Last updated: 5 September 2026
Data controller
For the purposes of UK GDPR, the data controller is STOA FRAGRANCE LTD, a company registered in England and Wales, company number 17376012, registered office Unit 6 Kingsbury Business Park, Kingsbury Road, Sutton Coldfield B76 9DL. Contact: hello@stoafragrance.com
What we collect
- Order information. name, delivery address, email, phone, order contents. Needed to fulfil your order.
- Payment information. processed by our payment provider. We never see or store your full card details.
- Marketing information. your email address, if you subscribe. Consent-based, withdrawable at any time.
- Usage information. pages viewed, device and browser type, via cookies and analytics.
Why we use it
| Purpose | Lawful basis |
|---|---|
| Fulfilling orders | Performance of a contract |
| Customer service | Performance of a contract |
| Marketing emails | Consent |
| Analytics & advertising | Consent (via cookie banner) |
| Fraud prevention, legal records | Legitimate interests / legal obligation |
Who we share it with
Shopify (store and order platform) · Airwallex (payments) · Klaviyo (email) · Royal Mail (delivery) · Meta and TikTok (advertising, only with your cookie consent) · Google Analytics.
Some of these process data outside the UK. Where they do, transfers are covered by UK-approved safeguards.
How long we keep it
Order records for 6 years (tax and legal requirements). Marketing data until you unsubscribe.
Your rights
Under UK GDPR you can request access to your data, correction, deletion, restriction, portability, or object to processing. Email hello@stoafragrance.com. You can also complain to the Information Commissioner's Office at ico.org.uk.