Privacy Policy — CandyClubCo
Effective Date: April 4, 2026
Introduction
CandyClubCo (“we”, “us”, “our”) operates candyclubco.io and is committed to protecting personal information. This Privacy Policy describes what we collect, how we use it, who we share it with, and your choices. By using our site or placing an order you accept this policy.
Information We Collect
- Contact & Order Data: name, email, billing and shipping addresses, phone number, order history.
- Payment Data: payment instrument details submitted during checkout (processed by third parties; see below). May include 3D Secure verification information when required.
- Account Data: username, password and profile information if you create an account.
- Technical & Usage Data: IP address, device information, browser type, pages visited, referrer, and other analytics data.
- Cookies & Similar Technologies: session and persistent cookies, local storage, and similar tools for site functionality, analytics, and marketing.
- Communications: correspondence with customer support, order notes, and marketing preferences.
How We Use Information
- To process and fulfill orders, verify payments, and manage accounts.
- To communicate about orders, updates, support requests, and marketing (with consent where required).
- To maintain, secure, and improve our site, detect fraud, and enforce our terms.
- To analyze usage, personalize content, and run promotions and advertising.
- To comply with legal obligations and respond to legal requests.
Legal Basis (where applicable)
We rely on contractual necessity to process orders, legitimate interests for operations and fraud prevention, consent for marketing communications, and legal obligations when required.
Third-Party Services & Sharing
- Payment Processors: We use Stripe to process payments; Stripe may perform additional verification (e.g., 3D Secure). Payment data may be transmitted to and processed by Stripe and other payment service providers.
- Service Providers: We may share data with fulfillment partners, hosting and analytics providers, email and marketing platforms, and customer support tools.
- Legal & Safety: We may disclose information to comply with laws, respond to legal requests, protect rights, or investigate fraud or security issues.
- Business Transfers: In the event of a merger, sale, or reorganization, user information may be transferred as an asset.
Retention
We retain personal data as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and legal requirements.
Security
We implement administrative, technical, and physical measures designed to protect personal information. No system is completely secure; we cannot guarantee absolute security and are not liable for unauthorized access beyond our reasonable controls.
International Transfers
Data may be processed or stored outside British Columbia/Canada by service providers. Where applicable, we take steps to ensure appropriate safeguards consistent with applicable law.
Your Choices & Rights
- Access, correction, or deletion requests: Contact us at info@candyclubco.io to request access, update, or delete personal data, subject to legal exceptions.
- Marketing: You may opt out of marketing messages using provided unsubscribe mechanisms.
- Cookies: Most browsers let you manage cookie settings; blocking cookies may affect site functionality.
- Account: You can delete your account or request account data; some order records may be retained for legal or tax purposes.
Links & Third-Party Sites
Our site may link to third-party sites with separate privacy practices. We are not responsible for their content or practices.
Changes to This Policy
We may update this policy; changes take effect when posted. Material changes may be notified via email or site notice.
Contact
For questions or privacy requests contact: info@candyclubco.io
Disclaimer: This policy is a general template and does not constitute legal advice. Consider consulting legal counsel to ensure compliance with applicable laws (including PIPA in British Columbia and federal Canadian privacy laws).