Information We Collect

We collect the following information when you use our website or place an order:

  • Personal details: name, email address, billing/shipping address
  • Order information: products purchased, payment method (processed securely by third‑party providers)
  • Device data: IP address, browser type, pages visited
  • Cookies & analytics: used to improve site performance and customer experience

We do not collect sensitive personal data.

How We Use Your Information

We use your information to:

  • Process and deliver your orders
  • Communicate with you about your purchase
  • Respond to customer service enquiries
  • Improve our website and services
  • Send marketing emails (only if you opt in)
  • Comply with legal obligations

We never sell your data.

Legal Basis for Processing (GDPR)

We process your data under the following lawful bases:

  • Contract: to fulfil your order
  • Consent: for marketing emails
  • Legitimate interest: to improve our website and prevent fraud
  • Legal obligation: for tax and accounting purposes

How Your Information Is Stored

Your data is stored securely through:

  • Shopify (our e-commerce platform)
  • Payment processors such as Shopify Payments, PayPal, or your chosen provider
  • Email marketing tools (only if you subscribe)

All third‑party providers meet GDPR requirements.

Sharing Your Information

We only share your data with trusted service providers who help us run our business:

  • Shopify (website + checkout)
  • Payment processors
  • Shipping carriers
  • Email marketing services (if subscribed)
  • Analytics tools (Shopify analytics, cookies)

These providers only use your data to perform their services.

Some orders may be fulfilled by trusted third‑party suppliers. These suppliers receive only the information needed to deliver your order, such as your name, address, and contact details.

Cookies

Our website uses cookies to:

  • Remember your preferences
  • Improve site performance
  • Analyse website traffic

You can manage or disable cookies in your browser settings.

Your Rights (UK & EU GDPR)

You have the right to:

  • Access the personal data we hold about you
  • Request corrections
  • Request deletion (“right to be forgotten”)
  • Withdraw consent for marketing
  • Request a copy of your data
  • Object to certain types of processing

To exercise any of these rights, email us at support@burntorchidorganics.com.

Data Retention

We keep your information only as long as necessary to:

  • Fulfil your order
  • Meet legal, tax, and accounting requirements

Marketing data is kept until you unsubscribe.

Children’s Privacy

Our website is not intended for children under 16.
We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time.
The latest version will always be available on this page.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at:

support@burntorchidorganics.com
We respond within 24–48 hours.