MYTHWICK LIMITED · YOUR PRIVACY
Effective Date: November 4, 2026
Last Updated: November 4, 2026
1. Introduction
Mythwick Limited (“we,” “our,” “us”) is committed to protecting the privacy and security of your personal data. This Privacy and Cookies Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, purchase handcrafted candles and home fragrance products from our online shop, interact with us via email or social media, or join The Mythwick Guild subscription service.
Mythwick Limited is a private limited company registered in the Isle of Man. For the purposes of applicable data protection laws—including the Isle of Man Data Protection Act 2018, the GDPR as applied in the Isle of Man, the UK General Data Protection Regulation (UK GDPR), and the EU General Data Protection Regulation (EU GDPR)—Mythwick Limited acts as the Data Controller responsible for your personal information.
2. Personal Data We Collect
We collect personal information that you provide to us directly, as well as data gathered automatically when you navigate our site or interact with our services.
A. Information You Provide Directly
Identity & Contact Data: Name, billing address, shipping address, email address, and telephone number.
Transaction & Purchase Data: Details of products purchased, order history, shipping tracking numbers, order total, and customer service notes.
Payment Data: Payment card details, billing address, and transaction identifiers. (Note: Payment transactions are processed securely through certified third-party payment gateways such as Shopify Payments, Stripe, or PayPal. Mythwick Limited does not store full credit card numbers or sensitive financial authentication data on our servers).
Account & Subscription Data: Account login details, preferences, lore subscriptions, and enrollment details for The Mythwick Guild.
Marketing & Communications Data: Your preferences regarding receiving email newsletters, promotional offers, survey responses, and feedback.
B. Information Collected Automatically
Technical Data: IP address, browser type and version, device type, operating system, time zone setting, and location data.
Usage Data: Pages viewed, navigation paths, time spent on pages, referral source, search terms used, and items placed in your shopping cart.
Cookies Data: Data collected via cookies, web beacons, pixels, and similar tracking technologies (detailed in Section 8 below).
3. How We Use Your Personal Data & Legal Grounds
We process your personal data under the following legal bases:
Purpose / Activity
Type of Data
Legal Basis for Processing
Fulfilling Orders & Delivery: Processing payments, managing orders, shipping products, providing delivery updates, and managing returns.
Identity, Contact, Transaction, Payment
Contract Performance: Necessary to perform the contract of sale with you.
Customer Support: Responding to inquiries, order changes, CLP safety questions, or troubleshooting issues.
Identity, Contact, Transaction
Contract Performance & Legitimate Interests: Necessary to support our customers and maintain service quality.
Subscription Management: Managing The Mythwick Guild recurring orders, dispatching quarterly boxes, and administering perks.
Identity, Contact, Transaction, Account
Contract Performance: Necessary to administer your subscription agreement.
Marketing & Community Engagement: Sending email newsletters, scent drop announcements, pre-launch lore previews, and discount codes.
Identity, Contact, Marketing Preferences
Consent: Express consent granted when signing up for newsletters or promotional material. You may unsubscribe at any time.
Website Optimization & Security: Monitoring website stability, preventing fraudulent transactions, improving user experience, and analyzing store traffic.
Technical, Usage
Legitimate Interests: Necessary to secure our website, prevent fraud, and optimize our e-commerce platform.
Legal & Regulatory Compliance: Maintaining accounting records, complying with Isle of Man tax laws, CLP product safety regulations, and legal obligations.
Identity, Contact, Transaction
Legal Obligation: Necessary to comply with legal requirements.
4. Sharing & Disclosure of Personal Data
We do not sell, rent, or trade your personal data to third parties. We share your information only with trusted service providers who assist us in operating our business and website under strict data processing agreements:
E-Commerce & Website Hosting: Shopify Inc. hosts our core e-commerce platform and processes order catalog and checkout data.
Payment Processors: Certified payment providers (e.g., Shopify Payments, Stripe, PayPal) to process card transactions securely.
