Privacy Policy

Last Updated: [17/01/2026]

1. Introduction

At Layaan Fragrances (“we”, “us”, or “our”), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, make a purchase, or contact us. By using our website or services, you agree to the practices described in this Privacy Policy.

2. Who We Are

Layaan Fragrances is the data controller responsible for your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact Details:

Email: Layaanfragrances@outlook.com
Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority (www.ico.org.uk).

3. Personal Information We Collect

We may collect and process the following types of personal information:

Name, billing address, and delivery address.
Email address and telephone number.
Order history, purchase details, and transaction references.
Communications sent to us (emails or enquiries).
Technical data (IP address, browser type) via cookies.

4. How We Collect Personal Information

Personal information is collected when you:

Place an order or create an account.
Contact us via email or social media.
Interact with our website. Some data is collected automatically through cookies (see Section 9).

5. Lawful Basis for Processing

We process your personal data under the following legal bases:

Performance of a Contract: To process and deliver your order.
Legal Obligation: To comply with UK tax, accounting, and consumer laws.
Legitimate Interests: To improve our services and respond to enquiries.
Consent: Where you have explicitly opted-in to receive marketing.

6. How We Use Your Personal Information

We use your information to:

Fulfil orders and arrange deliveries.
Communicate updates regarding your order or returns.
Provide customer support.
Comply with HMRC tax requirements (keeping records for 6 years).
Protect against fraud and unauthorised activity.

7. Payments

Payments are processed securely by third-party providers. We do not store or process your full payment card details. All transactions are handled directly by the payment provider under their own security policies.

8. International Transfers of Data

As we use third-party service providers (such as hosting or email platforms) to power our business, your information may be transferred to, stored, and processed in countries outside the UK, including the United States.

Where we transfer your data outside the UK, we ensure a similar degree of protection is afforded to it by using Standard Contractual Clauses (SCCs) or the International Data Transfer Addendum (IDTA) as approved by UK authorities.

9. Cookies and Similar Technologies

Our website uses cookies to distinguish you from other users and provide essential site functionality.

Strictly Necessary Cookies: Required for the site to function (e.g., your shopping basket).
Analytical/Marketing Cookies: Used only if you provide explicit consent via our cookie banner. You can manage or disable cookies through your browser settings, though this may affect website functionality.

10. Sharing Your Personal Information

We do not sell, rent, or trade your data. We share information only with:

Delivery/Courier Services (to get your order to you).
Service Providers (IT, hosting, and business operations).
Legal Authorities where required by law or to prevent fraud.

11. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (typically 6 years for tax purposes). When no longer required, data is securely deleted.

12. Data Security

We take reasonable technical and organisational measures to protect your information. However, you acknowledge that no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security of data sent online.

13. Your Data Protection Rights

Under UK law, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete information.
Delete your data (where we are not legally required to keep it).
Object to or restrict certain processing.
Data Portability (moving your data to another service). To exercise these rights, please contact us at the email address provided above.

14. Children’s Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children.

15. Changes to This Policy

We reserve the right to update this policy at any time. Changes take effect immediately upon being posted on this website.