Privacy Policy

Last updated: May 26, 2026

🔒 Your Privacy Is Sweet to Us

Welcome to the privacy breakdown for candyroom.ca, operated by The Candy Room. While we love a hype product drop, we take a zero-nonsense approach to protecting your personal information. This policy explains exactly what data we collect when you shop with us, why we need it, how we keep it safe, and how you can stay in full control of your digital footprint.

1. What We Collect

We only gather the essential details required to get your candy haul into your hands safely. This includes:

• Order Information: Your name, email address, shipping address, billing address, phone number (optional), and your exact purchase history.
• Account Details: If you choose to create a customer profile, we securely store your email and a cryptographically hashed version of your password. We never store or see your plain-text password.
• Payment Details: All transactions are securely handled directly by Shopify Payments and our certified payment gateways. Your credit card numbers never touch, pass through, or live on our servers.
• Digital Cruising Data: Standard, anonymized website analytics including pages you visited, how long you hung out on a page, your device type, and the site that referred you to us.
• Marketing Consent: Your email address or phone number, but strictly only if you explicitly choose to opt into our newsletter or SMS notification lists.

2. Why We Collect It

We use your information exclusively to build a seamless shopping experience. Specifically, we use it to:

• Process, pack, and ship your candy orders directly to your doorstep.
• Answer your customer support requests and fix order issues swiftly.
• Optimize our website design and curate the best international snack selections based on aggregate popularity.
• Send you early-access marketing alerts about new drops, but only if you gave us the green light to do so.

3. Who We Share Data With & Global Transfers

We do not sell, rent, or trade your personal data to anyone for cash. Period.

To run a modern e-store, we securely share necessary information with trusted service partners who perform operational tasks on our behalf:

• Shopify: Our secure e-commerce platform that hosts our store database.
• Shipping Carriers: Canada Post, UPS, or FedEx, so they know exactly where to deliver your box.
• Payment Gateways: Certified processors to securely validate and charge your payment method.
• Communication Hubs: Third-party email and SMS delivery tools to send your receipts, tracking numbers, and opted-in newsletters.

International Data Transfer Note: Because Shopify operates globally, your data may be processed or safely stored on secure servers located outside of Canada (including the United States). While your information is abroad, it remains fully protected under rigorous security frameworks but may be subject to the legal jurisdictions of those regions.

4. Cookies & Pixels

We use cookies to keep our digital store functioning smoothly. They do the heavy lifting behind the scenes to remember what items you threw in your shopping cart, keep you securely logged into your profile, and save your site preferences. You can wipe out or block cookies at any time via your browser settings, though doing so might empty your active cart or log you out of your account. For custom ad-targeting preferences and pixel management, please visit our dedicated Privacy Choices page.

5. Your Legal Rights & Choices

In complete compliance with Canada’s federal privacy law (PIPEDA), British Columbia’s Personal Information Protection Act (PIPA), and Quebec’s Law 25, you hold absolute authority over your digital data. You have the right to:

• Request a clear copy of the personal data we hold about you.
• Correct or update any inaccurate or outdated information in our files.
• Withdraw your consent entirely and request the total deletion of your personal data (unless we are legally or financially obligated to hold onto specific transactional logs for Canadian tax audits).
• Opt-out of promotional marketing messages instantly using the “Unsubscribe” button at the bottom of any email or by replying “STOP” to any SMS text.

6. Data Retention & Security

We employ robust administrative and digital safeguards to defend your data against unauthorized access, leaks, or modification. We retain standard order logs for a mandatory 7 years to comply with the Canada Revenue Agency (CRA) tax and accounting regulations. General marketing profiles are safely maintained until you decide to hit the unsubscribe link.

7. Children’s Privacy

While our candy selection appeals to sweet teeth of all ages, our website is intended purely for adults and individuals who have reached the age of majority. We do not knowingly collect or track personal information from children under the age of 13. If you believe a minor has accidentally provided us with data, please notify us immediately so we can remove it from our active files.

8. Contact Our Privacy Officer

If you want to exercise your data rights, file an official privacy inquiry, or just want to chat about how your information is handled, reach out directly to our designated Privacy Compliance Team:

• Attention: Privacy Compliance Officer
• Email: info@candyroom.ca
• Address: The Candy Room, 1218 Robson Street, Vancouver, BC, V6E 1C1, Canada