Privacy policy

At Cicely & May, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains what information we collect, how we use it, who we may share it with, and the rights you have in relation to your personal data.

This policy applies when you visit our website, place an order, create a customer account, contact us, or sign up to receive emails from Cicely & May.

Who we are

Cicely & May Limited is the data controller responsible for your personal information.

Cicely & May Limited
Email: hello@cicelyandmay.co.uk

If you have any questions about this Privacy Policy or how we use your personal information, please contact us at the email address above.

Information we collect

Depending on how you interact with Cicely & May, we may collect information including:

  • your name

  • email address

  • billing and delivery address

  • telephone number

  • order and purchase history

  • customer account information

  • payment and transaction information

  • correspondence you send to us

  • information you provide when signing up to our mailing list

  • technical information about how you use our website, such as IP address, browser type, device information and cookie data

We only collect information that is reasonably necessary for the purposes described in this policy.

How we use your information

We may use your personal information to:

  • process and fulfil your orders

  • arrange delivery of your order

  • communicate with you about your order

  • manage your customer account

  • process payments, refunds and returns

  • respond to enquiries or customer service requests

  • prevent fraud and protect the security of our website

  • keep appropriate business, tax and accounting records

  • send you marketing emails where you have chosen to receive them

  • provide you with our Seasonal Living Guide or other content you have requested

  • improve our website, products and customer experience

  • understand how visitors use our website

  • comply with our legal and regulatory obligations

Our lawful basis for using your information

Under UK data protection law, we must have a lawful reason for using your personal information.

Depending on the circumstances, we may rely on:

Contract
Where processing your information is necessary to fulfil an order or provide a service you have requested.

Legal obligation
Where we are required to keep or use certain information to comply with legal, accounting or tax requirements.

Consent
Where you have actively chosen to receive marketing emails or other communications from us.

Legitimate interests
Where using your information is reasonably necessary to operate, protect and improve Cicely & May, provided that your rights and interests do not override ours.

Orders and payments

When you place an order through our website, the information you provide is used to process your purchase, take payment, fulfil your order and provide customer service.

Our website is hosted by Squarespace, which provides our ecommerce platform.

Payments are processed securely by Stripe. We do not directly store your full payment card details.

Your information may also be shared with delivery and fulfilment providers where necessary to deliver your order.

We currently ship orders within the United Kingdom only.

Customer accounts

You may choose to create a customer account on our website.

If you do, we may store information such as your name, contact information, address details and order history so you can manage your account and purchases.

You can contact us at any time if you would like help with your customer account or personal information.

Email marketing

If you sign up to receive emails from Cicely & May, we will use the information you provide to send you communications such as:

  • seasonal inspiration

  • new candle launches

  • collection updates

  • journal notes

  • offers or promotions

  • the Seasonal Living Guide and other content you have requested

Our email marketing is managed through Flodesk.

We will only send marketing emails where we have an appropriate lawful basis to do so, usually your consent.

You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any marketing email.

Withdrawing your consent will not affect the lawfulness of any processing carried out before you withdrew it.

Cookies and website analytics

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to function correctly, including features such as shopping baskets, checkout and customer accounts.

Other cookies may help us understand how visitors use the website, improve our services or measure marketing activity.

Where required by law, non-essential cookies will only be used after you have given your consent.

We may in future use services such as Pinterest for advertising, analytics or conversion tracking. If these services are introduced, this policy and our cookie information will be updated where necessary.

You can manage your cookie choices through the cookie settings available on our website.

Who we share your information with

We do not sell your personal information.

We may share information with trusted third parties where necessary to operate Cicely & May, including:

  • Squarespace, our website and ecommerce platform

  • Stripe, our payment processor

  • Flodesk, our email marketing platform

  • delivery and courier companies

  • professional advisers such as accountants

  • technology and hosting providers

  • regulators, courts or government authorities where legally required

These organisations may only use personal information as necessary to provide their services or comply with their own legal obligations.

International transfers

Some of the service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable UK data protection law.

How long we keep your information

We keep personal information only for as long as necessary for the purpose for which it was collected and to meet our legal, accounting and regulatory obligations.

Order and transaction records may be retained for at least six years where necessary for tax and accounting purposes. UK guidance requires companies to keep certain accounting records for six years from the end of the financial year to which they relate, although longer periods can apply in some circumstances.

Marketing information will generally be retained until you unsubscribe or ask us to remove your information, unless we have another lawful reason to keep it.

Other information, such as customer enquiries, will be kept only for as long as reasonably necessary.

Your rights

Depending on the circumstances, UK data protection law may give you the right to:

  • request access to the personal information we hold about you

  • ask us to correct inaccurate or incomplete information

  • ask us to delete your information

  • ask us to restrict how your information is used

  • object to certain uses of your information

  • request the transfer of your information in certain circumstances

  • withdraw your consent at any time where we rely on consent

Not all rights apply in every situation, and some information may need to be retained where we have a legal obligation to keep it.

If you would like to exercise any of these rights, email hello@cicelyandmay.co.uk.

The ICO requires organisations to explain the rights available to individuals and to make the right to object clear.

Your right to object

You have the right to object to the use of your personal information in certain circumstances, including the use of your information for direct marketing.

You can stop receiving marketing emails at any time by using the unsubscribe link contained in our emails or by contacting us.

Complaints

If you have concerns about how we use your personal information, we would appreciate the opportunity to resolve them first.

Please contact us at:

hello@cicelyandmay.co.uk

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator. The ICO recommends that UK organisations tell individuals about this right.

You can find further information at the ICO website.

Links to other websites

Our website may contain links to other websites.

Cicely & May is not responsible for the privacy practices or content of third-party websites. We recommend reviewing the privacy policy of any external website you visit.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services or legal obligations.

The latest version will always be available on our website.

Last updated: September 2026