Privacy policy

Tempus & Jubilo ("we", "us") is the data controller for the personal information collected through this website, tempusandjubilo.com. If you have any questions, contact us at hello@tempusandjubilo.com.

When you place an order, we collect the information needed to fulfil it:

• Name, email address, and delivery address
• Order details (what you bought, when, and for how much)

Payments are taken by Stripe, not by us. You enter your card details on Stripe’s own secure checkout page, and they are never sent to this website or stored on it — we only ever see the outcome of a payment (that it succeeded, the amount, and the last four digits of the card). Stripe is a payment processor in its own right and handles that data under its own privacy policy.

If you sign up to our newsletter, we also collect your email address for that specific purpose, separately from any order.

We use order information to fulfil and ship your order, communicate with you about it, and meet our own accounting and legal obligations. We only send marketing emails to people who have actively opted in, and every email includes an unsubscribe link.

Our lawful basis for handling order information is performance of a contract — we can’t send you a candle without an address. For the newsletter it is your consent, which you can withdraw at any time. For the website statistics described below it is our legitimate interest in understanding how the shop is used, balanced against the fact that the data is anonymous and cannot be traced back to you.

We only share what's needed to actually run this shop — never more, and never so anyone else can market to you:

• Stripe — to take payment securely. Your card details go to them directly, not through us.
• Vercel — the company that hosts this website, so it can stay online.
• Supabase — the database where the shop’s own records are stored.
• Brevo — the email service we use to send order confirmations and, if you’ve opted in, our newsletter.
• Our delivery partner, so your order can reach you.

We do not sell your personal information to anyone.

We keep order records for as long as required for tax and accounting purposes (typically 6 years in the UK). You can ask us to delete other personal information we hold about you at any time, subject to those legal requirements.

The detailed website statistics described below — the individual page views — are automatically deleted after 24 months. We keep a monthly total after that (for example “4,100 views in March”), so we can see how the shop grows year on year. Those totals are counts only, with the scrambled code and everything else removed, so nothing in them relates to any individual person.

Under UK GDPR, you have the right to access, correct, or request deletion of your personal data, and to withdraw consent for marketing at any time. To exercise any of these rights, email hello@tempusandjubilo.com. You also have the right to complain to the UK's Information Commissioner's Office (ico.org.uk) if you believe your data hasn't been handled correctly.

We keep a simple count of how the shop is being used — how many pages were viewed, which ones, roughly where visitors are, and which website they arrived from. It runs on our own site. There is no Google Analytics here, no advertising network, and nothing that follows you to other websites.

For each page view we record:

• The page address and the date and time.
• A country and, where available, a town or city. This is worked out from your IP address by our hosting provider at the moment you visit. We never see or store your IP address itself, and the location is no more precise than a city.
• The website you arrived from — the site’s name only (for example “instagram.com”), never the full web address, which can contain search terms.
• A scrambled code that lets us tell one visit from another, so we can count people rather than clicks. It is made by mixing your IP address and browser with a secret value and is not reversible — it cannot be turned back into you. It is regenerated every day, so it cannot be used to recognise you tomorrow or to build any picture of you over time.

None of this identifies you, none of it is linked to your order or your email address, and none of it is shared with or sold to anyone.

We use no tracking or advertising cookies at all, and the website statistics above store nothing whatsoever on your device — which is why you have not been asked to accept cookies.

Two things are stored in your own browser purely to make the shop work. Neither is sent to us, and both can be cleared at any time through your browser settings:

• Your basket, so it survives moving between pages or closing the tab.
• A note that you have dismissed or signed up to the newsletter popup, so it stops appearing.

If you log in to the shop’s private admin area — which only the owner can do — a single sign-in cookie is set to keep you logged in.