1. Who we are

This website is operated by Paco Perfumerias SL Ltd, a company registered in England and Wales under company number 14862509. We are the data controller responsible for your personal data.

This Privacy Policy explains how we collect and process your personal data through your use of our website, including any data you provide when you make a purchase, create an account, sign up for our newsletter or contact us.

Children

Our website is not intended for children under the age of 13, and we do not knowingly collect personal data relating to children under 13. If you are under 13, you may only use our services with the involvement and consent of a parent or guardian.

Contact details

Company: Paco Perfumerias SL Ltd
Email: support@pacoperfumerias.co.uk
Address: Unit A2, Tancock's Business Park, Four Cross Avenue, Willand, Cullompton, Devon, EX15 2FB
Company number: 14862509

Your right to complain

You have the right to complain at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk. We would appreciate the chance to deal with your concerns first, so please contact us before you approach the ICO.

2. The personal data we collect

Personal data means any information from which you can be identified. It does not include data where your identity has been removed. We may collect and use the following:

• Identity data: first name, last name, username or similar identifier, title, and gender.
• Contact data: billing address, delivery address, email address and telephone numbers.
• Financial data: payment method information. We do not store full card details. Full payment information is processed securely by our payment providers.
• Transaction data: details of payments you make and products you have bought from us.
• Technical data: IP address, browser type and version, time zone and location, operating system and platform, and other technical details of the devices you use.
• Profile data: your username and password, orders you have made, your interests, preferences, feedback and review responses.
• Usage data: information about how you use our website, including pages visited and products viewed.
• Marketing and communications data: your preferences for receiving marketing from us and your communication preferences.

We also collect aggregated data, such as statistical or demographic data, for analysis. Aggregated data is not personal data as it does not identify you. If we combine it with your personal data so that it can identify you, we treat the combined data as personal data.

3. How we collect your data

Directly from you

You give us your identity, contact and financial data when you fill in forms on our website or contact us by email or phone. This includes when you place an order (as a registered customer or guest), create an account, subscribe to our newsletter, enter a promotion or survey, request help, or leave a review.

Automatically

As you use our website, we automatically collect technical and usage data through cookies and similar technologies. Please see our Cookie Policy further down this page for details.

From third parties

We may receive data about you from analytics providers such as Google, advertising networks such as Google Ads, payment providers PayPal and Braintree, our delivery provider Royal Mail, our reviews provider Trustpilot, and publicly available sources such as Companies House.

4. How we use your data

We only use your personal data when the law allows us to. Most commonly, we rely on one or more of the following legal bases: to perform our contract with you, for our legitimate business interests, to comply with a legal obligation, or with your consent. We rely on consent mainly for sending marketing, and you can withdraw it at any time.

We use your data to:

• register you as a customer and manage your account;
• process and deliver your order, take payment, recover money owed to us, and arrange delivery with our couriers;
• manage our relationship with you, including telling you about changes to our terms or this policy, asking you to leave a review, and answering your enquiries;
• run promotions, prize draws and surveys;
• administer and protect our business and website, including troubleshooting, security, and fraud prevention;
• show you relevant content and adverts and measure how well our advertising works;
• use analytics to improve our website, products and service; and
• make recommendations and, where you have agreed, send you marketing.

Marketing

We use Klaviyo as our email marketing platform. You will receive marketing from us only where you have opted in, or where you have bought from us before and have not opted out. You can stop marketing at any time using the unsubscribe link in any marketing email, in your account settings, or by emailing support@pacoperfumerias.co.uk. Opting out of marketing does not stop service messages about your orders.

5. Sharing your data

We share your personal data only where necessary, and only what is needed, with trusted providers who act on our behalf:

• Payments: PayPal and Braintree, which handle payments securely and to PCI DSS standards. We do not store full card details.
• Delivery: Royal Mail, to deliver your order. We share your name, delivery address and contact number.
• Email marketing: Klaviyo, to send marketing and manage subscriber lists where you have opted in.
• Analytics: Google Analytics, to understand how our website is used.
• Advertising: Google Ads, to show relevant adverts and measure their effectiveness.
• Reviews: Trustpilot, to collect and display reviews. We share your name, email address and order reference for verification.

Our customer service is handled by our own in-house team and system, so your enquiries are not passed to a third-party helpdesk.

Fraud prevention and law enforcement

We record the IP addresses of people submitting orders to help prevent fraud, and we will share information where necessary to co-operate with law enforcement in investigating suspected offences. We work with Action Fraud, the UK's national fraud reporting centre.

Legal requirements and business transfers

We may disclose your data where required by law or a valid request from a public authority. If we are involved in a merger, acquisition or sale of our business, your data may be transferred as part of that transaction, and we will tell you if this happens.

6. International transfers

Some of our providers are based outside the UK, which means your data may be transferred abroad. Where this happens, we make sure a similar level of protection applies, either because the country has an adequacy decision from the UK government, or through approved contracts such as International Data Transfer Agreements. Providers that may process your data outside the UK include Google (US), Klaviyo (US), PayPal and Braintree (US) and Trustpilot (Denmark).

