Privacy policy
Last updated: 18 August 2026
This Privacy Policy explains how Candles Molds Ltd ("Candles Molds", "we", "us" or "our") collects, uses, stores, discloses and otherwise processes personal information when you visit CandlesMolds.com, purchase products from us, create or use a customer account, subscribe to communications, contact customer support or otherwise interact with our website and services (collectively, the "Services").
This Privacy Policy also explains the privacy rights and choices that may be available to you depending on where you live.
Please read this Privacy Policy carefully so that you understand how your personal information may be handled when you use our Services.
Who Is Responsible for Your Personal Information?
For the purposes of applicable data-protection laws, Candles Molds Ltd is the data controller responsible for personal information processed in connection with our store, except where another organisation independently determines the purposes and means of its own processing.
Candles Molds Ltd
5 Brayford Square
London, E1 0SG
United Kingdom
Privacy contact:
info@candlesmolds.com
You may also contact us through our Contact Us page.
Scope of This Privacy Policy
This Privacy Policy applies to personal information that we process when you interact with CandlesMolds.com, purchase our products or communicate with Candles Molds Ltd.
It does not necessarily apply to websites, platforms or services operated independently by third parties. Those organisations may process your information under their own privacy notices and terms.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, technology, business practices, privacy settings, legal obligations or regulatory requirements.
When we make changes, we will publish the revised Privacy Policy on this page and update the "Last updated" date above. Where applicable law requires additional notice or consent in relation to a material change, we will take the steps required by that law.
Personal Information We Collect
The personal information we collect depends on how you interact with Candles Molds and which parts of our Services you use.
Information You Provide Directly to Us
Information you provide directly to us may include:
- Contact information, such as your name, email address, telephone number, billing address and shipping address.
- Order and transaction information, such as products purchased, quantities, order value, order history, shipping information, billing information, payment status, cancellations, returns and refunds.
- Customer account information, such as account identifiers, authentication information, preferences and other information associated with your customer account where account functionality is available.
- Marketing preferences, including whether you have subscribed to promotional emails or other marketing communications.
- Customer-support information, including messages, order details, photographs or other information that you provide when contacting us about an order, product, delivery, return, damaged item or other enquiry.
- User-generated content, such as reviews, comments, photographs or other material that you voluntarily submit.
You are not required to provide every type of personal information. However, certain information is necessary for us to process purchases, deliver products, respond to requests or provide particular Services. If you do not provide information that is necessary for a transaction or requested service, we may not be able to complete that transaction or provide that service.
Payment Information
Payments may be processed through Shopify, payment processors, payment-card networks, digital-wallet providers or other payment services made available during checkout.
Payment providers may collect payment-card, bank, wallet, billing or transaction information directly from you. We generally receive the transaction and payment-confirmation information required to process and manage an order rather than independently storing your complete payment-card credentials.
Information Collected Automatically
When you browse or interact with our Site, we and service providers supporting our Services may automatically collect technical and usage information.
This may include:
- IP address;
- browser type and version;
- device type;
- operating system;
- device and online identifiers;
- general geographic information inferred from an IP address;
- pages and products viewed;
- search and navigation activity;
- referring and exit pages;
- date and time of visits;
- shopping-cart and checkout interactions;
- cookie and similar identifiers; and
- other information about how you interact with the Services.
Some of this information may be collected through cookies, pixels, tags, local storage and similar technologies.
Information We Receive From Other Sources
We may also receive personal information from organisations that help us provide, operate, secure, analyse or market our Services.
These sources may include:
- Shopify;
- payment processors and payment-service providers;
- shipping carriers and fulfillment providers;
- fraud-prevention and security providers;
- analytics providers;
- advertising and marketing platforms;
- customer-support and communication services;
- social-media platforms where you interact with us; and
- other technology and business service providers.
How We Use Personal Information
We use personal information for the purposes described below and only where we have an appropriate reason for doing so under applicable law.
