Privacy policy

Last updated: 18 October 2026

This Privacy Policy explains how The Scent Master (“we”, “us” or “our”) collects, uses and shares personal information when you visit our website, make a purchase, create an account, submit a review, contact us or otherwise use our services.

The Scent Master is the data controller responsible for the personal information described in this policy. Our online shop is powered by Shopify.

Who we are and how to contact us

If you have a question about this Privacy Policy, how we use your personal information or your privacy rights, please contact:

The Scent Master
77–79 Victoria Street
Blackburn
BB1 6DS
United Kingdom

Email: hello@thescentmaster.co.uk

Personal information we collect

The personal information we collect depends on how you use our website and services. It may include:

Contact information, including your name, billing and delivery addresses, email address and telephone number.
Account information, including your login details, account preferences and saved settings.
Order and transaction information, including products viewed, added to your basket, purchased, returned or cancelled, order values, discounts, delivery choices and transaction status.
Payment information. Payment card information is processed by Shopify and the relevant payment provider. We generally receive payment confirmation, transaction status and limited payment details rather than your complete card number.
Communications, including messages, enquiries, complaints, returns information and other correspondence with us.
Review information, including ratings, written reviews, photographs or other content that you choose to submit.
Device and usage information, including your IP address, browser and device type, operating system, general location, referring website, pages viewed and interactions with our website.
Marketing and privacy preferences, including your email, SMS, analytics, advertising and data-sharing choices.
Fraud and security information, including information used to detect suspicious activity and protect customers, payments and our services.

Please do not include sensitive personal information in product searches, reviews or ordinary messages unless it is necessary for us to deal with your request.

How we collect personal information

We may collect personal information:

directly from you when you place an order, create an account, contact us, submit a review or provide information through our website;
automatically through our website, cookies and similar technologies, subject to your privacy choices;
from Shopify and the applications used to operate our shop;
from payment, delivery, fraud-prevention and customer-service providers;
from advertising platforms when you interact with our advertising; and
from publicly available sources where permitted by law.

How and why we use personal information

We use personal information for the following purposes:

to display products and operate our online shop;
to process payments, fulfil orders and arrange delivery;
to administer accounts, returns, refunds, exchanges and cancellations;
to respond to enquiries and provide customer support;
to publish and administer product reviews;
to understand how customers use our website and improve its content, products and performance;
to send marketing communications where permitted;
to measure advertising and show relevant advertisements where you have given the required consent;
to maintain security, prevent fraud and protect our customers and business;
to maintain financial, tax and business records;
to establish, exercise or defend legal claims; and
to comply with legal and regulatory obligations.

Our lawful bases

Under UK data protection law, we must have a lawful basis for using personal information. Depending on the activity, we rely on:

Performance of a contract, where we need the information to accept and fulfil an order, process a payment, deliver products, administer an account or provide requested customer support.
Legal obligation, where we must retain or disclose information to comply with tax, accounting, consumer-protection, regulatory or other legal requirements.
Legitimate interests, where it is reasonably necessary to operate and secure our business, prevent fraud, answer enquiries, improve our services or protect legal rights, provided those interests are not overridden by your rights and interests.
Consent, for optional analytics, advertising technologies and electronic marketing where consent is required. You may withdraw consent at any time.

If information is required to enter into or perform a contract with you and you do not provide it, we might be unable to accept or fulfil your order or provide the requested service.

Cookies and privacy choices

Our website uses essential cookies and similar technologies that are necessary for functions such as security, checkout, payments, account access and remembering your privacy choices.

We also use optional technologies for analytics and marketing. Where consent is required, these optional technologies are not activated unless you choose to allow them. The shop will continue to work if you decline optional analytics and marketing.

You can accept, decline or manage optional uses through our cookie banner. You can change your decision later by selecting Cookie preferences in the website footer. Withdrawing consent does not affect processing that lawfully took place before withdrawal.

Analytics

Matomo

We use Matomo analytics to understand how our website is used and to improve customers’ shopping experience. Depending on your activity, Matomo may record page, product, collection, site-search, basket, checkout-stage and completed-purchase events.

Our Matomo tracking is configured without analytics cookies and is activated only after the relevant analytics consent has been granted. Refusing analytics does not prevent you from using the shop or placing an order.

We minimise the information sent to Matomo. Website addresses are cleaned to remove unnecessary parameters and sensitive account, order and checkout references. We do not intentionally send names, email addresses, telephone numbers, postal addresses, complete payment information or Shopify customer identifiers to Matomo.

For completed purchases, Matomo receives product and order-value information together with a one-way pseudonymous order reference. This allows us to measure ecommerce performance without sending the original Shopify order identifier. An IP address may be processed while an analytics request is transmitted, but it is shortened before storage.

Detailed analytics records are reviewed at least monthly and are retained only while reasonably required to validate reporting, understand website use and investigate measurement problems. They are deleted or anonymised when no longer required for those purposes. Aggregated reports that no longer identify an individual may be retained for longer.

Reviews

We use Judge.me to provide product reviews, identify verified purchases and, where permitted, send requests for customers to review products they have purchased. Judge.me may process relevant order, contact, review, device and activity information for these purposes.

A review that you choose to publish may be visible publicly alongside the display name and other information shown when you submit it. Please do not include personal or sensitive information in a public review.

