Privacy
Last updated 11 October 2026.
This website is operated by Cognify AI Ltd (company number 16288480), which is the data controller for the personal data described here. Products are sold by Prestigious Aroma, a sole trader business, which receives the details needed to fulfil your order. Contact for any privacy question: support@prestigious-aroma.co.uk.
What we collect
When you order: your name, email address, delivery and billing address, phone number, what you bought and how much you paid. Payments are taken by Mollie on its own secure page, so we never see or store your card details.
If you create an account: your name, email address and password (stored only in scrambled, hashed form), your order history and any collections you save.
If you use the support chat or the scent finder: what you type, and for order questions the order details we look up for you. If you send a message to our team, we receive your name, email address, message and the chat so far.
When you browse: technical information such as your IP address and browser, used to keep the site running, secure and free from abuse.
How we use it and why
To take, deliver and support your order, handle returns and refunds, and run your account. This is needed to perform our contract with you.
To answer your questions, prevent fraud and misuse (for example rate limits and the chat’s bot check), and keep the site working. These are our legitimate interests in running a safe, reliable shop.
To keep tax and accounting records, as the law requires.
To email you about new scents, only if you tick “Email me when new scents drop” at checkout. That is based on your consent, which you can withdraw at any time by replying to any such email or writing to us. Order emails (confirmation, dispatch) are not marketing and are always sent.
We do not sell your data, use advertising or tracking cookies, or make decisions about you by automated means that have legal or similarly significant effects.
Who we share it with
Only the service providers we need, each bound to protect it: Mollie (payments, Netherlands), Royal Mail (your name and delivery address, to deliver your parcel), OVHcloud (our website hosting, in its European data centres), Google Workspace (our email), and OpenAI (the AI behind the support chat and scent finder, which receives what you type there and, for order questions, the order details we look up).
OpenAI and Google may process data in the United States. Where data leaves the UK, it is protected by the safeguards UK law requires, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum. OpenAI does not use data sent through its API to train its models.
We may also share data where the law requires it, for example with HMRC.
How long we keep it
Order and payment records: 6 years, to meet tax rules. Your account: until you ask us to delete it (order records are still kept for 6 years). Messages to our team: up to 2 years. Support chat and scent finder conversations are not stored by us; OpenAI may keep them for up to 30 days to monitor abuse. Marketing consent: until you withdraw it. Server logs: up to 30 days.
Cookies and similar storage
We only use storage the site needs to work, so we don’t ask for cookie consent: a cookie that keeps your bag and sign-in (vendure-auth-token), one that shows your order confirmation after paying (pa-placed-order), one for your currency (vendure-currency), and your light or dark mode choice, saved in your browser. Mollie sets its own cookies on its payment page. No analytics or advertising cookies are used.
Your rights
Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email support@prestigious-aroma.co.uk; we reply within one month.
If you’re unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).
Changes
We’ll update this page if how we use data changes, and change the date at the top.