Free UK delivery on £60+ · Christmas: order by 18 Dec (Tracked 48) or 21 Dec (Tracked 24)
PRIVACY POLICY
WHO WE ARE & HOW WE USE YOUR DATA
Eversaison Privacy Policy
Last updated 13 November 2026
This policy explains how Eversaison Ltd collects and uses personal information when you visit eversaison.com, purchase our candles and home fragrance products, create an account, subscribe to our emails or contact us. It also explains your choices and data protection rights.
1 Who we are
Eversaison Ltd, trading as Eversaison, is the controller of the personal information covered by this policy. This means we decide why and how it is used. Our business is based in the United Kingdom. Our company number is 16884957.
Contact us about privacy or your personal information at:
Email: info@eversaison.com
Post: Eversaison Ltd, 53 Glandford Way, Chadwell Heath, Romford, England, RM6 4UG, United Kingdom
Website: https://www.eversaison.com
2 Personal information we collect
• Contact and delivery information: your name, email address, billing and delivery addresses, and telephone number if supplied.
• Order and transaction information: products purchased, order dates, payment status and references, delivery information, returns and refunds.
• Account information: registration details, account activity, purchase history and preferences, where you create an account.
• Communications: enquiries, feedback, complaints and information you provide when contacting us, including relevant attachments.
• Marketing information: subscription choices, consent records and unsubscribe requests.
• Technical and website information: IP address, browser and device information, security logs and browsing activity. Information obtained through optional cookies or similar technologies depends on the tools used and your choices.
Payment details are handled through Wix Payments and PayPal, as applicable to your chosen payment method. We receive transaction information needed to manage orders and refunds. Please do not send full card details or security codes to us by email.
3 Where information comes from
We collect information directly from you when you shop, register, subscribe or contact us, and automatically through the website and its service providers. We also receive payment confirmations from payment providers and delivery updates from Royal Mail. If someone buys a gift for you, we may receive your name and delivery details from that purchaser and use them to fulfil the delivery.
4 How we use information and our lawful bases
We use personal information only where there is an appropriate lawful basis under UK data protection law. Different activities may rely on different bases:
• Orders and customer accounts: to take and fulfil orders, arrange delivery, provide order updates, administer requested accounts, and handle contractual returns or refunds. Our basis is performance of a contract or taking steps at your request before entering into one. Where a purchaser supplies a gift recipient’s details, our basis for using those details is our legitimate interest in arranging the requested gift delivery.
• Customer enquiries: to respond to questions before a purchase, where necessary to take steps at your request towards a contract. For general correspondence, our basis is our legitimate interest in providing customer support and running our business.
• Complaints and disputes: to investigate issues and resolve them fairly. Our basis is performance of a contract where relevant, compliance with a specific legal obligation where applicable, or our legitimate interest in resolving disputes and establishing, exercising or defending legal claims.
• Accounting and legal compliance: to maintain required financial records, meet tax obligations and respond to lawful requests from authorities. Our basis is compliance with legal obligations.
• Security and fraud prevention: to protect the website, customers and our business from misuse and fraudulent activity. Our basis is our legitimate interest in maintaining secure services and preventing fraud, or a legal obligation where one applies.
• Newsletter and promotional emails: to send news, product launches and offers when you have agreed to receive them. Our basis is consent.
• Optional website analytics, personalisation or advertising technologies: where these are used and require consent, our basis is consent. Essential technical processing needed to provide a secure website is based on our legitimate interest in operating the service, except where another basis applies to the underlying activity, such as fulfilling your order.
When relying on legitimate interests, we consider the purpose, whether the processing is necessary, and the impact on your rights and reasonable expectations. You can contact us for further information about this assessment.
5 Marketing choices
You can unsubscribe from promotional emails using the unsubscribe link in the email or by contacting info@eversaison.com. Withdrawing consent does not affect the lawfulness of processing before withdrawal. You do not have to subscribe to marketing to place an order.
We may still send necessary service messages, such as order confirmations, delivery updates or replies to your enquiries. These are separate from promotional emails.
6 Information needed to fulfil an order
We need certain information, including a delivery address and payment confirmation, to process your purchase. If you do not provide the necessary information, we may be unable to accept or fulfil the order. Optional information, such as a marketing subscription, is your choice.
WHO WE SHARE DATA WITH & HOW LONG WE KEEP IT
7 Who we share information with
We share relevant information with organisations supporting the following activities, only to the extent needed for their role:
• Wix: website hosting, online shop, customer accounts, forms, order administration and website communications, including subscription communications where managed through Wix.
• Wix Payments and PayPal: processing payments and refunds, transaction verification, fraud prevention and payment disputes, depending on your payment method.
• Usercentrics: managing cookie consent choices and recording preferences through our Wix website.
• GoDaddy: providing our business email service and handling correspondence sent to and from our business email address.
• Royal Mail: delivering orders and providing delivery updates, using the recipient and delivery information needed for that service.
• Professional advisers, accountants, insurers and legal advisers: where needed for accounting, insurance, advice or handling claims.
• Regulators, courts, law enforcement and other authorities: where disclosure is legally required or otherwise lawful and necessary.
Some providers process information on our instructions under data processing terms. Others, including payment providers for certain activities, act as independent controllers and decide how to use information for their own legal, security and service purposes. Their own privacy notices explain that processing. We do not treat all providers as processors.
Provider privacy information is available at:
Usercentrics: https://usercentrics.com/privacy-policy/
Wix: https://www.wix.com/about/privacy
PayPal: https://www.paypal.com/uk/legalhub/privacy-full
GoDaddy: https://www.godaddy.com/en-uk/legal/agreements/privacy-policy
Royal Mail: https://www.royalmail.com/privacy-notice
8 International processing and transfers
Our delivery area does not determine where personal information is processed. The providers supporting our website, payments and email may process information outside the United Kingdom, including in Israel, the European Economic Area and the United States, depending on the service and its subprocessors.
