Privacy Policy
Last Updated: 2025
Introduction
Candlelightil ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or interact with our services.
This policy complies with the General Data Protection Regulation (GDPR) for European users and the Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian users.
Information We Collect
Personal Information
We may collect the following personal information when you contact us or use our services:
- Name
- Email address
- Phone number (if provided)
- Mailing address (if provided)
- Any other information you voluntarily provide in messages or inquiries
Automatically Collected Information
When you visit our website, we may automatically collect certain information about your device and browsing behavior, including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referring website addresses
This information is collected through cookies and similar tracking technologies. See our Cookies Policy for more details.
How We Use Your Information
We use the collected information for the following purposes:
- To respond to your inquiries and provide customer service
- To communicate with you about our services
- To improve our website and services
- To analyze website usage and trends
- To comply with legal obligations
- To protect our rights and prevent fraud
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your personal data based on:
- Consent: When you provide explicit consent for specific processing activities
- Legitimate Interest: For website analytics and service improvement
- Contractual Necessity: To fulfill our obligations when you request information or services
- Legal Obligation: To comply with applicable laws and regulations
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With service providers who assist us in operating our website and conducting our business (under strict confidentiality agreements)
- When required by law or to respond to legal process
- To protect our rights, property, or safety, or that of others
- In connection with a business transfer or merger (with notice to affected users)
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
Contact information is retained until you request deletion or until it is no longer needed for the purpose for which it was collected.
Your Rights
GDPR Rights (European Users)
If you are located in the EEA, you have the following rights:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Data Portability: Request transfer of your data to another service
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
PIPEDA Rights (Canadian Users)
If you are located in Canada, you have the right to:
- Access your personal information
- Request correction of inaccurate information
- File a complaint with the Privacy Commissioner of Canada
Exercising Your Rights
To exercise any of these rights, please contact us at:
Email: support@candlelightil.world
Address: 1529 W 4th Ave, Vancouver, BC V6J 1L6, Canada
We will respond to your request within 30 days, or as required by applicable law.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.
Children's Privacy
Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.
Data Processing Details
We process personal data for the following specific purposes:
- Service Provision: To provide information about our products and services, respond to inquiries, and facilitate studio visits
- Communication: To send updates about plant care, seasonal availability, and studio events (with your consent)
- Website Improvement: To analyze website usage patterns and improve user experience
- Legal Compliance: To meet legal obligations and protect our legal rights
- Fraud Prevention: To detect and prevent fraudulent activities and ensure website security
Third-Party Service Providers
We may engage third-party service providers to assist with various aspects of our operations. These providers may have access to your personal information only to perform services on our behalf and are obligated not to disclose or use it for any other purpose.
Types of service providers we work with include:
- Website hosting and maintenance providers
- Analytics and performance monitoring services
- Email communication services
- Customer relationship management systems
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and store information about your website usage. For detailed information about the types of cookies we use and how to manage them, please refer to our Cookies Policy.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours (as required by GDPR) and inform affected individuals without undue delay.
If you become aware of any potential data breach or security issue, please contact us immediately at support@candlelightil.world.
Your Consent
By using our website and providing your personal information, you consent to the collection, use, and disclosure of information in accordance with this Privacy Policy.
You may withdraw your consent at any time by contacting us. However, please note that withdrawing consent may affect our ability to provide certain services to you.
Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. Material changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we protect your information.
Your continued use of our website after any changes to this Privacy Policy constitutes your acceptance of those changes.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Candlelightil
1529 W 4th Ave, Vancouver, BC V6J 1L6, Canada
Email: support@candlelightil.world
Phone: +12363394903
This Privacy Policy was last updated and is effective as of the date shown above.