Introduction

Card Candy is committed to respecting the privacy rights of visitors to its Site. This privacy notice explains how we collect, store and use personal data about you when you visit the Site, buy Products from us or otherwise provide your personal data to us. 

What personal information do we collect about you?

When you access and move around Card Candy, register an Account or purchase a Product, we may collect some or all of the following personal data about you:

  • a username and password;

  • name, date of birth, age and sex;

  • billing and delivery addresses, email address and phone number(s);

  • Payment Method (typically credit card or debit card) details;

  • your Images and other User Content;

  • correspondence with and from Card Candy;

  • your preferences about receiving communications from Card Candy;

  • information about your use of Card Candy, and your browsing and online purchasing activities; and details we may ask you to submit to verify your identity.

We may also collect some of this personal data from third parties who have your consent to pass your details to us.

How do we use your personal information?

Your personal data will be collected, processed, stored and used by us:

  • to provide the Card Candy service to you in accordance with our agreement;

  • to create personalised Products selected by you;

  • to associate your Account, and your Product purchases, with you, and to verify your identity;

  • if you elect to store an encrypted Payment Method with us, to associate that Payment Method with you when you place an order;

  • to tailor aspects of Card Candy (including its search function and offers) to you;

  • to process payments you make for Products;

  • to pass your Product order for delivery by third party deliverers engaged by us;

  • to provide customer support and improve your customer experience;

  • to contact you by email and mobile communication (such as text (SMS) and “push” notification) in relation to the products or services you have purchased.

Disclosing your personal data

We will not disclose any of your personal data, other than to subsidiary and/or affiliated companies and data processors (including deliverers and payment service providers) under contract with us.

Marketing preferences

When you sign up, we will ask you if you’d like to receive information about other products and services.

Data Retention

If you have not logged into your account for 40 months, your personal details and any photos or other content will be deleted. We retain other minimal data for tax, anti-fraud and other purposes in accordance with our data retention policy.

Your rights

Under the EU General Data Protection Regulation 2016/679 (GDPR) you have a number of rights you can exercise over your data. Your rights are:

  • The right to receive a copy of your data free of charge (know as a Subject Access Request)

  • The right to receive certain data in an electronic format that can be given to another provider (a portability request)

  • The right to have data corrected if it is inaccurate

  • The right to ask us to stop processing or object to processing under certain circumstances

  • The right to ask us to erase data in certain circumstances

  • The right to withdraw consent at any time when that is the legal basis for our processing

Links to third party sites

Our Site may, from time to time, contain links to the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for those websites or their policies.

Security

We employ significant technical and organisational measures to guard against unauthorised or unlawful processing of your personal data and against accidental loss or destruction of, or damage to, your personal data. We believe the measures implemented by our site reduce the likelihood of security problems to a level appropriate to the type of data involved.

Updates to this notice

This privacy notice was last updated on 20 April 2021 Please check back regularly to keep informed of changes to this Notice.