Privacy policy
1. Data Controller
The controller responsible for data processing on this website is:
Daniel Weiß
Seventh Scent c/o Whitelabs Consulting
Winterspürer Straße 6
78333 Stockach
Germany
Email: support@seventhscent.co.uk
2. Hosting and Shop System
This online shop is operated via the Shopify platform (Shopify International Ltd., Ireland). Shopify processes the data required to operate the shop on our behalf (data processing agreement pursuant to Article 28 UK GDPR). When you access our website, server log data (IP address, date and time, page accessed, browser type) is automatically processed. The legal basis is our legitimate interest in a secure, trouble-free operation (Article 6(1)(f) UK GDPR).
3. Order Processing
To process your order, we process inventory and payment data (name, address, email address, payment information, order details). The legal basis is the performance of the purchase contract (Article 6(1)(b) UK GDPR). For delivery, we pass on the necessary data to the commissioned shipping company, and for payment processing to the respective payment service provider. Statutory retention periods under commercial and tax law remain unaffected.
4. Payment Service Providers
Depending on the selected payment method, your payment data will be transmitted to the respective provider (e.g. Shopify Payments, PayPal, Klarna, Apple Pay). These providers are independent controllers; their own privacy policies also apply. The legal basis is Article 6(1)(b) UK GDPR.
5. Cookies and Consent
We use technically necessary cookies on the basis of Regulation 6 of the Privacy and Electronic Communications Regulations (PECR) or Article 6(1)(f) UK GDPR. We only use non-essential cookies (analytics, marketing) with your consent (Regulation 6 PECR, Article 6(1)(a) UK GDPR). You can withdraw your consent at any time via the cookie settings.
6. Contact and Newsletter
When you contact us, we process your details to handle your enquiry (Article 6(1)(b) or (f) UK GDPR). For the newsletter, we use the double opt-in procedure; you can withdraw your consent (Article 6(1)(a) UK GDPR) at any time via the unsubscribe link in any email.
7. Retention Period
We store personal data only for as long as is necessary for the stated purposes or as required by statutory retention periods (in particular, six or ten years under commercial and tax laws, such as the German Commercial Code (HGB) and Fiscal Code (AO)).
8. Your Rights
You have the right to access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and to object to processing based on legitimate interests (Article 21 UK GDPR). You can withdraw any consent given at any time with future effect. To do so, please contact support@seventhscent.co.uk.
You also have the right to lodge a complaint with a data protection supervisory authority, such as the Information Commissioner's Office (ICO) in the UK.