Privacy policy
Last updated: April 12, 2026
CandyHaus operates this store and website, including all related information, content, features, tools, products, and services to provide you, the customer, with a customized shopping experience (the “Services”). CandyHaus is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose personal data when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal data.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and agree to the collection, use, and disclosure of your data as described herein.
What personal data do we collect or process?
When we use the term “personal data,” we refer to information that identifies you or another person or can be directly associated with you. Personal data does not include information that is collected anonymously or has been anonymized in such a way that it can no longer be associated with you. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal data, including inferences drawn from such data:
- Contact details including name, postal address, billing address, shipping address, phone number, and email address.
- Financial data including credit, debit, and financial account numbers, payment card information, transaction details, payment method, payment confirmation, and other payment-related information.
- Account information including username, password, security questions, settings, and preferences.
- Transaction information including items viewed, added to cart, wishlisted, purchased, returned, exchanged, or canceled, as well as past transactions.
- Communications including information you provide when contacting us (e.g., customer support inquiries).
- Device information including device, browser, network connection, IP address, and other identifiers.
- Usage data including information about how and when you interact with our Services.
Sources of personal data
We may collect personal data from the following sources:
- Directly from you (e.g., when you create an account, place an order, or contact us).
- Automatically through the Services (e.g., via cookies and tracking technologies).
- From service providers acting on our behalf.
- From partners and third-party providers.
How do we use your personal data?
We may use your personal data for the following purposes:
- To provide, customize, and improve our Services (including processing payments, fulfilling orders, managing accounts, and delivering products).
- For marketing and advertising (including sending promotional messages and displaying relevant ads).
- For security and fraud prevention.
- To communicate with you (customer support and service updates).
- For legal reasons (compliance with laws and handling disputes).
How do we share personal data?
We may share personal data with:
- Shopify and third-party service providers (e.g., payment processing, shipping, analytics).
- Marketing and advertising partners.
- Affiliates and business partners.
- Authorities or legal entities when required by law.
Relationship with Shopify
Our Services are hosted by Shopify. Shopify processes personal data to provide and improve the Services. Data may be transferred internationally. For more information, see Shopify’s Privacy Policy.
Third-party links
Our website may contain links to third-party sites. We are not responsible for their privacy practices.
Children’s data
Our Services are not intended for children. We do not knowingly collect personal data from individuals under the age of 16.
Data security
We take reasonable measures to protect your data, but no method is 100% secure.
Data retention
We retain your personal data as long as necessary for business and legal purposes.
Your rights
Depending on your location, you may have rights to access, correct, delete, or transfer your personal data, or opt out of certain uses.
Complaints
If you have complaints, contact us or your local data protection authority.
International transfers
Your data may be transferred and processed outside your country.
Changes
We may update this Privacy Policy from time to time.
Contact
If you have questions, contact us at:
Email: hellocandyhaus@gmail.com
Address: CandyHaus, Wilhelm-Kopp-Str. 4, 65203 Wiesbaden, Germany