We collect only what we need, we protect what we have, and we never sell what is yours.
Burn That Karma Limited ("we", "us", "our") is the data controller responsible for personal data collected through this website (www.burnthatkarma.co.uk). We are registered with the Information Commissioner's Office (ICO) under registration reference ZB989835.
Burn That Karma Limited
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Company Number: 16714905
Email: sandrine@burnthatkarma.co.uk
This Privacy Policy covers data collected through our website only. When you purchase Burn That Karma products on Amazon, Amazon is the data controller for your transaction, payment, and delivery data. Please review Amazon's Privacy Notice for details.
Since this website does not process orders or payments, the data we collect is limited to:
Your name and email address if you contact us via the contact form or email, subscribe to our newsletter, or request product information (such as Safety Data Sheets).
Your IP address, browser type, device information, pages visited, time spent on pages, and referring website. We collect this through cookies and similar technologies (see our Cookie Policy).
If you interact with our content on social media platforms (Instagram, Pinterest, etc.), those platforms may share aggregated or anonymised analytics data with us. We do not receive your personal social media account details.
As an Amazon seller, we receive limited buyer information from Amazon related to order fulfilment (such as delivery name, address, and order details). This data is provided by Amazon under their Business Solutions Agreement and is used solely for customer service, product safety notifications, and legal obligations.
We process your personal data on the following legal bases under the UK GDPR:
To respond to your enquiries, improve our website, conduct analytics, and handle product safety or quality issues reported by customers. We only rely on legitimate interests where your rights do not override our interests.
To comply with tax, accounting, product safety, and regulatory requirements, including VAT record-keeping and product recall obligations.
To send you marketing communications (email newsletters, product updates, offers) if you have opted in. You can withdraw consent at any time by clicking the unsubscribe link in any email or contacting us directly.
We may share your personal data with the following categories of recipients, only to the extent necessary:
Email marketing provider: to manage newsletter subscriptions and send marketing communications (only if you have opted in).
Analytics provider: Google Analytics or similar, to understand website traffic patterns (data is anonymised).
Professional advisors: accountants, legal advisors, and auditors where required.
Regulatory authorities: HMRC, ICO, Trading Standards, or other authorities where required by law.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO, or transfers to countries with adequate data protection standards.
Customer service correspondence: 2 years from the date of the last communication.
Newsletter subscribers: until you unsubscribe or withdraw consent.
Amazon order data: retained for 6 years from the date of the transaction as required by HMRC for VAT and accounting purposes.
Website analytics: anonymised and aggregated data may be retained indefinitely.
Under the UK GDPR, you have the following rights regarding your personal data:
Right of access to request a copy of the personal data we hold about you. Right to rectification to request correction of inaccurate or incomplete data. Right to erasure to request deletion of your data where there is no compelling reason for continued processing. Right to restrict processing to request that we limit how we use your data. Right to data portability to receive your data in a structured, commonly used, machine-readable format. Right to object to processing based on legitimate interests, including direct marketing. Right to withdraw consent where processing is based on consent.
To exercise any of these rights, email us at sandrine@burnthatkarma.co.uk. We will respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
For data held by Amazon in connection with your purchases, please contact Amazon directly through your Amazon account.
Our products and website content are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that data promptly.
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the "Last updated" date revised accordingly.