Privacy Policy

🔍 1. Information We Collect

Information You Provide to Us

When you shop with Velvet Candies, we collect information you voluntarily provide:

• Account Information: Name, email address, password, phone number
• Billing & Shipping: Address, payment information (processed securely through our payment processors)
• Order Details: Products purchased, order history, preferences
• Communications: Email correspondence, customer service messages, reviews, survey responses
• Marketing Preferences: Newsletter subscriptions, promotional opt-ins

Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, time spent, click patterns, referring websites
• Location Data: General geographic location based on IP address
• Cookies & Similar Technologies: See our Cookie Policy below

💼 2. How We Use Your Information

We use your information for the following purposes:

Order Processing & Fulfillment

• Process and ship your orders
• Send order confirmations and shipping notifications
• Handle returns, refunds, and exchanges
• Process payments securely
• Verify your identity and prevent fraud

Customer Service & Support

• Respond to your questions and requests
• Provide customer support and troubleshooting
• Send important account and service updates
• Conduct customer satisfaction surveys

Marketing & Personalization

• Send promotional emails and newsletters (with your consent)
• Personalize your shopping experience and product recommendations
• Display targeted advertising on our site and other platforms
• Run contests, promotions, and loyalty programs

Business Operations & Improvement

• Analyze website usage and improve our services
• Develop new products and features
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our terms

🔒 3. How We Protect Your Information

We take data security seriously and implement industry-standard measures:

• Encryption: All sensitive data is encrypted using 256-bit SSL/TLS technology
• PCI Compliance: We're PCI DSS Level 1 certified for payment processing
• Secure Servers: Data stored on secure servers with restricted access
• Payment Security: We never store your full credit card numbers - handled by our secure payment processors (Stripe, PayPal)
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Staff trained on data protection best practices
• Access Controls: Limited access to personal data on a need-to-know basis

🤝 4. Sharing Your Information

We do not sell your personal information. We only share data with trusted partners for specific purposes:

Service Providers

• Payment Processors: Stripe, PayPal (for secure payment processing)
• Shipping Carriers: USPS, FedEx, DHL (for order fulfillment)
• Email Marketing: Klaviyo, Mailchimp (for newsletters, with your consent)
• Analytics: Google Analytics (for website improvement)
• Customer Support: Gorgias, Zendesk (for support tickets)

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes (subpoenas, court orders)
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Investigate fraud or security issues
• Respond to government requests

Business Transfers

If Velvet Candies is acquired or merged with another company, your information may be transferred to the new entity.

🍪 5. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Types of Cookies We Use

• Essential Cookies: Required for site functionality (shopping cart, checkout, login)
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Marketing Cookies: Used for targeted advertising and personalization
• Preference Cookies: Remember your settings and preferences

Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may limit site functionality. Most browsers allow you to:

• View and delete existing cookies
• Block third-party cookies
• Block all cookies (not recommended)
• Clear cookies when closing your browser

Learn more: Cookie Management Guide

✉️ 6. Marketing Communications

We respect your inbox! Here's how we handle marketing:

Email Marketing

• We only send promotional emails to subscribers who opted in
• Every email includes an easy unsubscribe link
• You can manage preferences in your account dashboard
• Transactional emails (order confirmations, shipping updates) cannot be unsubscribed from

How to Opt Out

• Click "Unsubscribe" at the bottom of any promotional email
• Update preferences in your account settings
• Email us at support@velvetcandies.com

Note: Even after opting out, you'll still receive important account-related emails (order confirmations, shipping notifications, password resets).

👤 7. Your Privacy Rights

Depending on your location, you may have the following rights:

General Rights (All Customers)

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your data (subject to legal requirements)
• Opt-Out: Unsubscribe from marketing communications
• Data Portability: Receive your data in a portable format

GDPR Rights (EU/UK Customers)

• Right to Object: Object to data processing for certain purposes
• Right to Restriction: Request limited processing of your data
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: Contact your local data protection authority

CCPA Rights (California Residents)

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the "sale" of personal information (we don't sell data)
• Right to Non-Discrimination: No discrimination for exercising your rights

👶 8. Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you're a parent or guardian and believe your child has provided us with personal information, please contact us and we'll delete it immediately.

🌍 9. International Data Transfers

Velvet Candies operates globally. Your information may be transferred to and processed in countries other than your own, including:

• Sweden: Where our headquarters and suppliers are located
• United States: Where our servers and some service providers are based
• Other Countries: Where our trusted partners operate

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the EU Commission
• Adequacy decisions by relevant authorities

🔄 10. Data Retention

We retain your personal information for as long as necessary to:

• Active Accounts: While your account is active
• Order Records: 7 years (for tax and legal compliance)
• Marketing Data: Until you unsubscribe or request deletion
• Analytics Data: Anonymized after 26 months
• Legal Requirements: As required by law

After retention periods expire, we securely delete or anonymize your data.

🔔 11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our business practices
• New legal requirements
• Customer feedback
• Technology updates

When we make significant changes, we'll:

• Update the "Last Updated" date at the top
• Notify you via email (for material changes)
• Display a prominent notice on our website

Continued use of our services after changes constitutes acceptance of the updated policy.