Last updated: 14 November 2026
This policy explains how Bare Scents Ltd ("we", "us") collects and uses your personal data when you visit barescents.co.uk or buy from us. We are the data controller for this data.
Who we are
Bare Scents Ltd, 25 Mackie Drive, Guisborough, Cleveland, England, United Kingdom, TS14 6DJ. Email support@barescents.co.uk, phone +44 7545 018111.
Data we collect
- Order details: your name, billing and delivery address, email address, phone number, the products you buy and your order history.
- Payment details: card payments are processed by Stripe. We do not see or store your full card number. We receive limited details from Stripe, such as the card type, last four digits and payment status.
- Messages: what you send us by email, phone or our contact form.
- Account details: if you create an account, your login email and password (stored in encrypted form).
- Technical data: your IP address, browser type and the pages you visit, which our hosting provider logs for security.
How we use your data and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Processing, delivering and supporting your order, including returns and refunds | Performance of a contract |
| Answering your questions and messages | Legitimate interests (customer service), or steps before a contract |
| Keeping tax and accounting records | Legal obligation |
| Preventing fraud and keeping the website secure | Legitimate interests |
We do not send marketing emails and we do not sell your personal data.
Who we share data with
- Stripe (Stripe Payments Europe Ltd and its affiliates) to process card payments and prevent fraud.
- Royal Mail to deliver your parcel and send delivery updates. We share your name, delivery address and, where provided, your email address or phone number.
- Hostinger, our website hosting provider, which stores the website and its data on our behalf.
- Google, which serves the fonts used on this website. Your browser connects to Google's servers to load them, which shares your IP address with Google.
- Professional advisers and authorities such as our accountant or HMRC, where needed for legal or tax reasons.
WordPress and WooCommerce, the software that runs this shop, operate on our hosting and do not receive your order data.
International transfers
Some of these providers may process data outside the UK. Where they do, they rely on UK adequacy regulations or approved safeguards such as the UK International Data Transfer Agreement or Addendum.
How long we keep data
- Order and payment records: 6 years after the end of the financial year they relate to, as required for tax purposes.
- Messages that are not linked to an order: up to 2 years.
- Customer accounts: until you ask us to delete the account, after which order records are kept for the period above.
Cookies
We only use cookies that are strictly necessary for the shop to work, such as keeping items in your basket (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_), keeping you signed in to your account, and fraud prevention cookies set by Stripe at checkout (__stripe_mid, __stripe_sid). We do not use analytics or advertising cookies, so no cookie consent banner is needed. You can delete cookies in your browser settings, but the basket and checkout may then not work.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, and to receive a copy in a portable format. To make a request, email support@barescents.co.uk. We will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.
Children
Our website is not intended for children under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy. The date at the top shows when it was last changed.