Wix’s data processing terms identify initial processing by Wix.com Ltd in Israel and onward processing by its group companies and service providers. GoDaddy’s terms also provide for international processing. Payment providers describe their international processing in their own privacy notices.
Where a transfer is covered by UK adequacy regulations, that recognition provides the transfer mechanism. Otherwise, applicable safeguards may include the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, together with any additional measures required. The mechanism depends on the provider, recipient and destination; US transfers do not automatically qualify for the UK–US data bridge.
You can contact us for information about a transfer relating to your personal information and how to obtain a copy of the relevant safeguards, subject to appropriate redaction of confidential information.
9 How long we keep information
We retain personal information only for as long as needed for its purpose and applicable legal requirements. We use the following periods or criteria:
• Accounting and transaction records needed for company tax purposes: normally six years from the end of the company financial year they relate to, and longer where a tax enquiry or another applicable requirement requires it. This does not mean every item of customer information must be kept for six years.
• Customer accounts: while the account remains in use or is needed to provide the requested account service. After closure, separate order records may remain where needed for accounting, outstanding orders or claims.
• Enquiries, complaints and disputes: until the matter is resolved and any necessary follow-up is complete. Where needed as evidence for a claim, we consider the applicable claim period, the nature of the issue and whether proceedings are ongoing; routine correspondence need not be kept for the full claim period.
• Marketing records: while your subscription remains active. Following withdrawal, we keep only the limited information needed to record your preference, prevent further unwanted marketing and demonstrate compliance for as long as necessary for those purposes.
• Security logs: for the period needed to investigate security events, prevent misuse and maintain the service, taking account of the risks and whether an incident remains unresolved.
• Cookies and similar technologies: for their configured lifetimes or until removed, subject to the controls and information provided for the technology concerned. Session technologies generally end with the session; persistent technologies remain for a defined period.
When information is no longer needed, we delete it or anonymise it. Necessary records may be retained longer for an ongoing legal obligation, investigation or claim. Removing information from an active system may not remove it immediately from routine backups; retained backup copies remain protected until overwritten or deleted under the relevant backup process.
COOKIES & YOUR PRIVACY RIGHTS
10 Keeping information secure
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure. We aim to limit access to those who need it for their role. No online transmission or storage system can be guaranteed completely secure. Please contact us promptly if you believe your information or account has been compromised.
11 Your data protection rights
Subject to applicable conditions and exemptions, you can ask to access your personal information, correct inaccurate information, complete incomplete information, erase information, restrict its use, or receive or transfer eligible information in a portable format. You can also withdraw consent at any time where processing is based on consent.
Your right to object: you can object to processing based on legitimate interests for reasons relating to your situation. We must stop unless we demonstrate overriding compelling legitimate grounds or need the information for legal claims. You can object to direct marketing at any time, including related profiling, and we must stop that use.
Contact info@eversaison.com to exercise your rights. We may request proportionate information to verify identity. We normally respond without undue delay and within one month. Where the law permits extra time, clarification or a fee, we will explain what applies. Requests are normally free of charge.
12 Cookies and similar technologies
Cookies and similar technologies can store information on, or access information from, your device. Our Wix website uses technologies necessary to deliver website functions, such as security, a shopping basket and checkout. Optional technologies can support preferences, analytics or advertising when enabled. Embedded Instagram content may involve Meta. Google Analytics and Meta Pixel have not been confirmed as enabled on this website; we will update this policy and our Cookie Policy if they are introduced, explaining the information collected, purposes and recipients before the relevant processing begins.
Where consent is legally required, optional technologies must not operate before you consent. You should be able to decline them and withdraw consent as easily as giving it. Refusing optional cookies should not prevent you from buying our products.
Our consent banner is managed through Usercentrics for Wix. You can accept or decline optional technologies, choose individual preferences and reopen the privacy settings using the privacy icon at the bottom left of the website to change or withdraw consent. See our separate Cookie Policy, available through the website footer, for further details.
Browser settings let you block or delete cookies, although blocking essential cookies can prevent parts of the shop from working. Browser controls may not cover every similar technology. Contact us if you need help with privacy choices on our website.
Embedded content, such as an Instagram feed, may involve additional providers and technologies. Where those technologies require consent, the content must be controlled accordingly. Following a link to another website takes you to a service governed by its own privacy information.
13 Decisions made by automated systems
Our payment providers may use automated checks for payment security and fraud prevention under their own privacy notices. If an automated payment or security outcome affects your order, contact us so we can explain the information available to us and help you raise the matter with the relevant provider. Our use of automation for routine order messages does not by itself mean that a legally significant automated decision is made about you.
14 Privacy complaints
If you have a concern about how we handle your personal information, please email info@eversaison.com or write to the address in section 1. You do not need to use any special wording or form. Please describe your concern and how you would like us to contact you.
We will acknowledge a data protection complaint within 30 days, investigate appropriately, keep you informed of progress and explain the outcome without undue delay. A complaint and a request to exercise your data protection rights may have different response time limits.
You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator. The ICO recommends raising your concern with the organisation first. You can find guidance and submit a complaint at https://ico.org.uk/make-a-complaint/ or call 0303 123 1113.
15 Changes to this policy
We may update this policy to reflect changes in our services, how we handle personal information or applicable law. The current version will be available on our website with its update date. Where appropriate, we will bring material changes to your attention before introducing a new use of your personal information.