Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, share and protect your personal data when you visit this website or place an order with us, and what rights you have over that data. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR) and Spanish data protection law.

The website is operated by Orchid Trading Group Limited, trading as Perfume Oasis (registered in England and Wales, company number 15487665, 592 London Road, Isleworth, London, TW7 4EY, United Kingdom). Orders placed on our European storefronts are sold and fulfilled by Oasis de Belleza SL, which is the controller for the personal data involved in those orders.

2. What data we collect

• Data you give us. Name, billing and delivery address, email address, telephone number, and the contents of any message you send us. If you create an account, your login details and order history. If you subscribe to marketing, your email address and preferences.
• Payment data. Card and payment details are collected and processed by our payment provider, Stripe, and by any other payment method you choose. They are never stored by us and never pass through our systems — your bank communicates directly with the payment provider. We receive only confirmation of payment, the last four digits of the card and the payment method used.
• Data collected automatically. IP address, browser and device type, operating system, referring pages, pages viewed and time spent on them, and information collected through cookies and similar technologies.
• Data from third parties. Order and delivery updates from our carriers, review submissions from our reviews provider, and advertising or analytics identifiers where you have consented to them.

3. Why we use your data, and on what legal basis

Where we rely on consent, you can withdraw it at any time — for marketing, by using the unsubscribe link in any email. Withdrawing consent does not affect processing carried out before you withdrew it.

4. Who we share your data with

We share personal data only with providers who need it to deliver our service to you, and only under a data processing agreement.

We do not sell your personal data. We share it only where it is needed to deliver your order, to run the store, to comply with the law, or to establish, exercise or defend legal claims.

5. International transfers

Some of our providers are established outside the European Economic Area, including in the United Kingdom and the United States. Transfers to the United Kingdom are covered by the European Commission's adequacy decision. Transfers to other countries are protected by Standard Contractual Clauses approved by the European Commission, or another lawful transfer mechanism.

Because the website is operated by our UK affiliate, some administrative access to order data takes place in the United Kingdom under that adequacy decision.

6. How long we keep your data

When data is no longer needed, we delete it or anonymise it.

7. Your rights

• Access — obtain a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — have your data deleted, where we have no overriding legal reason to keep it.
• Restriction — ask us to limit how we use your data in certain circumstances.
• Portability — receive the data you gave us in a machine-readable format, or have it sent to another controller.
• Object — object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email contact@perfumeoasis.eu. We will respond within one month. We may ask you to confirm your identity before acting on a request.

8. Complaints

If you believe we have not handled your personal data properly, please contact us first and we will try to put it right. You also have the right to lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD), or the data protection authority in your country of residence.

9. Cookies

We use cookies and similar technologies to run the store, remember your basket and preferences, measure how the site is used, and — with your consent — deliver advertising. You can accept or refuse non-essential cookies through the cookie banner, and change your choice at any time. Full detail is set out in our Cookie Policy.

10. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, including encryption in transit, access controls and vetted providers. No method of transmission or storage is completely secure, but we take these obligations seriously and review them regularly.

11. Children

Our store is not directed at children and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The version published on this page is the current one, and the date at the top shows when it was last changed. Where changes are significant, we will tell you directly.

13. Contact