

3. How We Use Your Data

We process personal data in order to:

  • Process and fulfil orders

  • Communicate order confirmations, delivery updates, and customer service responses

  • Improve our products and website functionality

  • Send marketing communications where consent has been given

  • Comply with legal and accounting obligations.

    4. Legal Basis for Processing

    We process personal data on the following legal bases:

    • Performance of a contract (order processing and delivery)

    • Legal obligation (tax and accounting requirements)

    • Legitimate interests (website security, service improvement)

    • Consent (marketing communications and non-essential cookies)

      5. Sharing Your Data

      Personal data may be shared only with trusted third parties where necessary, including:

      • Payment service providers

      • Delivery and courier companies

      • IT and website service providers

      • Legal or regulatory authorities where required by law

      We never sell personal data to third parties.

      6. Data Retention

      Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting obligations.

       

       

      7. Your Rights Under UK GDPR

      You have the right to:

      • Access your personal data

      • Request correction of inaccurate data

      • Request deletion of your data where applicable

      • Object to or restrict processing

      • Data portability

      • Withdraw consent at any time (where processing is based on consent). To exercise your rights, please contact us at store@izula-aroma-craft.co.uk

        8. Data Security

        Appropriate technical and organisational measures are in place to protect personal data against unauthorised access, loss, misuse, or disclosure. The website uses secure connections and trusted service providers.

         

         

        9. Children’s Privacy

      • Our services are intended for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18.