Last updated: [03.04.2026]
Gabriela’s Soul Light is committed to protecting your privacy and handling your personal data in a fair, lawful and transparent way.
This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, create an account, place an order, contact us, or otherwise interact with us.
- Who We Are
Business name: Gabriela’s Soul Light
Location: Bromley, London BR1
Email: contact@candlebygabriela.co.uk
For the purposes of UK data protection law, Gabriela’s Soul Light is the data controller of your personal data.
- What Personal Data We Collect
We may collect and process the following personal data:
- your name
- billing address
- shipping address
- email address
- telephone number
- account login details, if you create an account
- order and purchase history
- payment-related information needed to process your order
- customer service messages and enquiries
- device, browser and website usage data
- analytics and cookie-related data, where applicable
- How We Collect Your Data
We collect your data when you:
- place an order on our website
- create a customer account
- contact us by email or contact form
- browse our website
- make a payment through our checkout
- interact with cookies, analytics tools or similar technologies, where permitted
- How We Use Your Personal Data
We use your personal data to:
- process and fulfil your orders
- manage payments and transactions
- provide customer support
- manage your customer account
- communicate with you about your order
- arrange delivery in the UK and selected countries in Europe
- prevent fraud and protect our business
- improve our website, products and customer experience
- comply with legal, tax and accounting obligations
- monitor website performance and usage through Google Analytics
- Lawful Bases for Processing
We process your personal data under one or more of the following lawful bases:
- Contract – where processing is necessary to fulfil your order, manage your account, deliver your products or provide customer support
- Legal obligation – where we are required to keep records for tax, accounting or other legal purposes
- Legitimate interests – where we need to operate, improve and secure our website and business
- Consent – where required, including for non-essential cookies or tracking technologies
- Payments
We use third-party payment providers to process payments securely, including:
- Stripe
- Klarna
- Apple Pay
- Google Pay
When you place an order, certain personal data may be shared with the relevant payment provider so your payment can be processed and verified.
We do not store full payment card details on our website.
- Customer Accounts
If you create an account on our website, we will process your information so that you can:
- log in securely
- view your orders
- save your details for future purchases
- manage your account information
You are responsible for keeping your account login details confidential.
- Analytics, Cookies and Similar Technologies
We use Google Analytics and may use cookies and similar technologies to understand how visitors use our site, improve website performance and support essential website functions.
Some cookies are necessary for the website to function properly. Other cookies, including analytics cookies, may require your consent.
For more information, please see our Cookie Policy [if you create one], or the relevant cookie information shown on our website.
- Who We Share Your Data With
We may share your personal data with trusted third parties where necessary, including:
- payment providers
- website hosting and ecommerce service providers
- delivery and courier providers
- analytics providers such as Google
- professional advisers such as accountants, insurers or legal advisers
- regulators, authorities or law enforcement where required by law
We only share the personal data that is necessary for the relevant purpose.
- International Transfers
Some of the service providers we use may process data outside the UK. Where this happens, we take reasonable steps to ensure your personal data is protected with appropriate safeguards.
- How Long We Keep Your Data
We keep your personal data only for as long as necessary for the purposes set out in this Privacy Policy, including:
- to fulfil orders
- to maintain customer records
- to comply with tax and accounting obligations
- to deal with returns, disputes or legal claims
- to keep website security and business records
Where exact retention periods are not possible, we retain data based on business need and legal requirements.
- Your Rights
Under UK data protection law, you may have the right to:
- request access to your personal data
- request correction of inaccurate data
- request deletion of your data
- request restriction of processing
- object to certain processing
- request transfer of your data where applicable
- withdraw consent where processing is based on consent
To exercise any of your rights, please contact us at:
contact@candlebygabriela.co.uk
- Complaints
If you have concerns about how we use your personal data, please contact us first and we will do our best to resolve the issue.
You also have the right to make a complaint to the UK Information Commissioner’s Office (ICO):
https://ico.org.uk
- Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, misuse, disclosure, alteration or loss.
- Third-Party Links
Our website may include links to third-party websites or services. We are not responsible for the privacy practices of those third parties and recommend that you read their privacy policies separately.
- Changes to This Policy
We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised “Last updated” date.