Privacy Policy

Welcome to Message in a Candle (“we”, “our”, “us”). We are committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Cyprus data protection laws.
 
This Privacy Policy explains how we collect, use, store, and protect your personal information when you purchase from us or interact with our website or social media pages.
 
 
2. Information We Collect
 
We may collect and process the following types of personal data:
 
a) Information You Provide to Us
•Full name
•Billing and delivery address
•Email address
•Phone number
•Personalised message content for candles
•Payment details (processed securely via third-party payment providers — we do not store full card details)
 
b) Automatically Collected Information
 
When visiting our website, we may collect:
•IP address
•Browser type
•Device information
•Website usage data (via cookies)
 
 
3. How We Use Your Information
 
We use your information to:
•Process and deliver your orders
•Create personalised messages in a candle 
•Communicate with you about your order
•Provide customer support
•Improve our website and services
•Comply with legal obligations
 
We do not sell or rent your personal data to third parties.
 
 
4. Legal Basis for Processing
 
Under GDPR, we process your personal data based on:
•Contractual necessity (to fulfil your order)
•Legal obligations (e.g., tax requirements)
•Legitimate interests (business improvement and fraud prevention)
•Your consent (for marketing communications, where applicable)
 
 
5. Data Retention
 
We retain personal data only as long as necessary to:
•Fulfil orders
•Comply with tax and accounting regulations
•Resolve disputes
 
Personalised message content is stored only for order processing purposes and is not reused or shared.
 
 
6. Your Rights
 
Under GDPR, you have the right to:
•Access your personal data
•Correct inaccurate data
•Request deletion of your data
•Restrict or object to processing
•Withdraw consent (for marketing)
•Lodge a complaint with the Cyprus Commissioner for Personal Data Protection
 
To exercise your rights, contact us at:
Email: 
 
 
7. Data Security
 
We take reasonable technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, or alteration.
 
 
8. Cookies
 
Our website may use cookies to enhance user experience. You can manage cookie preferences through your browser settings.
 
 
9. Contact Information
 
Message in a Candle
 
Business Address:
No5, Omonias, Alethriko, 7570
Cyprus
 
Email: sales@messageinacandle.store