Privacy notice

Template — to be reviewed by the store owner's solicitor.

Last updated: 1 November 2026

Who we are

Maison Elowen Ltd, trading as Maison Elowen, is the data controller for the personal information collected through this website. We are registered in England and Wales under company number 00000000. Our registered address is 1 Example Lane, Penzance, Cornwall, TR18 0AA. You can reach us about anything in this notice at hello@example.com or +44 (0)1736 000000.

This notice explains what we collect, why, who we share it with, how long we keep it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect

• Your name, email address, delivery and billing addresses and phone number, when you place an order or create an account.
• What you ordered, when, and how it was delivered.
• Payment confirmation from our payment provider. Card details are entered on the provider's secure page; we never see or store your full card number.
• Messages you send us by email, phone or the contact form, including returns and complaints.
• Your email address for our newsletter, only if you ask to receive it.
• Technical information about your visit, such as your IP address, browser and the pages you view, collected through cookies and similar tools. See our Cookies page.

The Fragrance Finder quiz runs in your browser. Your answers are not sent to us or stored by us.

Why we use it, and our lawful basis

• To take, pack and deliver your order, and to handle returns, refunds and faulty goods. Lawful basis: performance of a contract with you.
• To take payment and prevent fraud. Lawful basis: performance of a contract, and our legitimate interest in running a secure shop.
• To answer your questions and complaints. Lawful basis: performance of a contract, or our legitimate interest in good customer service.
• To keep accounting and tax records. Lawful basis: legal obligation.
• To record and report any adverse reaction to a cosmetic product, as cosmetic safety law requires of us. Lawful basis: legal obligation.
• To send you our newsletter. Lawful basis: your consent. Every email has an unsubscribe link and you can withdraw consent at any time.
• To understand how the website is used and improve it. Lawful basis: your consent for statistics cookies, or our legitimate interest where the law allows low-risk statistics without consent. See our Cookies page.

We do not sell your personal information. We do not use it to make automated decisions about you, other than the fraud checks carried out by our payment provider.

Who we share it with

• Shopify, which hosts this shop and processes orders on our behalf. Shopify stores data in secure data centres, some of them outside the UK, under its own data protection commitments.
• Payment providers (for example Shopify Payments, PayPal, Apple Pay or Google Pay) — only the one you choose at checkout.
• Delivery carriers, currently Royal Mail, who receive your name, address and, where you give them, your phone number or email so they can deliver and send tracking updates.
• Our email service provider, if you subscribe to the newsletter.
• Our accountants and professional advisers, where needed to run the business.
• Public authorities, where the law requires it.

Where a provider stores information outside the UK, we rely on the UK's adequacy regulations or the UK International Data Transfer Addendum so that your information stays protected.

How long we keep it

• Order and payment records: six years after the end of the tax year in which the order was placed, as UK tax law requires.
• Account details: until you close your account, or three years after your last order.
• Newsletter address: until you unsubscribe.
• Enquiries and complaints: two years after we close the matter, unless a legal claim is open.
• Adverse-reaction reports: for as long as cosmetic safety law requires.

Your rights

You have the right to ask us for a copy of your information; to correct it; to have it deleted; to restrict or object to how we use it; to receive it in a portable format; and to withdraw consent at any time. To use any of these rights, email hello@example.com. We do not charge for this and we will reply within one month.

Complaints about your data

If you are unhappy with how we handle your information, please tell us first at hello@example.com and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, by telephone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Children

This shop is for adults. We do not knowingly collect information from anyone under 16.

Changes to this notice

We will post any changes here and update the date at the top of the page.