This privacy policy explains what personal information Zoe’s Candles collects, why, who we share it with and what your rights are. We keep it to what we need to run the shop.
Who we are
Zoe’s Candles is responsible for your personal information.
Marcellus Emantslaan 3B, 2274 XL Voorburg, the Netherlands
Email: info@zoescandles.com
Chamber of Commerce (KvK): 87714396
What we collect
- When you order: your name, delivery and billing address, email address, phone number (if you give it), what you ordered and how you paid.
- Payment: payments are handled by our payment provider. We receive confirmation of the payment, but never your full card details.
- If you create an account: your email address, a password (stored encrypted) and your order history. An account is optional; you can always order as a guest.
- When you contact us: your name, email address and your message.
- Newsletter: your email address (and your name, if you give it) when you sign up through a form on our website and tick the consent box. If you sign up through the welcome pop-up, we also save the wording you agreed to, the page you came from and your browser and operating system type, but not your IP address.
- “Email me when it’s back”: your email address and the product you asked about, when you sign up for a sold-out product.
- Reviews: your name, email address, rating and review when you review a product. Only your name, rating and review are published, after we approve them.
- Website use: technical information such as your IP address and browser, and, only with your consent, analytics and marketing cookies. See our cookie policy.
Why we use it
- To handle your order: payment, shipping, order emails and customer service (needed to carry out our agreement with you).
- To keep our records: Dutch tax law requires us to keep order and invoice records (legal obligation).
- To send the newsletter: only if you signed up (consent). Every email has an unsubscribe link. The 10% welcome code from the pop-up is a thank-you for signing up; you can always order without it.
- To tell you a product is back: one email when the product you asked about is back in stock (consent). Then we delete your request.
- To ask for a review: one email, about three weeks after your order is completed (our legitimate interest in hearing how you like your order). Reply to that email if you’d rather not receive it again.
- To measure and improve the shop and our ads: Google Analytics, Google Ads and the Meta pixel, only after you accept these cookies (consent).
- To keep the website secure: preventing fraud and misuse (our legitimate interest).
Who we share it with
We never sell your personal information. We only share what’s needed with:
- PostNL (through our shipping software MyParcel): your name, address and email or phone number, to deliver your parcel and send Track & Trace updates.
- Our payment provider (WooPayments): to process your payment and prevent fraud.
- Our hosting and email providers: the website runs on a server in the EU; order emails are sent through our email provider.
- Our newsletter system (Notifuse): runs on our own server in the EU. Until it is connected, sign-ups from the website are kept on our website itself.
- Google and Meta: only if you accept analytics or marketing cookies.
Our product catalogue is also shared with Google and Meta so our products can appear in their shopping and ads services. That catalogue contains product information only, no personal information.
Some of these companies (our payment provider, Google and Meta) may process information outside the European Union. When they do, they use the safeguards required by EU law, such as the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses.
How long we keep it
- Orders and invoices: 7 years, as required by Dutch tax law.
- Your account: until you ask us to delete it.
- Newsletter: until you unsubscribe.
- “Email me when it’s back” requests: until the email is sent, then deleted.
- Reviews: as long as they are published; ask us to remove yours at any time.
- Messages to us: up to 2 years after we last spoke, unless they’re part of an order.
- Cookies: as listed in our cookie policy.
Your rights
You can ask us to see, correct or delete your personal information, to limit how we use it, or to send it to you in a common format. You can object to how we use it, and withdraw your consent at any time (for example by unsubscribing from the newsletter or changing your cookie choices). Email us at info@zoescandles.com; we reply within one month.
If you’re not happy with how we handle your information, you can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
We protect your information with secure (HTTPS) connections, up-to-date software and access limited to the people who need it. No method is completely secure, but we take care to keep your information safe.
Changes to this policy
When this policy changes, we update this page and the “Last updated” date at the top.