Processing and Fulfilling Orders
We may use personal information to:
- process purchases and payments;
- confirm and manage orders;
- prepare and fulfill products;
- arrange shipping and delivery;
- provide order and tracking information;
- manage cancellations;
- process returns and refunds;
- resolve order or delivery problems; and
- provide other Services you request.
Where UK or European data-protection law applies, this processing is generally necessary to perform our contract with you or to take steps at your request before entering into a contract.
Customer Service and Communications
We may use personal information to respond to enquiries, provide product information, investigate delivery issues, assist with damaged, incorrect or defective products, process requests and otherwise manage our relationship with customers.
Depending on the circumstances, this processing may be necessary for performance of our contract with you or based on our legitimate interests in providing effective customer service and operating our business.
Security and Fraud Prevention
We may process personal information to:
- detect and prevent fraud;
- identify suspicious transactions;
- protect customer accounts;
- protect our website, systems and business;
- prevent misuse of our Services;
- investigate security incidents; and
- establish, exercise or defend legal claims.
This processing is generally based on our legitimate interests in protecting our customers, Services and business and may also be necessary to comply with legal obligations.
Improving Our Store and Services
We may process information about how customers use our Site to understand store performance, improve navigation and customer experience, diagnose technical problems, improve products and Services, measure performance and improve our business operations.
Where applicable law requires consent before analytics or other non-essential technologies are used, those technologies are used subject to the customer's applicable consent choices.
Marketing and Advertising
We may use personal information to send marketing communications, recommend products, understand the effectiveness of our marketing, measure advertising performance and display advertising where permitted by applicable law.
Where consent is legally required for promotional communications, advertising cookies, personalised advertising or similar technologies, we rely on consent. In other circumstances we may rely on legitimate interests where permitted by applicable law.
You can unsubscribe from promotional emails at any time by using the unsubscribe link included in those communications.
Even if you unsubscribe from promotional communications, we may still send non-promotional communications that are necessary for orders, payments, security, customer support, account administration, returns or other transactional purposes.
Legal and Regulatory Requirements
We may process personal information where necessary to:
- comply with tax, accounting and record-keeping obligations;
- comply with applicable laws and regulations;
- respond to lawful requests from courts, regulators or authorities;
- enforce our agreements and policies;
- protect our rights or the rights of others; and
- resolve disputes or legal claims.
Legal Bases for Processing
Where the UK GDPR, EU GDPR or similar data-protection legislation applies, our legal bases for processing personal information may include:
- Contract: where processing is necessary to process an order, arrange payment, deliver products, process a return or provide another service that you request.
- Legal obligation: where we need to process or retain information to comply with applicable legal, regulatory, accounting or tax requirements.
- Legitimate interests: where processing is reasonably necessary for operating, protecting, analysing, supporting or improving our business and Services, provided those interests are not overridden by your rights and interests.
- Consent: where applicable law requires consent, including for certain marketing, advertising, analytics, personalisation or tracking activities.
Where we rely on legitimate interests, those interests may include preventing fraud, protecting our Services, answering customer questions, providing customer support, understanding store performance, improving our products and Services and operating our business effectively.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.
Shopify and Our Ecommerce Platform
CandlesMolds.com is hosted and operated using Shopify's ecommerce platform.
Shopify collects and processes certain personal information when you visit our store, browse products, use checkout, create or use Shopify-related customer services, make a purchase or otherwise interact with our store.
We have enabled Shopify Network Intelligence. Shopify Network Intelligence allows Shopify to securely use customer information from our store together with information from interactions with other merchants and with Shopify to generate insights and provide enhanced Shopify services.
These enhanced services may help us and Shopify provide a more personalised shopping experience, understand how customers interact with stores and advertisements, improve services, prevent fraud and, where permitted by applicable law and your privacy choices, provide more relevant advertising and marketing.
Information about your activity on our store may therefore be shared with and processed by Shopify and other service providers, including providers that may be located in countries other than the country where you live, where this is necessary to operate our store or provide Shopify services, including services that incorporate information from your interactions with our store, other merchants and Shopify.
