Short version: this shop collects almost nothing. Browsing is anonymous, orders happen over WhatsApp in your own words, and the only cookies on the site belong to our private management sign-in.
ICON SIGNATURE PERFUME OIL is an independent, hand-poured perfume oil business based in the United Kingdom. This policy explains what personal data we handle through this website and the conversations it leads to. Questions about this policy or about your data can go to [email protected] or the WhatsApp button in the shop.
The shopfront has no accounts, no advertising, no analytics and no tracking cookies. Looking around the catalogue sends nothing about you to us. Our host, Cloudflare, keeps routine security records, such as IP address and time of visit, to keep the site safe and stable. These are security records, not marketing data, and they are kept only briefly.
Tapping Order on WhatsApp opens a chat in the WhatsApp app. What you send there — your name, phone number, delivery address, and your scent and size choices — is collected by WhatsApp, and Meta's privacy policy applies to their side of your conversation. We keep those chats only as long as needed to complete your order, deliver it and handle any follow-up.
Orders and payment are arranged personally over WhatsApp. This website never asks for, receives or stores payment details.
A private management area at /admin is used only by us to look after the catalogue. Signing in there uses Google. Only specific email addresses listed on our allowlist can enter. When an authorised person signs in, we receive the email address from their Google account to check it against the allowlist, then set a session cookie that lapses after 12 hours. We do not request or store other information from the account, and nothing from that area is shown publicly. Google's own privacy policy governs its side of the sign-in.
The only cookies on this site are strictly necessary ones: a temporary sign-in state cookie during the management-area Google sign-in hand-off, and the 12-hour session cookie described above. Nothing on the public shopfront sets a cookie.
We do not sell or rent personal data, and we do not share it for advertising. Personal data reaches third parties only through order conversations on WhatsApp (Meta) and through our hosting and security provider (Cloudflare).
Under UK data protection law you can ask for a copy of personal data about you, ask us to correct or delete it, restrict or object to how it is used, and ask for it in a portable form. Contact us through the details above to make a request. You can also complain to the Information Commissioner's Office at ico.org.uk.
If this policy changes, the updated version will be posted on this page with a new date.