Judge.me’s privacy information is available at judge.me/privacy.

Advertising and social-media services

We use the Facebook and Instagram service provided by Meta and the TikTok service for advertising, campaign measurement and attribution. Their non-essential pixels collect information only after the required analytics and marketing choices have been granted through Shopify’s privacy controls.

Depending on the service and applicable law, these providers may act as separate data controllers for some processing. They may combine information received through our shop with information they hold from other services.

Meta’s privacy information is available at facebook.com/privacy/policy.
TikTok’s privacy information is available at tiktok.com/legal.

You can withdraw analytics or marketing consent through Cookie preferences in the website footer.

Marketing communications

We send promotional email or SMS messages only where you have consented or where applicable law otherwise permits us to contact existing customers. Every promotional message provides a way to unsubscribe.

If you unsubscribe, we may retain a minimal suppression record so that we can respect your decision. You may still receive non-promotional communications concerning orders, payments, delivery, security or customer-service requests.

Shopify

Our shop is hosted by Shopify. Shopify processes personal information to provide services including website hosting, checkout, payments, security, fraud prevention, customer accounts and order administration.

Information submitted through our shop is transmitted to Shopify and may also be shared with service providers located in countries other than the country where you live.

Shopify Network Intelligence is currently enabled. This allows Shopify to use information from interactions with our shop, other merchants and Shopify to provide enhanced services, including security, business insights and, where the required consent has been given, advertising and personalisation.

Shopify is responsible for some of this processing. You can learn more in the Shopify Consumer Privacy Policy and exercise applicable choices through the Shopify Privacy Portal.

How we share personal information

We may share personal information with:

Shopify and applications used to operate our shop;
payment processors and financial institutions;
delivery, fulfilment and returns providers;
analytics, review, customer-service, hosting, security and IT providers;
advertising and social-media providers where the relevant consent has been granted;
accountants, insurers, legal advisers and other professional advisers;
regulators, courts, law-enforcement agencies or other authorities where required or permitted by law;
a purchaser, investor or adviser involved in a proposed sale, merger, restructuring or transfer of our business; and
another organisation where you direct us or give us permission to do so.

Service providers acting on our behalf may use personal information only for the agreed service and in accordance with their contractual and legal obligations.

Sale, sharing and targeted advertising

We do not sell personal information for money. However, certain disclosures to advertising providers may be treated as a “sale”, “sharing” or use for “targeted advertising” under some privacy laws.

Where these rights apply, you can use the Your Privacy Choices link in our website footer to opt out. Where required, Shopify also recognises an applicable Global Privacy Control signal sent by your browser or device.

International transfers

Some service providers may process personal information outside the United Kingdom. Where a restricted international transfer takes place, we or the relevant provider use an appropriate safeguard required by applicable law. This may include an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another lawful transfer mechanism.

How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain security, meet legal and accounting requirements, resolve disputes and establish or defend legal claims.

The criteria we consider include:

how long you maintain an account or an active relationship with us;
how long information is needed to complete an order, return, refund or customer-service request;
the statutory period for which financial and tax records must be retained;
whether information is needed to prevent fraud, maintain security or resolve a dispute;
whether you have withdrawn consent or requested deletion;
the retention practices of providers used to deliver our services; and
applicable limitation periods and legal or regulatory requirements.

When information is no longer required, we delete or anonymise it. Where immediate deletion from backups is not reasonably possible, the information is isolated from ordinary use until it is overwritten or securely deleted.

Security

We use proportionate technical and organisational measures intended to protect personal information against unauthorised access, alteration, loss or disclosure. However, no website, transmission method or storage system can be guaranteed to be completely secure.

Please keep account passwords confidential and contact us if you believe an account or transaction has been compromised.

Automated fraud checks

Shopify, payment providers and fraud-prevention services may use automated indicators to identify suspicious transactions. These indicators may be used to delay, decline or refer an order for additional review.

Where applicable law gives you rights concerning a decision based solely on automated processing that has a legal or similarly significant effect, you may contact us to request further information or human review.

Your privacy rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

request access to the personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of personal information;
request restriction of processing;
object to processing based on legitimate interests or for direct marketing;
receive certain information in a portable format;
withdraw consent at any time where processing relies on consent;
opt out of sale, sharing or targeted advertising where applicable; and
complain to a data-protection supervisory authority.

These rights are not absolute and may not apply in every circumstance. We may need to request information to confirm your identity before acting on a request.

To exercise a right concerning The Scent Master, email hello@thescentmaster.co.uk. To exercise a right concerning processing for which Shopify is responsible, use the Shopify Privacy Portal.

Complaints

Please contact us first if you have concerns about how we use your personal information so that we can try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data-protection regulator. Information about making a complaint is available at ico.org.uk.

Children’s information

Our services are not directed specifically at children, and we do not knowingly collect children’s personal information in circumstances where parental permission is legally required. A parent or guardian who believes that a child has provided personal information to us may contact us to request its removal.

Third-party websites

Our website may link to websites or services operated by other organisations. Their privacy practices are governed by their own policies, and we are not responsible for websites or services that we do not control.

Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change. We will publish the updated policy on this website, change the “Last updated” date and provide any additional notice required by law.

Item added to your cart