Privacy policy

Who we are

This website is run by Colorado Candle Co. ("we", "us"), a Colorado business. You can reach us at [email protected].

What we collect

Order details. When you check out: your name, email address, phone number, shipping address, billing address and what you bought.
Payment details. Payments are processed by Stripe. Your card number goes directly to Stripe, and we never see or store it. We receive limited information such as the card type and last four digits.
Messages. If you email us, we keep the message and your email address so we can reply.
Technical data. Like most websites, our hosting provider (Cloudflare) processes basic request data, such as IP address, browser type and the pages requested, to deliver the site and protect it from abuse.
Your cart. Your cart is stored in your own browser's local storage. It isn't sent to us until you check out.

How we use it

To make, ship and deliver your order, and send you a receipt and tracking.
To answer your questions and handle replacements, refunds and other support.
To prevent fraud and keep the site secure.
To keep the business and tax records the law requires.

We don't send marketing emails unless you've asked to receive them, and we don't sell or rent your personal information to anyone.

We share information only with the companies that help us run the store, and only what each one needs:

Stripe, to process payments. See Stripe's privacy policy.
Our fulfillment partners (Printify and the candle maker that produces our candles), who receive your name, shipping address and contact details to make and ship your order.
Shipping carriers, who receive your name and address to deliver your package.
Cloudflare, which hosts and secures this website.

We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a sale or transfer of the business.

Cookies and tracking

This site doesn't use advertising or analytics cookies, and doesn't track you across other websites. Cloudflare may set a strictly necessary cookie to protect the site from bots. Stripe's checkout page sets its own cookies to process your payment and prevent fraud.

How long we keep it

We keep order records for as long as we need them for tax, accounting and legal purposes, generally up to seven years. We keep emails for as long as we need them to help you.

Your choices and rights

You can ask us to tell you what personal information we hold about you, correct it, or delete it. Email [email protected] and we'll respond within 45 days. We may need to confirm your identity first, and we may need to keep some records the law requires us to keep. Depending on where you live, including Colorado and California, you may have additional rights under state privacy laws, and we'll honor them. We will never treat you differently for exercising them.

Security

The whole site is served over an encrypted connection (HTTPS). Payments are handled by Stripe, which is certified to the highest level of the card industry's security standard (PCI DSS Level 1). Access to order information is limited to the people who need it to run the store.

Children

This site isn't directed to children under 13, and we don't knowingly collect their personal information.

Changes to this policy

If we change this policy, we'll post the new version here and update the date at the top.

Contact

Colorado Candle Co. · [email protected]