Privacy Policy

1. Introduction

Welcome to CandyPro. We respect your privacy and are committed to protecting your personal data.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes first name, last name, username or similar identifier.
• Contact Data includes billing address, delivery address, email address and telephone numbers.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.

4. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means, and the applicable legal requirements.

5. Third-Party Data Sharing

We may share your personal data with the following parties: IT service providers (cloud hosting, email services), logistics and shipping providers for order fulfilment, payment processors and financial institutions, compliance and KYB verification service providers, AI model providers (when AI features are used), and legal and professional advisors where necessary. We require all third parties to respect the security of your personal data and to process it in accordance with the law. We do not sell your personal data to third parties.

6. User Rights

Under applicable data protection laws, you may have the following rights:

• Right of Access: Request access to your personal data.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure: Request erasure of your personal data ('right to be forgotten').
• Right to Data Portability: Request transfer of your data to a third party.
• Right to Restrict Processing: Request restriction of processing of your personal data.
• Right to Object: Object to processing based on legitimate interests or direct marketing.

7. Cross-Border Data Transfers

Your personal data may be transferred to — and maintained on — computers located outside of your jurisdiction where data protection laws may differ. When we do so, we ensure appropriate safeguards such as standard contractual clauses or adequacy decisions are in place to protect your data.

8. Cookies

Our website uses cookies and similar technologies. Essential cookies are required for the website to operate. Analytics and functional cookies are only used with your consent. Please review our Cookie Policy for detailed information on how to manage your cookie preferences.

9. Data Protection Officer

For purposes of GDPR and other applicable privacy law compliance, our Data Protection Officer can be reached at: dpo@candypro.com. For urgent inquiries, please use the subject line Data Privacy in your email.

10. Children's Privacy

Our services are intended for B2B business professionals and are not directed to children under the age of 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last Updated' date. You are advised to review this Privacy Policy periodically for any changes.