Privacy Policy

Last updated: 24 September 2026

This Privacy Policy explains how SHFTYSCENTS LTD collects, uses, shares and protects your personal information when you visit or make a purchase from shftyscents.com.

Who we are

SHFTYSCENTS LTD
Company number: 15819856
Registered in England and Wales

Registered office:

Daryldene
Fretherne Lane
Saul
Gloucester
GL2 7JG
United Kingdom

Email: shftyscents@outlook.com

SHFTYSCENTS LTD is the data controller responsible for the personal information collected through this website.

What information we collect

Depending on how you use our website, we may collect:

• Your name

• Email address

• Telephone number, if provided

• Billing address

• Delivery address

• Order and purchase information

• Payment and transaction information

• Communications you send to us

• Returns, refunds and complaint information

• Marketing preferences

• Information about how you use our website

• Device, browser and IP address information

• Cookie and similar technology information

Payment information is processed securely by Shopify and the relevant payment provider. We do not directly receive or store your complete payment-card details.

How we collect your information

We may collect personal information:

• Directly from you when you place an order, contact us, request a return or subscribe to marketing

• Automatically when you use our website, including through cookies and similar technologies

• From Shopify, payment providers, delivery companies and fraud-prevention services where necessary to process or protect a transaction

• From marketing, advertising or social-media platforms when you interact with ShftyScents through those services

How we use your information

We may use your personal information to:

• Process and fulfil your orders

• Take and process payments

• Arrange delivery

• Contact you about your order

• Provide customer support

• Handle returns, refunds and complaints

• Prevent fraud and protect our website and customers

• Maintain business, accounting and tax records

• Comply with our legal obligations

• Improve our website, products and customer experience

• Analyse how our website is used

• Send marketing communications where you have consented or where otherwise permitted by law

Our lawful bases for using your information

UK data protection law requires us to have a lawful basis for using your personal information. Depending on the circumstances, we may rely on the following lawful bases:

Contract – where we need to use your information to process and fulfil your order, take payment, arrange delivery, provide customer service or handle a return or refund.

Legal obligation – where we need to keep or use information to comply with legal, accounting, tax, consumer-protection or regulatory requirements.

Legitimate interests – where it is reasonably necessary to operate, protect or improve our business. This may include preventing fraud, securing our website, responding to enquiries, improving our products and services, keeping appropriate business records and defending legal claims. We only rely on legitimate interests where those interests do not override your rights and freedoms.

Consent – where you have given us permission, including for certain marketing communications and non-essential cookies.

Where we rely on consent, you can withdraw it at any time.

Information needed to place an order

Certain personal information, including your name, delivery address, contact details and payment information, is required for us to enter into and perform our contract with you.

If you do not provide this information, we may be unable to process or fulfil your order.

Who we share your information with

We may share personal information with businesses that help us operate ShftyScents, including:

• Shopify

• Payment processors

• Royal Mail and other delivery or postal companies

• Website-hosting and IT service providers

• Analytics providers

• Marketing and advertising providers, where applicable

• Fraud-prevention and security providers

• Accountants and professional advisers

• Regulators, law-enforcement agencies, courts or other authorities where required by law

We only share personal information where it is reasonably necessary for these purposes or where required by law.

We do not sell your personal information.

Shopify

Our online store is hosted by Shopify.

Shopify processes certain personal information to provide the ecommerce services required to operate our store, including checkout, payments, order processing, security and website functionality.

Shopify may process personal information using systems located outside the United Kingdom. Where required, appropriate safeguards are used to protect information transferred internationally.

Shopify may also process certain information for its own purposes in accordance with its own privacy policies.

International transfers

Some companies that provide services to us may process personal information outside the United Kingdom.

Where UK data protection law requires safeguards for an international transfer, appropriate safeguards will be used. These may include UK adequacy regulations, the UK International Data Transfer Agreement or an approved UK addendum to standard contractual clauses.

You can contact us for further information about the safeguards used for international transfers.

How long we keep your information

We retain order, payment, transaction and accounting information for up to six years after the end of the relevant financial period, or longer where legally required.

Customer-service communications, returns, refunds and complaint information are retained only for as long as reasonably necessary to resolve the matter, maintain appropriate records or protect our legal rights.

Marketing information is retained until you unsubscribe, withdraw your consent or object to its use. We may retain limited information to ensure that your marketing preferences continue to be respected.

Cookie information is retained in accordance with the periods shown through our cookie settings and the services that place those cookies.

When personal information is no longer required, we will delete it, anonymise it or securely dispose of it where appropriate.

Marketing

If you choose to receive marketing communications from us, we may use your contact details to send you information about ShftyScents products, offers and updates.

Where legally permitted, we may also send marketing about similar ShftyScents products to existing customers who were given an opportunity to opt out when their details were collected.

You can unsubscribe from marketing emails at any time by using the unsubscribe link provided in the email or by contacting:

shftyscents@outlook.com

You have an absolute right to object to the use of your personal information for direct marketing.

Cookies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the website to function properly, including cookies used for shopping-basket, checkout, payment, security and account functions.

Other cookies may be used for:

• Analytics

• Website performance

• Personalisation

• Marketing and advertising

• Measuring the effectiveness of advertising

Where consent is required, non-essential cookies will only be used after you have made your choice through our cookie-consent controls.

You can accept or reject non-essential cookies and change your preferences using the cookie settings available on our website. You may also be able to control cookies through your browser settings, although blocking necessary cookies could prevent parts of the website from working correctly.

Automated decision-making

SHFTYSCENTS LTD does not use your personal information to make solely automated decisions that produce legal or similarly significant effects.

Shopify, payment providers and fraud-prevention services may use automated systems to identify potentially fraudulent or suspicious transactions in accordance with their own privacy policies.

How we protect your information

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

• Ask for a copy of the personal information we hold about you

• Ask us to correct inaccurate or incomplete information

• Ask us to delete your personal information in certain circumstances

• Ask us to restrict how we use your information

• Object to certain uses of your information

• Request the transfer of certain information to you or another organisation

• Withdraw consent where we rely on consent

• Object to the use of your information for direct marketing

Not every right applies in every circumstance.

To exercise any of these rights, contact:

shftyscents@outlook.com

We may need to verify your identity before completing a request.

Complaints

If you have concerns about how we use your personal information, please contact us at:

shftyscents@outlook.com

We would appreciate the opportunity to address your concerns, but contacting us first does not affect your right to complain directly to the Information Commissioner’s Office.

The Information Commissioner’s Office is the UK’s data protection regulator.

Website: https://www.ico.org.uk

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services or legal requirements.

The latest version will be published on this website with its updated date. Where appropriate, we may also notify you of significant changes.