PRIVACY & YOUR DATA

Privacy Policy

Last updated: August 2026

At TimberLight Glow, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, make a purchase, contact us or otherwise interact with TimberLight Glow.

This policy also explains your rights under UK data protection law.

1. Who We Are

TimberLight Glow is a UK-based business creating hand-poured aromatherapy and functional apothecary candles in Yorkshire.

For the purposes of UK data protection law, TimberLight Glow is the data controller responsible for the personal information collected through this website and in connection with our business.

You can contact us using the details provided in Section 17 of this Privacy Policy.

2. What Personal Information We Collect

Depending on how you interact with us, we may collect and process information including:

  • Your name

  • Billing and delivery address

  • Email address

  • Telephone number, where provided

  • Order and purchase information

  • Information you provide when contacting us

  • Marketing preferences

  • Information about how you use and interact with our website

  • Technical information such as your IP address, browser type and device information

  • Cookie and analytics information

We only collect personal information that is reasonably necessary for operating our business, providing our services and fulfilling our legal obligations.

3. How We Collect Your Information

We may collect personal information when you:

  • Place an order through our website

  • Enter information during checkout

  • Contact us by email or through our website

  • Subscribe to marketing communications, where available

  • Interact with our website

  • Accept or manage cookies and similar technologies

Some technical information may be collected automatically when you use our website through cookies and similar technologies.

4. How We Use Your Information

We may use your personal information to:

  • Process and fulfil your orders

  • Take and manage payments

  • Arrange delivery of your purchases

  • Communicate with you about an order

  • Respond to enquiries or requests

  • Provide customer service

  • Manage returns, refunds or complaints

  • Maintain appropriate business and financial records

  • Improve the operation and performance of our website

  • Understand how visitors use our website

  • Prevent fraud or misuse of our services

  • Comply with legal and regulatory obligations

  • Send marketing communications where you have consented to receive them

We will not use your personal information for purposes that are incompatible with those for which it was originally collected unless permitted or required by law.

5. Our Legal Bases for Processing

UK data protection law requires us to have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely upon:

Contract — where processing your information is necessary to fulfil an order or take steps at your request before entering into a contract.

Legal obligation — where we need to process or retain information to comply with legal, accounting, tax or regulatory requirements.

Legitimate interests — where processing is reasonably necessary for the operation and improvement of our business, provided those interests do not override your rights and freedoms.

Consent — where you have actively agreed to a particular use of your information, such as receiving certain marketing communications.

Where processing is based on consent, you may withdraw that consent at any time.

6. Payments

Payments made through the TimberLight Glow website are processed securely using Squarespace Payments, Squarespace's integrated payment processing service.

Depending on your device, location and the options available at checkout, you may be able to pay using major credit or debit cards, digital wallets or other payment methods supported by Squarespace Payments.

Squarespace and its payment-processing partners may collect and process information required to complete your transaction, including your name, billing details and payment information.

TimberLight Glow does not directly receive or store your complete debit or credit card details.

Payment information is handled securely by the relevant payment-processing services in accordance with their own privacy and security policies.

7. Squarespace and Other Service Providers

Our website is hosted and operated using Squarespace.

Squarespace may process certain personal and technical information on our behalf in order to provide website hosting, ecommerce, checkout, analytics and other website functionality.

We may also use trusted third-party service providers where necessary to operate our business. These may include:

  • Payment processors

  • Delivery and postal services

  • Website and technology providers

  • Email and communications providers

  • Analytics services

  • Professional advisers or service providers where reasonably necessary

We only share information that is reasonably necessary for those providers to perform their services.

These organisations may process your information in accordance with their own privacy policies and applicable data protection requirements.

8. Cookies and Analytics

Our website may use cookies and similar technologies to enable essential website functions, understand how visitors use the website and improve its performance.

Some cookies are necessary for the website to operate correctly. Other cookies, including certain analytics or marketing cookies, may require your consent.

Where required, you will be given the opportunity to manage your cookie preferences.

Information collected through cookies may include your IP address, browser information, device information, pages visited and information about how you interact with the website.

You can also control or delete cookies through your browser settings, although disabling certain cookies may affect how the website functions.

9. Email Marketing

You can choose to subscribe to the TimberLight Glow mailing list through our website.

If you subscribe, we may use your name and email address to send you newsletters and information about TimberLight Glow products, new launches, special offers and other relevant news.

We will only send you marketing emails where we have an appropriate lawful basis to do so.

You can unsubscribe at any time by clicking the unsubscribe link included in our marketing emails or by contacting us directly.

Withdrawing from marketing communications will not affect essential emails relating to orders you have placed, such as order confirmations, dispatch notifications or customer service communications.

We will not sell your email address or personal information to third parties for their own marketing purposes.

10. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax and reporting requirements.

Order and transaction records may therefore be retained for longer periods where required for business, tax or legal purposes.

When personal information is no longer required, we will delete it or otherwise dispose of it appropriately.

11. Sharing Your Information

We do not sell your personal information.

We may share personal information with trusted third parties where reasonably necessary to operate our business, fulfil orders or comply with legal requirements.

This may include payment processors, delivery providers, website providers and other service providers acting on our behalf.

We may also disclose information where required by law, regulation, court order or another lawful authority, or where reasonably necessary to establish, exercise or defend legal claims.

12. International Data Transfers

Some of the service providers used to operate our website or business may process or store information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be used where required by UK data protection law.

These safeguards may include recognised adequacy regulations, approved contractual protections or other legally recognised mechanisms designed to protect personal information transferred internationally.

13. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights including:

  • The right to be informed about how your personal information is used

  • The right to request access to your personal information

  • The right to request correction of inaccurate or incomplete information

  • The right to request deletion of your personal information in certain circumstances

  • The right to request restriction of processing in certain circumstances

  • The right to data portability in certain circumstances

  • The right to object to certain types of processing

  • Rights relating to automated decision-making and profiling where applicable

  • The right to withdraw consent where processing is based upon consent

You also have the right to object to certain processing of your personal information where we rely upon legitimate interests, and you have an absolute right to object to your personal information being used for direct marketing.

If you wish to exercise any of your data protection rights, please contact us using the details provided below.

We may need to verify your identity before responding to certain requests.

14. Children's Privacy

Our website and products are not directed specifically at children, and we do not knowingly seek to collect personal information from children.

If we become aware that personal information relating to a child has been collected inappropriately, we will take reasonable steps to delete it.

15. Security

We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

We also use reputable service providers, including Squarespace and our payment providers, to help provide secure website and transaction services.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

16. Changes to This Privacy Policy

We may update this Privacy Policy occasionally to reflect changes to our website, business practices, services or legal requirements.

When changes are made, the updated version will be published on this page and the "Last updated" date will be amended accordingly.

We recommend reviewing this Privacy Policy periodically.

17. Contact Us

If you have any questions about this Privacy Policy, how we use your personal information or wish to exercise any of your data protection rights, please contact:

TimberLight Glow

Email: contact@timberlightglow.co.uk

Postal address:
TimberLight Glow
Office 9151 
321-323 High Road, 
Chadwell Heath, 
Essex 
RM6 6AX. 
UK

18. Complaints

If you have concerns about how TimberLight Glow handles your personal information, please contact us first so that we have an opportunity to address your concerns.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

Information about making a complaint and your data protection rights is available from the Information Commissioner's Office.g