Privacy policy

Overview

This Privacy Policy describes how Candles of Magic (“we”, “us”, “our”) collects, uses, and discloses your personal information when you visit, use, or make a purchase from our website and online store (the “Services”), or otherwise communicate with us.

By using the Services, you acknowledge that you have read and understood this Privacy Policy. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Our store is hosted on Shopify Inc. (“Shopify”), which provides the e-commerce platform that enables us to provide the Services to you.

Personal information we collect

“Personal information” means information that identifies you, relates to you, describes you, or can reasonably be linked to you. It does not include information that has been de-identified or aggregated so it can no longer reasonably identify you.

Depending on how you interact with the Services, we may collect the following categories of personal information:

Contact details (such as name, billing address, shipping address, phone number, and email address)
Order and transaction information (such as items viewed, added to cart, purchased, returned, or cancelled, and order history)
Payment information (such as payment method details and payment confirmation; note that payment processing is handled by Shopify and/or its payment providers)
Account information (such as username, password, preferences, and settings if you create an account)
Customer communications (such as messages you send to us for support or enquiries)
Device and technical information (such as IP address, browser type, device identifiers, and network connection details)
Usage information (such as how you interact with our website and store)

Sources of personal information

We may collect personal information from the following sources:

Directly from you (for example, when you place an order, create an account, subscribe, or contact us)
Automatically (for example, through cookies and similar technologies when you browse the Services)
From service providers (for example, Shopify, payment processors, analytics providers, and fulfilment/shipping partners)
From third parties (for example, when you use social media integrations or third-party apps connected to the store)

How we use your personal information

We use personal information for purposes including:

Providing and operating the Services (processing orders, payments, shipping, customer support, account management, and returns where applicable)
Improving the Services (analytics, troubleshooting, product and site improvements, and understanding customer preferences)
Marketing and communications (sending promotional emails where you have opted in, and providing updates about products and offers)
Security and fraud prevention (detecting, investigating, and preventing fraudulent or harmful activity)
Legal compliance (complying with applicable laws, responding to lawful requests, and enforcing our policies)

Cookies and similar technologies

We (and Shopify and our service providers) use cookies and similar technologies to operate the Services, remember preferences, run analytics, and support advertising and marketing. You can control cookies through your browser settings, but disabling cookies may affect some features of the Services.

How we disclose personal information

We may disclose personal information in the following circumstances:

With Shopify and service providers that help us operate the Services (such as payment processing, analytics, customer support, cloud storage, fulfilment, and shipping).
With marketing and advertising partners where permitted, to help us promote our products and measure campaign performance. These partners may use your information in accordance with their own privacy policies.
When you direct us (for example, when you request shipping to a specific address, use social media widgets, or connect third-party apps).
For legal reasons (to comply with legal obligations, respond to lawful requests, enforce our terms and policies, and protect our rights and the rights of others).
Business transactions (such as a merger, acquisition, restructuring, or sale of assets).

Relationship with Shopify

The Services are hosted by Shopify. Shopify may collect and process personal information about your access to and use of the Services in order to provide and improve Shopify services. Information you submit to the Services may be transferred to and processed in countries other than where you reside.

Shopify may also provide enhanced features that use information from your interactions with our store and with other merchants and Shopify. In these circumstances, Shopify is responsible for processing personal information for those Shopify features, including responding to certain rights requests related to that processing.

To learn more about Shopify’s privacy practices, you can visit Shopify’s consumer privacy pages and privacy portal.

Third-party websites and links

The Services may contain links to third-party websites or services. We are not responsible for the privacy or security practices of third parties. Please review their policies before providing them with your personal information.

Children’s data

The Services are not intended for use by children. We do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you believe a child has provided us with personal information, please contact us so we can take appropriate steps.

Security and retention

No security measures are perfect, and we cannot guarantee absolute security. We recommend that you do not send sensitive information to us through unsecured channels.

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements and policies.

Your rights and choices

Depending on where you live, you may have rights regarding your personal information, such as the right to access, delete, correct, or receive a copy of your information, and in some cases, object to or restrict certain processing. These rights are not absolute and may be limited by applicable law.

Marketing communications: You can opt out of promotional emails at any time by using the unsubscribe link in our emails. You may still receive non-promotional messages related to orders or your account.

We may need to verify your identity before processing privacy-related requests. We will not discriminate against you for exercising your rights.

International transfers

We may transfer, store, and process personal information outside the country where you live. If we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as Standard Contractual Clauses (or equivalent mechanisms), unless the destination country has been deemed to provide an adequate level of protection.

Complaints

If you have concerns about how we handle your personal information, please contact us and we will do our best to resolve the issue. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or operational reasons. We will post the updated version on this page and revise the “Last updated” date.