Privacy Policy

Information We Collect

We collect information that you provide directly to us, including:

• Name and contact information (email address, phone number, mailing address)
• Payment and billing information
• Order history and preferences
• Communication preferences and marketing choices
• Information provided through customer service interactions

We also automatically collect certain information when you visit our website:

• Browser type and version
• Operating system
• IP address and general location
• Pages visited and time spent on our site
• Referring website addresses

How We Use Your Information

We use the collected information for various purposes:

• Processing and fulfilling your orders
• Communicating with you about your purchases
• Providing customer support and responding to inquiries
• Sending promotional materials and special offers (with your consent)
• Improving our website, products, and services
• Analyzing usage patterns and customer preferences
• Detecting and preventing fraud or security breaches
• Complying with legal obligations

Legal Basis for Processing

In the United States, we process your personal information based on the following legal grounds:

• Contract Performance: To fulfill our contract with you, including processing orders and providing services
• Legitimate Business Interests: To improve our services, prevent fraud, ensure website security, and conduct marketing activities
• Consent: When you have given explicit consent, such as for marketing communications or cookie usage
• Legal Obligations: To comply with applicable federal and state laws and regulations, including tax and accounting requirements
• Vital Interests: To protect your safety, the safety of others, or prevent imminent harm

You may withdraw consent at any time where we rely on consent as the legal basis for processing. Note that withdrawing consent may limit your ability to use certain features of our website.

International Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, we process your personal data based on GDPR-compliant legal grounds. You have additional rights under GDPR, including the right to data portability and the right to object to processing. Contact us to exercise your GDPR rights.

Information Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We engage trusted third-party companies to perform services on our behalf, such as payment processing, shipping, and marketing. These providers have access only to the information necessary to perform their functions.
• Legal Requirements: We may disclose information if required by law, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• Protection of Rights: We may share information to protect our rights, property, or safety, or that of our users or others.

Third-Party Services

We use various third-party services to enhance our website functionality and analyze user behavior:

Google Advertising

We use Google Ads for conversion tracking and remarketing:

• Conversion Tracking: Google Ads conversion tracking helps us measure the effectiveness of our advertising campaigns by tracking actions users take after clicking our ads
• Remarketing: We use Google's remarketing services to show you relevant advertisements on other websites based on your previous visits to our site

You can opt out of Google's use of cookies for advertising by visiting Google's Ads Settings.

Google Analytics

We use Google Analytics to understand how visitors interact with our website:

• Tracks page views, session duration, and user behavior
• Helps us improve website performance and user experience
• Data is collected anonymously and aggregated

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Google Maps API

We use Google Maps API to display our location on the contact page. When you interact with the map, Google may collect certain information. Please review Google's Privacy Policy for more information.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content. Cookies are small data files stored on your device.

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our website. For more information, please see our Cookies Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Secure Socket Layer (SSL) encryption for data transmission
• Regular security assessments and updates
• Restricted access to personal information
• Employee training on data protection practices

While we strive to protect your information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.

Your Rights and Choices

You have certain rights regarding your personal information under United States federal and state laws:

• Access: You may request access to the personal information we hold about you.
• Correction: You can request correction of inaccurate or incomplete information.
• Deletion: You may request deletion of your personal information, subject to legal obligations and business needs.
• Opt-Out: You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.
• Do Not Sell: We do not sell your personal information. If this policy changes in the future, we will notify you and provide an opt-out mechanism.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You can request information about the categories and specific pieces of personal information we collect, use, disclose, and sell (if applicable).
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information. Currently, we do not sell or share personal information for advertising purposes.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Limit Use: You can request that we limit the use of sensitive personal information.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your California privacy rights, please contact us at travelorga@candleatelierol.world or call +1 281 304 5820. We will verify your identity before processing your request. You may also designate an authorized agent to make requests on your behalf.

Other State Privacy Laws: Residents of other states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, and Utah) may have similar rights. Contact us to learn more about your specific rights.

To exercise any of these rights, please contact us at travelorga@candleatelierol.world or call +1 281 304 5820.

Children's Privacy (COPPA)

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under the age of 13 without parental consent.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at travelorga@candleatelierol.world. We will take steps to delete such information from our systems promptly.

This policy complies with the Children's Online Privacy Protection Act (COPPA). We will not collect, use, or disclose personal information from children under 13 without verifiable parental consent.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Information: Retained while your account is active and for a reasonable period thereafter
• Order Information: Retained for 7 years to comply with tax and accounting requirements
• Marketing Data: Retained until you opt out or request deletion
• Customer Service Records: Retained for 3 years after the last interaction
• Website Analytics: Aggregated data retained indefinitely in anonymized form

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our website, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

For transfers from the EEA to countries outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a new effective date. We encourage you to review this policy regularly.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: