Privacy policy

Placeholder wording. This page is structured filler so the site is complete. Replace it with your own policy and have it checked by someone qualified before you publish — what you must say depends on the tools, payment provider and analytics you actually use.

1. Who we are

Khris & George (“we”, “us”) sells hand-poured wax candles from a studio in the United Kingdom. For the purposes of UK data protection law we are the data controller for the information described on this page.

Registered address: Unit 4, Example Works, 1 Placeholder Lane, Your Town, AB1 2CD. Contact: hello@khrisandgeorge.co.uk.

2. What we collect

Information	When we get it
Name, email address, delivery and billing address, phone number	When you place an order or contact us
Order history and correspondence	When you buy from us or email us
Email address only	When you sign up to the studio letter
Technical data such as browser type, device and pages visited	Automatically, if you accept analytics cookies

We do not see or store your full card details. Card payments are handled by our payment provider, who passes us only a confirmation and the last four digits.

3. How we use your information

To take payment for and deliver your order.
To answer your questions and handle returns.
To send the studio letter, if you have asked for it.
To keep proper accounting records.
To understand which pages people find useful, in aggregate.

We do not sell your personal information, and we do not share it for anyone else's marketing.

4. Our lawful bases

Contract — to fulfil an order you have placed.
Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
Legal obligation — to keep tax and accounting records for the period the law requires.
Legitimate interests — to keep the site secure and to prevent fraud.

Only the suppliers we need to run the shop, and only what they need:

Our payment provider, to take payment.
Our delivery couriers, to get your parcel to you.
Our email provider, to send order confirmations and the studio letter.
Our website host, which stores this site's files and logs.
Our accountant, and HMRC where required.

Each of them acts on our instructions under a written agreement.

6. Cookies and local storage

This site sets no advertising cookies. What it does use:

Name	Purpose	Kept for
`kg-basket`	Remembers what you have added to your basket. Stored in your browser's local storage, not sent to us.	Until you clear it
Analytics cookies	Only if you accept them — counts visits so we know which pages are worth keeping.	Up to 24 months

You can clear or block cookies and local storage in your browser settings. The basket is the only thing that will stop working.

7. How long we keep it

Order and payment records: seven years, for tax purposes.
Customer correspondence: three years after it is resolved.
Newsletter subscriptions: until you unsubscribe, plus a short record that you did.
Analytics data: up to 24 months, in aggregate.

8. Your rights

Under UK data protection law you can ask us to:

give you a copy of the information we hold about you;
correct anything that is wrong;
delete information we no longer need to keep;
restrict or object to how we use it;
send a copy to another provider;
stop sending you marketing, at any time.

Email hello@khrisandgeorge.co.uk and we will respond within one month. There is no charge.

9. International transfers

Some of our suppliers store data outside the UK. Where that happens we rely on UK adequacy regulations or on the International Data Transfer Agreement, so your information keeps the same protection it has here.

10. Changes to this policy

If we change how we handle personal information we will update this page and change the date at the top. Significant changes will be mentioned in the studio letter.

11. Contact and complaints

Questions or complaints go to hello@khrisandgeorge.co.uk, or write to us at the studio address above.

If you are not happy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.