In some circumstances Shopify acts as a processor or service provider on our behalf. For certain Shopify services, including services provided through Shopify Network Intelligence, Shopify may also process personal information for purposes described in Shopify's own privacy terms.
You can learn more about how Shopify processes consumer personal information in the Shopify Consumer Privacy Policy .
You can also use the Shopify Privacy Portal to learn more about Shopify's privacy practices and to exercise privacy choices relating directly to Shopify where available.
Cookies and Similar Technologies
CandlesMolds.com and service providers supporting our store use cookies and similar technologies to operate the Site and, depending on your location, applicable law and privacy choices, for analytics, personalisation, marketing and advertising.
Essential Cookies
Some cookies and similar technologies are necessary for our Site and Services to operate correctly.
These technologies may support features such as:
- shopping-cart functionality;
- checkout;
- security and fraud prevention;
- customer authentication;
- country and currency preferences;
- privacy preferences; and
- other essential store functionality.
Analytics, Personalisation and Advertising Technologies
We may also use non-essential technologies to understand Site usage, measure performance, personalise the shopping experience, understand marketing effectiveness or support advertising.
Where applicable law requires consent before these technologies are used, their use is subject to your applicable consent choices.
Cookie Consent and Preferences
In regions where consent is required, our Site may display a cookie banner or privacy-preference controls that allow you to accept, decline or manage certain non-essential cookies and similar technologies.
Where you decline non-essential cookies using privacy controls that are integrated with Shopify's Customer Privacy system, those choices are communicated to Shopify and apply to relevant Shopify Network Intelligence processing as described by Shopify.
You may also be able to manage cookies through your browser settings. Please note that blocking or deleting certain cookies may affect the functionality or availability of some features of the Site.
For more information about cookies used by Shopify, see the Shopify Cookie Policy .
How We Disclose Personal Information
We may disclose personal information where reasonably necessary to operate our business, process orders, provide the Services, protect our business or comply with legal obligations.
Recipients may include:
- Shopify, which provides our ecommerce platform and related store services, including enhanced services where Shopify Network Intelligence is enabled.
- Payment providers, card networks and financial institutions used to authorise and process transactions.
- Fulfillment providers and shipping carriers used to prepare, dispatch, transport and deliver customer orders.
- Technology, infrastructure and hosting providers that support our website, systems, storage and operations.
- Analytics providers used to understand website, advertising and store performance.
- Advertising and marketing providers where we use such services and applicable privacy and consent requirements have been met.
- Customer-support and communications providers that help us communicate with and support customers.
- Fraud-prevention and security providers that help protect transactions, customers and our Services.
- Professional advisers, such as accountants, lawyers or consultants where reasonably necessary.
- Government bodies, courts, law-enforcement authorities or regulators where disclosure is legally required or reasonably necessary to protect legal rights.
Business Transactions
Personal information may also be transferred or disclosed in connection with a business transaction such as a merger, acquisition, financing, restructuring, reorganisation, sale of assets or similar transaction, subject to applicable legal requirements.
Data Sharing, Targeted Advertising and Privacy Choices
Depending on where you live, certain disclosures of personal information to Shopify, advertising providers, analytics providers or other business partners may be treated under applicable law as "selling", "sharing" personal information or processing personal information for "targeted advertising", even where personal information is not sold in exchange for money.
Information involved in these activities may include categories such as:
- identifiers and contact information;
- commercial and purchase information;
- internet or other electronic network activity;
- cookie, device and online identifiers;
- approximate location information derived from technical data; and
- information about interactions with our Site or advertisements.
Where applicable in your region, you can use our Your Privacy Choices page to opt out of certain disclosures or processing that may be defined under applicable law as sale, sharing or targeted advertising.
Where supported by applicable law and our privacy systems, recognised browser-based opt-out signals such as Global Privacy Control may also be processed as an opt-out request.
You may also use the Shopify Privacy Portal to exercise certain choices relating directly to Shopify's processing of your personal information.
International Processing and Transfers
Candles Molds serves customers internationally and works with ecommerce, payment, fulfillment, shipping, technology, analytics, security and other service providers that may operate in different countries.
