Effective date: 1st July 2020

Scentful (“Scentful”, “we”, “us” and “our”) is committed to ensuring that your privacy is protected. Like any organisation, we are required to follow the new EU General Data Protection Regulation (GDPR), effective from 25th May 2018. The GDPR aims to protect the privacy, freedoms, and rights of all EU citizens and places more strict criteria on organisations regarding how personal data is processed. The data controller is Scentful in the UK and our Data Protection Officer can be contacted at hello@scentful.co.uk.

This privacy policy describes out how we are gathering personal information from you and how we will handle the personal information you submit. You accept and consent to the policies defined in this Privacy Policy by visiting the website at www.scentful.co.uk. Do not use our website or services if you do not agree with our privacy policy.

Types of Data Collected

Personal Data

We may ask you to provide us with certain personally identifiable information when using our site that can be used to contact or identify you (“Personal Data”). Personally identifiable data may include, but is not limited to:

  • Contact and profile information, including name, email address and postal address (including post code).
  • Account information, including your transaction details and successful payments.
  • Credit card information, including the name on the card, card type, card number, expiry date and CV2 is collected and processed by our third party payment processor called Stripe.
  • Communications to us, for example reporting a problem or submitting queries, concerns or comments regarding the site, its content or your account.

We may use your personal data to notify you with newsletters, marketing or promo materials, as well as other information which may interest you. By using the unsubscribe link or instructions given in any email we send you can opt out of receiving any or all of these notifications from us.

Usage Data

We can also gather information about how you access and use the site (“Usage Data”). This usage data may include information such as the Internet Protocol (IP) address of your computer, browser type, browser version, and pages of our site you are visiting, the time and date of your visit, time spent on those pages, unique device identifiers and other diagnostic information.

Tracking Cookies Data

We use cookies and similar tracking technologies to track the activity on our site and hold certain information.

Your browser may be instructed to deny all cookies or to indicate when a cookie is sent. If you decline cookies, you will not be able to use all portions of the site. We use Google Analytics and MailChimp.

For more information, please refer to our Cookie Policy.

Use of Data

Scentful uses the collected data for various purposes:

  • To provide and maintain our site and services
  • To notify you about changes to our services
  • To allow you to participate in interactive features of our service when you choose to do so
  • To provide customer support
  • To gather analysis or valuable information so that we can improve our service
  • To monitor the usage of our service
  • To detect, prevent and address technical issues
  • To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

Legal Basis for Processing Personal Data under GDPR

If you are from the European Economic Area (EEA), Scentful legal basis for the collection and use of the personal information defined in this Privacy Policy depends on the personal data we collect and the precise context in which we collect it.

Scentful may process your personal data because:

  • We need to perform a contract with you
  • You have given us permission to do so
  • The processing is in our legitimate interests and it’s not overridden by your rights
  • For payment processing purposes
  • To comply with the law

Retention of Data

For the purposes set out in this Privacy Policy, Scentful will retain your personal data for as long as appropriate. We will maintain and use your personal data to the extent appropriate to meet our legal obligations (for example, if we are needed to maintain your data in compliance with relevant laws), settle disputes and implement our legal agreements and policies. Scentful will also retain usage data for internal analysis purposes.

Transfer of Data

Your data, including personal data, may be transferred to — and kept on — computers located outside your state , province, country or other jurisdiction where data protection laws may vary from those of your jurisdiction. We keep most of the data in the UK.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Scentful shall take all reasonable steps to ensure that your data is handled safely and in compliance with this Privacy Policy and that there is no transfer of your personal data to an entity or country unless appropriate safeguards are in place including the protection of your data and other personal data. 

Disclosure

Law Enforcement

Under special conditions, Scentful may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Legal Requirements

Scentful may disclose your personal data in the good faith belief that such action is necessary to:

  • To comply with a legal obligation
  • To protect and defend the rights or property of Scentful
  • To prevent or investigate possible wrongdoing in connection with the service
  • To protect the personal safety of users of the service or the public
  • To protect against legal liability 

Data Security

We aim to keep your Data secure, but remember that no method of transmission over the Internet, or electronic storage method, is 100 percent safe. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Your Rights under the GDPR

Scentful aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data.

If you wish to be informed what personal data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

  • The right to access, update or to delete the information we have on you. Whenever made possible, you can access, update or request deletion of your personal data directly within your account settings section. If you are unable to perform these actions yourself, please contact us for assistance.
  • The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
  • The right to object. You have the right to object to our processing of your personal data.
  • The right of restriction. You have the right to request that we restrict the processing of your personal information.
  • The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
  • The right to withdraw consent. You also have the right to withdraw your consent at any time where Scentful relied on your consent to process your personal information.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

Service Providers

We may employ third party companies and individuals to facilitate our service (“Service Providers”), to provide the service on our behalf, to perform service-related services or to assist us in analysing how our service is used.

These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party service providers to monitor and analyse the use of our service.

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.

You can opt-out of having made your activity on the service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: http://www.google.com/intl/en/policies/privacy/ 

MailChimp

We use MailChimp for our email marketing. So when you subscribe to our newsletter the email address and name you submit will be held securely by them and the information also made accessible to us. MailChimp’s servers are based in the United States, so your information may be transferred to, stored, or processed in the US. MailChimp participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework, which certifies that is has adequate safeguards in place. As a respected email marketing provider MailChimp won’t share your information with any unauthorised third parties or contact you directly at any time – you can read their full privacy policy here: https://mailchimp.com/legal/privacy/

Payments

We use Stripe for processing payments made through this website. The information we received is only that needed to process your order and does not include personal financial information such as credit card numbers. These transactions are processed securely by Stripe and any information submitted as part of your payment falls under their own Privacy Policy, available to read here: https://stripe.com/gb/checkout/legal.

Links To Other Sites

Our service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children’s Privacy

Our service does not address anyone under the age of 18 (“Children”).

We deliberately do not collect personal data from anyone under the age of 18. If you are a parent or guardian and you are aware that we received personal data from your children, please contact us. If we realise that we have collected personal data from children without parental consent verification, we make efforts to erase such data from our servers.

Changes

Our Privacy Policy may be updated from time to time. We will post the new Privacy Policy on this page to notify you of any changes.

Before the change becomes effective, we will let you know by email and/or a prominent notice on our service and update the “effective date” at the top of this privacy policy.

You are advised to periodically review this Privacy Policy for any amendments. Changes to this Privacy Policy will take effect when posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us.