1. Data Controller
Candle Place is the data controller responsible for your personal data.
2. Personal Data We Collect
- Name, email, address, phone number.
- Payment information (via secure payment processors).
- Website usage data, cookies, and IP addresses.
3. Purpose & Legal Basis
- Order processing & delivery – contract necessity.
- Website analytics & improvement – legitimate interest.
4. Sharing Data
- Payment processors (e.g., PayPal, Stripe).
- Shipping partners.
- Analytics providers (e.g., Google Analytics).
- We do not sell your personal data.
5. Data Retention
- Order and account data: kept for [X years] for legal and accounting purposes.
- Marketing consent: kept until you withdraw consent.
6. Your Rights
- Access, correct, or delete your data.
- Withdraw consent at any time.
- Lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).
7. Cookies & Tracking
- We use cookies to improve website performance and user experience.
- You can manage or disable cookies via your browser settings.
8. Security
- We implement appropriate technical and organizational measures to protect your data.
9. Marketing
You can unsubscribe at any time using the link in emails.
You can opt-in for newsletters during checkout.