Privacy notice

Who is responsible

Sam June Cameron trading as SJC Home Fragrance is the controller of personal information described in this notice.

Information we collect

• Identity and contact details, including your name, email, telephone number, billing and delivery address.
• Order information, products purchased, amount paid, delivery status, correspondence and returns.
• Payment references and payment status supplied by Stripe. SJC does not receive your full card number or security code.
• Messages, reviews, preferences and marketing choices you give us.
• Basic technical, security and website-use information needed to operate and protect the shop.

How and why we use it

• Contract: to take payment, prepare, deliver, support, cancel, return and refund orders.
• Legal obligation: to keep tax and accounting records, respond to legal rights and prevent unlawful activity.
• Legitimate interests: to secure and improve the shop, answer enquiries, manage and forecast stock, prevent fraud, understand sales performance and develop products and collections that better reflect customer demand, where those interests do not override your rights.
• Consent: for optional email marketing or non-essential cookies, where used. You may withdraw consent at any time.

Sales analysis and product development

We may analyse order history, broad customer preferences, reviews, returns and customer-service feedback internally to understand which fragrances, vessels, collections and seasonal products are most useful to our customers. We use this insight to plan production, improve products, manage stock and measure business performance. Wherever practical, we use totals, trends or information that does not directly identify an individual. We do not sell this information, use it to make decisions that produce legal or similarly significant effects, or disclose individual customer profiles to retail partners for their own marketing.

You may object to processing based on legitimate interests by contacting us. We will consider your request and stop unless we have a compelling lawful reason to continue.

Marketing communications

Providing details to place an order does not automatically subscribe you to general marketing. We send promotional email or text messages only where you have consented, or where the limited existing-customer exception applies and we offered a clear opportunity to opt out when collecting your details. Every promotional message will include a simple way to unsubscribe. We keep a suppression record where necessary to respect an opt-out.

Product-testing purchases and feedback

If you join the SJC Testing Circle through an eligible first purchase, we use the identity, contact and delivery details collected securely during checkout, together with purchases and feedback, to administer the pilot, protect it from misuse, improve products and investigate safety or quality concerns. Feedback is private by default. We publish a quotation only with separate permission and identify it as incentivised tester feedback. A Testing Circle purchase does not automatically subscribe the customer to marketing.

Discovery Box purchases and credits

For the limited Discovery Box pilot, Stripe collects the checkout and delivery information needed to process payment and deliver the box. SJC links the order, internal customer reference and later £2.99 candle credit so the credit can be issued, validated and used only once. To administer the one-box-per-address rule, SJC converts the normalised delivery address into a protected keyed fingerprint and checks it against prior paid claims for the offer. The fingerprint is not used for marketing and does not reveal the address without the separate secret held by SJC.

A possible duplicate, Northern Ireland address or shared-home match is held for manual review rather than decided solely by an automated process. Customers may contact us to explain shared accommodation or request correction. Order records follow the normal legal retention period; unused duplicate-check fingerprints and credit-administration records are reviewed after 12 months and deleted or anonymised when no longer required. Purchasing a Discovery Box does not join the Testing Circle or subscribe the customer to marketing.

Who receives information

We share only what is reasonably necessary with service providers that help us operate: Stripe for checkout and payment processing; delivery carriers; website hosting and security providers; email or customer-service providers; and professional advisers or public authorities where legally required. We do not sell personal information.

International processing

Some providers may process information outside the United Kingdom. Where this occurs, we rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Stripe’s own privacy notice applies to information it collects on its hosted checkout.

How long we keep information

Order, payment and accounting records are normally retained for up to six years where needed for legal, tax and dispute purposes. Routine enquiries are normally retained for up to two years. Marketing details are kept until you unsubscribe or we determine they are no longer needed. Security records are retained only for a proportionate period. We may keep information longer where a dispute or legal duty requires it.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection to use of your information. You may also withdraw consent. Contact us to exercise a right; we may need to verify your identity.

You may complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the opportunity to resolve your concern first.

Cookies, local storage and anonymous analytics

The shop uses essential browser storage to remember items placed in your bag and necessary security technologies to operate checkout. Stripe may use necessary technologies on its hosted payment page. With your permission, SJC also records anonymous website events such as page views, product views, shopping-button, email-link and telephone-link clicks and the broad source of a visit (for example Direct, Facebook, Instagram or TikTok). This measurement does not record your name, email, address, complete referral URL or payment information. You may decline it and still use the shop normally.

Security and changes

We use reasonable organisational and technical safeguards and restrict access to people and providers who need it. No internet service can guarantee absolute security. We may update this notice as the business or law changes; the date above identifies the current version.