Your information, protected
Privacy Policy
Last updated: September 2026
At Elixir House we take your privacy as seriously as our perfumes. Here we explain what data we collect, why, and what rights you have.
1. Data controller
The controller of your data is Elixir House, contactable at elixirhouseelite@gmail.com.
2. Data we collect
We collect: account data (name, email, encrypted password), order data (products, delivery address, amount), technical browsing data (functional cookies) and, if you sign in with Google, your name, email and profile picture as provided by Google.
3. Purpose
We use your data to: manage your orders and deliveries, send transactional communications (confirmation, shipping, delivery), answer your enquiries, send stock alerts you have requested and improve the store's operation.
4. Payments
Payments are processed entirely by Stripe. Elixir House never sees, stores or processes your full card details.
5. Legal basis
We process your data on the basis of: performance of the purchase contract, your consent (stock alerts, account) and our legitimate interest in maintaining the security and availability of the service.
6. Retention
We keep your account data while it remains active and order data for the periods required by applicable tax and consumer regulations.
7. Recipients
We only share data with the providers essential to operate: Stripe (payments), the transactional email service and the courier company delivering your order. We never sell your data to third parties.
8. Cookies
We only use technical cookies necessary for the store to function (session, cart, language and currency preferences). We do not use third-party advertising cookies.
9. Your rights
You have the right to access, rectify, erase, restrict and port your data, as well as to object to its processing. To exercise these rights, write to elixirhouseelite@gmail.com. You may also lodge a complaint with your country's data protection authority.
10. Security
We apply appropriate technical and organisational measures: password encryption, HTTPS communications and restricted data access.