As a result, your personal information may be accessed, processed, transferred or stored outside the country in which you live.
Where UK data-protection law applies to a restricted international transfer, we use a transfer mechanism permitted under applicable law. Depending on the circumstances, this may include:
- UK adequacy regulations;
- appropriate contractual safeguards, including the UK International Data Transfer Agreement or an applicable UK Addendum;
- another legally recognised appropriate safeguard; or
- a legally permitted exception where applicable.
For transfers governed by EU data-protection law, applicable adequacy decisions, Standard Contractual Clauses or another permitted transfer mechanism may be used where required.
You may contact us at info@candlesmolds.com if you would like further information about the safeguards applicable to a particular international transfer of personal information for which Candles Molds Ltd is responsible.
How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or where retention is required or permitted by applicable law.
The appropriate retention period depends on factors including:
- the type and sensitivity of the information;
- the purpose for which the information was collected;
- how long the information is needed to provide the Services;
- the duration of our relationship with the customer;
- tax, accounting and record-keeping requirements;
- fraud-prevention and security requirements;
- potential disputes, returns, chargebacks or legal claims;
- applicable limitation periods; and
- other legal or regulatory obligations.
For example:
- order and transaction records may be retained for the period necessary to comply with accounting, tax, legal and dispute-resolution requirements;
- customer-support records may be retained for as long as reasonably necessary to resolve the enquiry and maintain appropriate business records;
- marketing information may be retained until you unsubscribe or until it is no longer reasonably required for the relevant marketing purpose; and
- customer account information may be retained while an account remains active and afterwards where retention is reasonably necessary for legal, fraud-prevention, security or legitimate business purposes.
When personal information is no longer reasonably required, we may delete, anonymise or otherwise securely dispose of it in accordance with applicable law and our technical capabilities.
Security of Your Information
We use reasonable administrative, technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, destruction or disclosure.
However, no method of transmitting, processing or storing information is completely secure, and we cannot guarantee absolute security.
Please avoid sending highly sensitive or confidential information through insecure communication channels.
If you maintain a customer account, you are responsible for taking reasonable steps to protect access to that account and any associated authentication methods.
Fraud Prevention and Automated Tools
We, Shopify, payment providers and fraud-prevention providers may use automated systems and risk tools to help identify potential fraud, security risks, suspicious transactions or misuse of the Services.
These systems may consider transaction information, order information, device information, account information and other technical or behavioural signals when assisting with risk assessment.
Where applicable law provides you with rights relating to a decision made solely through automated processing that produces legal or similarly significant effects, those rights remain available to you.
User-Generated Content
Our Services may allow customers to submit reviews, photographs, comments or other content.
If you voluntarily submit content for publication in a public part of our Site, that information may become publicly accessible and may be viewed by other visitors.
Please avoid including personal, confidential or sensitive information in public reviews, photographs or other public content unless you intend that information to be visible to others.
Sensitive Personal Information
We do not generally require sensitive personal information in order to sell candle-making products or provide ordinary customer support. Please do not provide sensitive personal information unless it is reasonably necessary for a specific request or we have asked you to provide it.
Where we process information that receives additional protection under applicable law, we will process it only where an appropriate legal basis or other lawful condition applies.
Third-Party Websites and Services
Our Site may contain links to websites, social-media services, payment services or other platforms operated independently by third parties.
We do not control the privacy practices of independent third parties. If you visit or use an external service, we recommend reviewing that organisation's privacy policy and other applicable terms before providing personal information.
A link from CandlesMolds.com to a third-party service does not, by itself, mean that Candles Molds Ltd is responsible for that third party's privacy, security or content practices.
Children's Privacy
Our Services are intended for adults purchasing candle-making products and are not directed at children.
We do not knowingly seek to collect personal information directly from children where doing so would be prohibited by applicable law.
If you are a parent or guardian and believe that a child has improperly provided personal information to us, please contact info@candlesmolds.com so that we can review the matter.
