Last updated: July 2026

Who We Are

Of Scent Ltd respects your privacy and is committed to protecting your personal information.

For the purposes of UK data protection law, the data controller is:

Of Scent Ltd
Company number: 16569056
Website: ofscent.co.uk
Email: hello@ofscent.co.uk

References in this Privacy Policy to “Of Scent”, “we”, “us” or “our” mean Of Scent Ltd.

 The Information We Collect

We may collect and process the following personal information:

• Your name
• Email address
• Telephone number, where provided
• Billing and delivery addresses
• Details of products purchased and your order history
• Payment and transaction information
• Account login and customer account details
• Communications sent through our contact form, email or social media
• Newsletter and marketing preferences
• IP address, browser type, device information and website activity
• Cookie identifiers and information collected through similar technologies
• Information relating to delivery, returns, refunds, complaints or customer support

Payments are processed securely by our payment service providers. We do not store your complete debit or credit card details.

 How We Collect Your Information

We collect personal information when you:

• Place an order
• Create a customer account
• Contact us or submit an enquiry
• Subscribe to our newsletter
• Request a return or refund
• Interact with our website
• Communicate with us through email or social media

We may also receive limited information from payment providers, delivery companies, website service providers and fraud-prevention services where necessary to complete an order or protect our business.

How and Why We Use Your Information

We use your information to:

• Process, confirm and deliver your orders
• Take and verify payments
• Provide order and delivery updates
• Manage customer accounts
• Handle returns, refunds and complaints
• Respond to questions and customer-service enquiries
• Detect and prevent fraud, misuse and security incidents
• Maintain, protect and improve our website
• Keep financial, tax and business records
• Send marketing communications where you have agreed to receive them
• Understand how customers use our website, where permitted
• Meet our legal and regulatory responsibilities

5. Our Lawful Bases

We rely on the following lawful bases when processing personal information:

Contract

We process information where it is necessary to fulfil a contract with you, including taking payment, processing an order, arranging delivery and managing a return or refund.

Legal obligation

We process and retain certain information where required for accounting, tax, fraud-prevention, consumer-protection or other legal purposes.

Legitimate interests

We may process information where necessary for our legitimate business interests, including operating and improving the website, protecting the business, responding to enquiries and preventing fraud, provided those interests do not override your rights.

Consent

We rely on consent for activities such as optional marketing emails and non-essential cookies where consent is required. You may withdraw your consent at any time.

A lawful basis must apply whenever a business processes personal data, and information needed to fulfil an order will usually rely on contract rather than marketing consent.

Marketing Communications

We may send you news about fragrance launches, exclusive releases, offers and Of Scent updates where you have agreed to receive marketing communications or where otherwise permitted by law.

You can unsubscribe at any time by:

• Clicking the unsubscribe link in a marketing email
• Contacting us at hello@ofscent.co.uk

Unsubscribing from marketing will not stop essential service messages relating to your order, account, payment, delivery, return or refund.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

• Operate the website and shopping basket
• Keep the website secure
• Remember preferences
• Understand website performance and usage
• Support analytics or marketing, where consent has been given

Strictly necessary cookies may be used without consent where they are required to provide a service requested by the customer. Non-essential analytics and advertising cookies should not be activated until valid consent has been provided.

Further details should be provided in our separate Cookie Policy, including the cookies used, their purpose, provider and duration.

You can manage your preferences through our cookie banner.

Who We Share Your Information With

We may share relevant personal information with trusted third parties where necessary, including:

• Payment processors
• Banks and payment networks
• Delivery and courier companies
• Website hosting and technical-support providers
• WordPress and WooCommerce service providers
• Email and transactional-email providers
• Newsletter and marketing platforms
• Analytics providers, where permitted
• Fraud-prevention and website-security providers
• Accountants, legal advisers, insurers and professional advisers
• Government authorities, regulators or law-enforcement bodies where legally required

We only provide the information reasonably required for the relevant service.

• Hosting provider: Hostinger
• Payment provider: WOOPAYMENTS / STRIPE
• Courier: ROYAL MAIL

International Transfers

Some service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we take reasonable steps to ensure that an appropriate lawful transfer mechanism and safeguards are in place, such as UK adequacy regulations or approved contractual protections.

UK GDPR contains specific requirements for restricted transfers outside the UK, including the use of appropriate safeguards where required.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, fraud-prevention and dispute-resolution requirements.

Our usual retention periods are:

• Order, payment and accounting records: normally up to six years after the end of the relevant financial year
• Customer-service enquiries: up to two years after the enquiry is resolved
• Customer account information: for as long as the account remains active, with transaction records retained where legally necessary
• Returns, refunds and complaint records: normally up to six years where connected to a transaction or legal claim
• Newsletter information: until you unsubscribe or withdraw consent
• Marketing suppression records: retained where necessary to make sure we respect your request not to receive further marketing
• Cookie and analytics information: according to the duration stated in our Cookie Policy

UK data protection law does not set one universal retention period, so data must not be held indefinitely without justification. Companies may also need to retain relevant accounting and tax records for six years.

How We Protect Your Information

We use reasonable technical and organisational measures to protect personal information from unauthorised access, alteration, disclosure, loss or misuse.

These measures may include:

• Secure website connections
• Restricted administrative access
• Strong passwords and account controls
• Secure payment processing
• Website security monitoring
• Software and plugin updates
• Backups and access controls

No online system is completely risk-free, but we take reasonable measures appropriate to the nature of the information we process.

Your Data Protection Rights

Depending on the circumstances, you may have the right to:

• Be informed about how your information is used
• Request access to your personal information
• Ask us to correct inaccurate or incomplete information
• Request deletion of your information
• Ask us to restrict processing
• Object to certain processing
• Request transfer of information in a portable format
• Withdraw consent at any time where processing is based on consent
• Object to direct marketing
• Complain about how your information has been handled

These rights are subject to legal conditions and exemptions.

To exercise a right, email:

hello@ofscent.co.uk

We may need to confirm your identity before completing a request.

Automated Decision-Making

We do not currently make decisions that have a legal or similarly significant effect on customers using solely automated processing.

Payment providers or fraud-prevention services may carry out automated checks as part of payment processing and security. Their own privacy policies explain how they use personal information.

Children’s Information

Our website and products are not directed towards children, and we do not knowingly collect personal information from children for marketing purposes.

Where we become aware that information has been provided by a child without appropriate authority, we will take reasonable steps to delete it.

Third-Party Links

Our website may include links to third-party websites or social-media platforms.

We are not responsible for the privacy practices of those third parties. Customers should review the privacy information provided by the relevant website or platform.

Changes to This Privacy Policy

We may update this Privacy Policy where our services, technology, suppliers or legal obligations change.

The latest version will be available on this page, and the “last updated” date will be amended accordingly.

How to Complain

Please contact us first if you have concerns about how your information has been handled:

Of Scent.Ltd
Email: hello@ofscent.co.uk

You also have the right to raise a complaint with the Information Commissioner’s Office, the UK regulator for data protection matters. Privacy notices should explain how individuals can complain about the handling of their data.