7. Data security

We have security measures in place to prevent your personal data being lost, misused, altered or accessed without authorisation. These include encryption of data in transit using SSL/TLS, restricted access controls, and limiting access to staff and providers who need it, who are under a duty of confidentiality. We have procedures to deal with any suspected data breach and will notify you and the regulator where we are legally required to. No transmission over the internet is completely secure, so any transmission is at your own risk.

8. How long we keep your data

We keep your personal data only for as long as we need it, including to meet legal, accounting, tax or reporting requirements. As a guide:

• Order and transaction data: up to 7 years, to meet tax and accounting rules.
• Marketing data: until you unsubscribe or ask us to delete it.
• Account data: until you ask us to delete it or close your account.
• Technical and usage data: usually up to 26 months.

We may keep data for longer where there is a complaint or a realistic prospect of legal action.

9. Your legal rights

Under data protection law you have the right to request access to your data, request correction of it, request erasure in certain circumstances, object to processing, request restriction of processing, request transfer of your data (portability), and withdraw consent where we rely on it.

To exercise any of these rights, email support@pacoperfumerias.co.uk. We may ask you for information to confirm your identity. We aim to respond within one month, and we will let you know if we need longer. There is usually no fee, although we may charge a reasonable fee or refuse a request that is clearly unfounded, repetitive or excessive.

10. Closing your account

If you would like to close your account, please contact our Customer Service team and we will arrange it. Once your account is closed you can still buy from us as a guest, and you can re-register later using the same email address, although your past order history will no longer be visible.

You are responsible for all activity that takes place under your password. If you know or suspect that someone else has your password, please contact us immediately at support@pacoperfumerias.co.uk.

11. Third-party links

Our website may link to third-party websites, plug-ins and applications. We do not control them and are not responsible for their privacy practices. When you leave our website, we encourage you to read the privacy policy of every site you visit.

12. Changes to this policy

We may update this policy from time to time to reflect changes in the law, technology or our business. When we do, we will update the date at the top of this page, and we will tell you about significant changes where we are required to. We will not change how we use your data in a way that requires your consent without first asking you.

13. Contact us

If you have any questions about this policy or our privacy practices, please contact us at support@pacoperfumerias.co.uk, or write to Paco Perfumerias SL Ltd, Unit A2, Tancock's Business Park, Four Cross Avenue, Willand, Cullompton, Devon, EX15 2FB. You can also contact the ICO at ico.org.uk or on 0303 123 1113.

1. What are cookies?

Cookies are small text files placed on your computer or device when you visit a website. They are widely used to make websites work efficiently and to give information to the site owner. Cookies let a website remember your actions and preferences over time, so you do not have to keep re-entering them as you browse.

Cookies can be persistent or session cookies. Persistent cookies stay on your device after you close your browser and remember your preferences when you return. Session cookies are temporary and are deleted when you close your browser. This Cookie Policy should be read alongside the Privacy Policy above.

2. How we use cookies

We use cookies to help our website work, to understand how you use it, and to improve our service. We use both first-party cookies set by us and third-party cookies set by others. The cookies we use fall into these categories:

• Strictly necessary: essential for the site to work, such as using the basket and checkout. These cannot be switched off.
• Analytical and performance: tell us how visitors use the site so we can improve it. This information is aggregated and anonymous.
• Functionality: remember choices you make to give you a more personalised experience.
• Targeting and advertising: used to show adverts relevant to you and to measure how well our advertising works. This information may be shared with advertisers.

3. Cookies we use

Cookie names and durations can change as providers update their technology. This table is kept as accurate as we reasonably can.

4. Third-party cookies

Alongside our own cookies, we use cookies from the following providers:

• Google Analytics: helps us understand how visitors use our website, such as how often they visit and which pages they view.
• Google Ads: shows relevant adverts to people who have visited our website and measures how well our campaigns perform.
• Klaviyo: if you have opted in to marketing, tracks visitor behaviour to help personalise our emails.

5. Your consent and cookie preferences

When you first visit our website you will see a cookie banner where you can accept all cookies, reject non-essential cookies, or choose strictly necessary cookies only. Non-essential cookies are set only if you choose to accept them. You can change your preferences at any time using the Cookie Settings link in our footer. Strictly necessary cookies cannot be disabled, as they are needed for the site to work.

6. Managing and deleting cookies

You can control cookies through the Cookie Settings link in our footer, or through your browser settings, which let you refuse or delete cookies. Please note that blocking or deleting cookies may stop parts of our website working, such as the basket and checkout. To opt out of Google Analytics across all websites, you can install the Google Analytics Opt-out Browser Add-on. For more about cookies, see allaboutcookies.org.

7. Changes to this Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in technology, the law or how we operate. When we do, we will update the effective date at the top of this section, and where required we will ask you to confirm your consent again through the cookie banner.

8. Contact us

If you have any questions about our use of cookies, please contact us at support@pacoperfumerias.co.uk, or write to Paco Perfumerias SL Ltd, Unit A2, Tancock's Business Park, Four Cross Avenue, Willand, Cullompton, Devon, EX15 2FB.