Privacy Policy

1.Introduction

Apex Aromas Ltd (“we”, “us”, “our”) operates www.yatoura.com, supplying perfumes, cosmetic products, and candles.
This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with UK GDPR and the Data Protection Act 2018.
By using our website, you agree to the practices described in this Privacy Policy

2.Data Controller

Apex Aromas Ltd is the Data Controller responsible for your personal data.
You can contact us through our website’s contact form if you have any questions about how your data is handled.

3.Personal Data We Collect

Information You Provide
We collect personal data you submit directly, including:
•Name
•Email address
•Phone number
•Billing and shipping address
•Order details for perfumes, cosmetics, candles, or other products
•Payment information (processed securely by third‑party payment providers; we do not store card details)

Information Collected Automatically

When you browse our website, we automatically collect:
• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website
• General usage statistics

Cookies & Similar Technologies

We use cookies to:
• Enable essential website functions
• Remember your preferences
• Analyse website traffic
• Improve our services
You can manage or disable cookies in your browser settings. Some features may not work properly if cookies are disabled.

4.Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:
• Contractual necessity – to process and deliver your orders
• Consent – for marketing communications and non‑essential cookies
• Legitimate interests – to improve website performance and prevent fraud
• Legal obligation – to comply with UK tax, accounting, and regulatory requirements

5.How We Use Your Personal Data

We use your data to:
• Process and fulfil orders for perfumes, cosmetics, candles, and related products
• Provide customer support
• Improve website functionality and user experience
• Send updates, promotions, or important notices (only with your consent)
• Prevent fraud and ensure website security
• Comply with legal obligations

We do not sell your personal data.

6.Sharing Your Data
We may share your data with trusted third parties, including:
• Payment processors
• Delivery and logistics partners
• Website hosting providers
• Analytics and marketing tools
• Customer support platforms

These partners must comply with UK GDPR and may only use your data for the services they provide to us.

7.International Data Transfers

Some service providers may operate outside the UK.
When data is transferred internationally, we ensure appropriate safeguards such as:
• UK GDPR‑approved Standard Contractual Clauses
• Adequacy decisions
• Secure transfer mechanisms

8.Data Retention

We retain your personal data only as long as necessary for:
• Fulfilling your orders
• Meeting legal obligations
• Resolving disputes
• Maintaining accurate business records

Retention periods vary depending on the type of data.

9.Your Rights Under UK GDPR

You have the right to:
• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict how your data is used
• Object to certain processing
• Request data portability
• Withdraw consent at any time
• To exercise these rights, contact us through our website’s contact form.

10.Children’s Privacy

Our website is not intended for individuals under 13.
We do not knowingly collect personal data from children.
If you believe a child has provided us with personal data, please contact us so we can delete it promptly.

11.Links to External Websites

Our website may contain links to third‑party websites.
We are not responsible for their privacy practices.
We encourage you to review their privacy policies before providing any personal information.

12.Data Security

We use commercially reasonable measures to protect your personal data.
However, no online system is completely secure.
We continuously work to safeguard your information and minimise risks.

13.Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated “Last Modified” date.
Continued use of our website after changes indicates acceptance of the updated policy.

14.Contact Us

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us using our website’s contact form.