Privacy Policy

Data We Collect

We collect the following categories of personal data:

• Personal information: Name, email address, telephone number, and shipping / billing address — collected when you place an order, create an account, or subscribe to our email communications.
• Payment information: Payment transactions are processed by Shopify Payments. We do not store card details on our own servers.
• Browsing data: IP address, browser type, pages visited, and session duration — collected automatically via cookies and analytics tools.
• Order history: Products purchased, order values, and communication preferences.

Email Marketing Consent

We collect email addresses through our Fragrance Society signup forms (on our website and at checkout) to send you curated content, new fragrance releases, and exclusive member offers.

Your email address is stored securely in Klaviyo, our email marketing platform. We will only send you marketing emails if you have provided explicit consent by submitting your email through one of our signup forms and confirming that you wish to receive marketing communications.

You may unsubscribe at any time by clicking the unsubscribe link at the bottom of any email we send, or by contacting us at admin@testament-collection.com. Unsubscribing removes you from our marketing list; transactional emails related to active orders will continue to be sent.

SMS Marketing Consent

Where SMS marketing is available, we will only send text messages to customers who have provided explicit, separate opt-in consent for SMS communications. SMS marketing consent is independent of email marketing consent — agreeing to receive emails does not automatically enrol you in SMS communications.

You may opt out of SMS messages at any time by replying STOP to any message from us. Standard message and data rates may apply depending on your mobile network provider.

Cookie Consent

We use a cookie consent banner (powered by CookieConsent) that appears on your first visit to the site. Cookies are grouped into the following categories:

• Strictly necessary (always active): Essential for the website to function — session management, shopping cart, security. These cannot be disabled.
• Analytics (opt-in): Helps us understand how visitors interact with our site so we can improve it. Activated only with your consent.
• Marketing (opt-in): Used to deliver relevant advertising and track campaign performance. Activated only with your consent.

You can review and update your cookie preferences at any time via the cookie settings link in the website footer. Withdrawing consent does not affect the lawfulness of processing based on consent given before withdrawal.

How We Use Your Data

We use the data we collect for the following purposes:

• Processing and fulfilling your orders
• Providing customer support and responding to enquiries
• Sending marketing communications where consent has been given
• Improving our website, products, and services
• Complying with legal and regulatory obligations

Third-Party Services

We use the following third-party services to operate our business. Each processes data in accordance with their own privacy policies:

• Shopify: Our e-commerce platform. Handles storefront, checkout, and order management.
• Klaviyo: Our email marketing platform. Stores subscriber data and manages marketing flows.
• Analytics providers: We use analytics tools to understand site usage. Data is collected in aggregate and anonymised where possible.

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

Your Rights (GDPR)

Under the UK GDPR and Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no compelling reason for continued processing.
• Right to restriction: Request that we limit processing of your data in certain circumstances.
• Right to data portability: Request transfer of your data to another organisation in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests, including for direct marketing purposes.

To exercise any of these rights, contact us at admin@testament-collection.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Data Retention

Order and transaction data is retained for as long as required to fulfil legal, tax, and accounting obligations — typically seven years in line with UK HMRC requirements. Marketing data (email subscribers) is retained until consent is withdrawn or until you request deletion. Account data is retained for as long as your account is active.

Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Your continued use of the site following any changes constitutes your acceptance of the updated policy.

Contact

For any privacy-related questions or to exercise your data rights, please contact:

Testament London LTD

admin@testament-collection.com