Your Privacy Rights
Depending on where you live and the law that applies, you may have rights relating to your personal information.
These may include the right to:
- Access personal information we hold about you and receive information about how it is processed.
- Correct inaccurate or incomplete personal information.
- Request deletion of personal information in certain circumstances.
- Restrict processing in certain circumstances.
- Object to processing where applicable.
- Receive or transfer your information in a portable format where data-portability rights apply.
- Withdraw consent where processing is based on consent.
- Opt out of certain marketing communications.
- Opt out of certain sale, sharing or targeted advertising activities where applicable law provides such a right.
- Exercise applicable rights relating to certain automated decisions.
- Lodge a complaint with an applicable data-protection regulator.
Privacy rights are not absolute and may be subject to legal conditions, exceptions, identity-verification requirements or retention obligations.
Your Right to Object
Where we rely on legitimate interests as the lawful basis for processing your personal information, you may have the right to object to that processing in certain circumstances.
You may also object to the processing of your personal information for direct marketing. Where applicable law gives you this right and you object to direct marketing, we will stop processing your personal information for that purpose as required by law.
Withdrawing Consent
Where we rely on your consent, you may withdraw that consent at any time using the privacy or communication controls made available to you or by contacting us.
Where applicable, cookie and tracking consent can be managed through our cookie-preference controls.
For certain processing carried out directly by Shopify, you may also use the Shopify Privacy Portal .
Exercising Your Rights
To exercise a privacy right relating to personal information for which Candles Molds Ltd is responsible, contact:
Please provide enough information for us to identify the relevant account, order or information and understand the nature of your request.
We may need to verify your identity before fulfilling certain privacy requests. Where permitted by applicable law, an authorised agent may make a request on your behalf, although we may require evidence of their authority and may need to verify your identity directly.
We will respond within the timeframe required by applicable law and will not unlawfully discriminate against you for exercising an applicable privacy right.
Marketing Choices
You can unsubscribe from promotional email communications at any time by using the unsubscribe option included in those messages.
Withdrawing from promotional marketing does not prevent us from sending communications that are necessary for orders, payments, security, customer support, returns, refunds or other transactional purposes.
United States Privacy Rights
Residents of certain U.S. states may have additional privacy rights where the relevant state privacy law applies to Candles Molds Ltd and the processing concerned.
Depending on applicable law and circumstances, these rights may include:
- accessing personal information;
- correcting inaccurate personal information;
- requesting deletion of personal information;
- obtaining a portable copy of personal information;
- opting out of certain targeted advertising;
- opting out of activities defined by applicable law as the sale or sharing of personal information;
- limiting certain uses of sensitive personal information where such rights apply; and
- appealing certain decisions relating to privacy requests where applicable law provides an appeal right.
Certain disclosures to Shopify, advertising providers, analytics providers or other partners may be considered "selling", "sharing" or targeted advertising under some U.S. privacy laws even where no money is exchanged for personal information.
Where available in your region, use our Your Privacy Choices page to exercise applicable opt-out choices.
Recognised Global Privacy Control signals may also be treated as an opt-out request where required by applicable law and supported by our privacy systems.
Complaints
If you have a concern about how Candles Molds Ltd processes your personal information, please contact us first so that we can investigate and respond to your concern.
Email:
info@candlesmolds.com
As a United Kingdom business, our primary UK data-protection supervisory authority is the Information Commissioner's Office (ICO).
If you are not satisfied with our response, you may have the right to make a complaint to the ICO or another competent data-protection authority in the country or region where you live, work or believe an infringement has occurred.
You can learn more about making a complaint through the Information Commissioner's Office complaints service .
Individuals in the European Economic Area may also have the right to contact the data-protection supervisory authority responsible for their country or region.
Contact Candles Molds Ltd
If you have questions about this Privacy Policy, our privacy practices or a privacy-rights request, please contact:
Candles Molds Ltd
5 Brayford Square
London, E1 0SG
United Kingdom
Email:
info@candlesmolds.com
You may also contact us through our Contact Us page.
Last updated: 18 August 2026