Privacy notice
Privacy
Last updated
This notice explains what information Lanthorn Candles Ltd collects when you use this site and order from it, why, and what your rights are. We sell online only; our workshop on Chandler’s Close, Edinburgh, isn’t open to visitors.
The short version
- There are no cookies, no analytics, no advertising and no tracking.
- When you order, we collect what we need to deliver it and to take payment: your name, email address, delivery address, phone number if you give it, and what you ordered.
- Payments are processed by Stripe. Your card details go straight to Stripe in its own secure form; they never reach our servers.
- Pages other than the checkout make no requests to anyone else. The checkout loads Stripe’s payment form, and only the checkout.
What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Name, delivery address, phone number (optional) | To deliver your order and let the courier reach you | Performing our contract with you |
| Email address | To confirm your order, send your receipt and answer questions about it | Performing our contract with you |
| What you ordered, and what you paid, in which currency | To fulfil the order, handle returns and keep accounts | Contract, and our legal obligation to keep tax records |
| Messages you send us, and newsletter sign-ups | To reply to you, and to send the newsletter you asked for | Your request; for the newsletter, your consent, which you can withdraw at any time |
Payments: Stripe
Payments are processed by Stripe Payments Europe, Ltd. and its affiliates (“Stripe”). On the payment step, the checkout loads Stripe.js from js.stripe.com and shows Stripe’s payment form. What you type into that form goes directly to Stripe, not to us: we receive only a confirmation that the payment succeeded, and the last four digits and brand of the card.
While the payment step is open, Stripe.js collects information about your device and how the page is used (for example your browser, IP address and how you interact with the form), so Stripe can detect and prevent fraud. Stripe is responsible for that information as a controller. You can read how Stripe handles it in Stripe’s privacy policy.
What is stored in your browser
The site uses your browser’s local storage to remember seven things: your bag (lanthorn.cart), your theme (lanthorn.theme), whether you closed the announcement bar (lanthorn.announcement), your saved products (lanthorn.wishlist), products you viewed recently (lanthorn.recent), your currency if it isn’t pounds (lanthorn.currency), and a summary of your last order for the confirmation page (lanthorn.lastOrder: the order number, items, totals, currency, delivery method, and your first name and town; not your email, phone or street address). None of it is sent to us. The site also keeps offline copies of its own files through a service worker, which holds no personal information.
Why there is no cookie banner
We set no cookies, and local storage only remembers choices you made and things you put in your bag. That is strictly necessary for what you asked the site to do, so there is nothing to consent to. Stripe’s fraud-prevention signals on the payment step are part of taking the payment you asked us to take.
Who else sees your information
- Stripe, to take payment (above).
- Our couriers (Royal Mail and our tracked courier service in the UK, and our international carrier), who receive your name, address and phone number to deliver the parcel, and customs authorities for international parcels.
- Our hosting provider, which runs the servers that receive your order.
We never sell your information or share it for advertising.
How long we keep it
Order and payment records are kept for six years after the end of the financial year they relate to, because tax law requires it. Messages are kept for as long as we need to answer them and then for up to two years. You can unsubscribe from the newsletter at any time, and we then delete your address from the list.
Your rights
Under UK data protection law you can ask for a copy of the information we hold about you, and ask us to correct it, delete it, or stop using it. Write to support@lanthorn.shop. You can also complain to the Information Commissioner’s Office, the UK regulator for data protection.
Contact
Lanthorn Candles Ltd, 7 Chandler’s Close, Canongate, Edinburgh EH8. Email support@lanthorn.shop. If this notice changes, the date at the top of the page will change with it.