Privacy policy

Candyflow operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Candyflow is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified. We may collect or process the following categories of personal information depending on how you interact with the Services, where you live, and as permitted by law:

  • Contact details: name, address, billing address, shipping address, phone number, email.

  • Financial information: credit/debit card details, account numbers, payment confirmation, and transaction details.

  • Account information: username, password, preferences, settings.

  • Transaction information: items viewed, cart activity, wishlists, purchases, returns, cancellations.

  • Communications: customer support messages or inquiries sent to us.

  • Device information: device data, browser information, IP address, network details.

  • Usage information: how you browse or interact with the website.

Personal Information Sources

We may collect information from the following:

  • Directly from you: when you create an account, contact us, or make a purchase.

  • Automatically: through cookies, device data, and browsing activity.

  • Service providers: such as payment gateways, shipping companies, and technology partners.

  • Business partners or third parties.

How We Use Your Personal Information

Depending on your interactions with Candyflow, we may use your personal information to:

1. Provide, Tailor & Improve Services

To process your orders, personalize your shopping experience, manage your account, fulfill shipping, handle returns, send order updates, and improve website performance.

2. Marketing & Advertising

To send promotional messages via email/SMS/notifications or show targeted ads based on your browsing activity.

3. Security & Fraud Prevention

To authenticate your account, prevent fraud, ensure safe transactions, and protect our platform’s integrity.

4. Customer Support

To assist you with inquiries, issues, or support needs.

5. Legal Compliance

To meet legal requirements, respond to authorities, or protect our rights.

How We Disclose Personal Information

We may disclose your personal information in the following situations:

  • With Shopify, vendors, and service providers (IT, analytics, shipping, payment processing).

  • With marketing partners for advertising and retargeting.

  • When you authorize us, such as shipping carriers or social login tools.

  • With our corporate affiliates.

  • During a business transaction, such as mergers or restructuring.

  • To comply with legal obligations.

Relationship with Shopify

Our website is hosted by Shopify, which processes data necessary to deliver the services.
Shopify may collect your data and use it to improve its platform.

To learn more, please refer to the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

Third-Party Websites & Links

Our website may include links to third-party sites.
We are not responsible for the privacy, security, or content of those sites.
You should review their policies separately.

Children’s Data

Candyflow does not knowingly collect data from individuals under the age of majority in your region.
If you believe a child has provided information, contact us to remove it.

Security & Data Retention

While we take steps to secure your data, no system is 100% secure.
We retain personal information as long as necessary to:

  • maintain accounts

  • fulfill services

  • comply with laws

  • resolve disputes

Your Rights & Choices

Depending on your location, you may have the right to:

  • Access your data

  • Delete your data

  • Correct inaccuracies

  • Request a copy of your data

  • Opt-out of marketing communications

You can request these by contacting us.

We do not discriminate based on privacy rights exercised.

Complaints

If you have a complaint about our privacy practices, contact us using the details below.
You may also have the right to escalate your complaint to a regulatory authority.

International Transfers

Your personal information may be transferred to or stored in other countries.
If transferred outside the EEA/UK, recognized legal mechanisms such as Standard Contractual Clauses will be used.

Changes to This Privacy Policy

Candyflow may update this Privacy Policy at any time.
Changes will be posted on the website with a new "Last updated" date.

Contact

For questions, concerns, or privacy requests, contact:

📧 support@candyflow.com
📍 Address : 505, Nyay Khand III, Indirapuram, Ghaziabad, Uttar Pradesh, 201014, India
📞 B2B Contact (WhatsApp): 9667938288