Privacy policy
This policy explains what personal information Over The Rainbow collects when you use this website, why we collect it and what your rights are. We keep it to what we need to send your order.
Who we are
Over The Rainbow Wax Melts | We are the data controller for the information described below.
If you have any questions about your data, contact us at [email protected]
What we collect
- When you place an order: your name, email address, delivery address, phone number if you choose to give one, and what you ordered.
- When you contact us: your email address and whatever you tell us in your message.
- Technical information: our hosting provider records standard details such as IP address and browser type to keep the site secure and working.
We do not see or store your card details. Payments are taken on Stripe's secure payment page.
Why we use it
- To process, deliver and support your order. The legal basis is our contract with you.
- To keep order and tax records. The legal basis is our legal obligations.
- To keep the website secure and prevent fraud. The legal basis is our legitimate interests.
We do not sell your information and we do not send marketing emails unless you have asked for them.
Who we share it with
We only share what each provider needs to do its job:
- Stripe, to take your payment.
- Cloudflare, which hosts this website and stores order records.
- Our email provider, to send your order confirmation.
- Royal Mail, Evri, DPD, to deliver your parcel.
Some of these providers are based outside the UK. Where information is transferred abroad, it is protected by safeguards recognised under UK data protection law.
Cookies and browser storage
This website does not use advertising or tracking cookies. Your basket is saved in your own browser so it is still there if you refresh the page, and the details you type at checkout are held in your browser only until you close the tab. Stripe may set its own cookies on its payment page to prevent fraud.
How long we keep it
We keep order records for up to six years after the end of the tax year of your order, because tax rules require us to keep sales records. Messages you send us are kept for up to two years. After that the information is deleted.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the information we hold about you
- correct anything that is wrong
- delete your information, where we are not required by law to keep it
- stop or limit how we use it
To use any of these rights, email us at the address above. We will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page.
Last updated: 21st September 2026