Fulfillment & Shipping Partners: Postal services and courier networks (e.g., Isle of Man Post Office, Royal Mail, commercial couriers) to deliver your orders.
Email & Marketing Automation: Email service providers used to deliver The Mythwick Chronicles newsletters, order notifications, and promotional communications.
Professional Advisors & Legal Authorities: Accountants, legal advisors, insurers, or regulatory bodies (such as Isle of Man Customs and Excise or tax authorities) where required by law.
5. International Data Transfers
As Mythwick Limited is based in the Isle of Man, your personal data is stored and processed primarily in the Isle of Man and the United Kingdom. Where third-party service providers (such as Shopify or cloud infrastructure providers) transfer personal data outside the Isle of Man, UK, or European Economic Area (EEA), we ensure appropriate safeguards are implemented, such as:
Standard Contractual Clauses (SCCs) approved by the European Commission and relevant UK/Isle of Man authorities.
Data Processing Agreements ensuring recipient organizations adhere to equivalent data protection standards.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, tax, or regulatory requirements.
Order & Financial Records: Retained for a minimum of 6 to 7 years to comply with Isle of Man accounting and tax laws.
Marketing Subscriptions: Retained until you withdraw your consent or opt-out of marketing communications.
General Inquiries: Retained for up to 2 years following resolution of the query.
7. Your Legal Data Rights
Under Isle of Man Data Protection legislation and UK/EU GDPR, you have the following rights regarding your personal information:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of any inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where there is no legal justification for us to continue holding it.
Right to Restrict Processing: Request the suspension of processing of your personal data in certain scenarios.
Right to Data Portability: Request transfer of your data to another service provider in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent for email marketing at any time via the “Unsubscribe” link in our emails or by contacting us directly.
To exercise any of these rights, please contact us at privacy@mythwick.com
If you are unsatisfied with our response, you have the right to lodge a complaint with the Isle of Man Information Commissioner:
Website: https://www.inforights.im/
Email: ask@inforights.im
8. Cookies & Tracking Technologies Policy
A. What Are Cookies?
Cookies are small text files stored on your computer or mobile device when you visit a website. They enable the website to recognize your device, remember preferences, keep items in your shopping cart, and analyze site performance.
B. Categories of Cookies We Use
Strictly Necessary Cookies (Essential)
Purpose: Required for the operation of our online shop, secure login, shopping cart retention, and payment processing.
Examples: Shopify session identifiers, checkout cookies, security tokens.
Consent Required: No (exempt under applicable privacy regulations).
Performance & Analytics Cookies
Purpose: Help us understand how visitors interact with our site by gathering anonymous metrics (e.g., page views, traffic sources, time spent per page).
Examples: Google Analytics.
Consent Required: Yes (enabled via our Cookie Consent Banner).
Functional Cookies
Purpose: Remember user preferences, regional settings, and display choices to provide enhanced, personalized functionality.
Consent Required: Yes.
Marketing & Targeting Cookies
Purpose: Used to deliver relevant advertisements and track marketing campaign performance across platforms (e.g., Meta Pixel, Pinterest Tag).
Consent Required: Yes.
C. How to Manage and Disable Cookies
When you first visit our website, a cookie banner allows you to accept or decline non-essential cookies. You can also adjust your browser settings at any time to block or delete cookies:
Google Chrome Settings
Apple Safari Settings
Mozilla Firefox Settings
Note: Blocking essential cookies may prevent parts of the store (such as the shopping cart and checkout) from functioning correctly.
9. Third-Party Links
Our website may contain links to external sites, social media platforms (e.g., Instagram, TikTok, Pinterest), or third-party resources. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.
10. Updates to This Policy
We may update this Privacy and Cookies Policy periodically to reflect changes in our legal obligations, technology, or operational practices. Any changes will be posted on this page with an updated “Last Updated” date.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy and Cookies Policy or our data processing practices, please contact:
Mythwick Limited
Ramsey, Isle of Man
Email: privacy@mythwick.com