Privacy Policy

Who is responsible

Ishika Agrawal, trading as Candy Cabinet, of [REGISTERED ADDRESS — NOT YET PROVIDED], decides how the information described here is used. Write to orders@thecandycabinet.com about anything on this page.

What stays in your browser and never reaches us

Your cart and your saved items are stored in your own browser’s local storage, under the keys cc.cart.v1 and cc.wishlist.v1. They are not sent to us, not tied to any account, and not visible to us in any form.

They stay until you clear your browser data, or you can empty them by removing everything from your cart and wishlist. Because they live on the device, a cart built on your phone will not appear on your laptop.

What we do receive

When you write to us

Your email address and whatever you put in the message. We keep it so we can reply and refer back to it if you write again.

When you place an order

Your name, delivery address, email address and phone number — because a parcel cannot be sent without them — and a record of what you bought.

Payment details

Handled entirely by our payment provider on their own systems. We never see, receive or store your card number, CVV or UPI credentials. We are told only whether a payment succeeded and a reference for it.

Hosting records

This site is hosted by Vercel, which keeps standard server logs including IP addresses and the pages requested. These are a normal part of running a website and are used for security and diagnosing faults.

Tracking

There are no advertising cookies, no analytics and no third-party trackers on this site. We do not build a profile of you, and we do not follow you elsewhere on the internet. The local storage described above is functional — it is how a cart works without an account — and is not used to identify you.

Should we ever add analytics, this page will be updated before it goes live, not after.

Our mailing list

The mailing list is not yet operational. The sign-up form on the site does not currently store addresses anywhere. When it does start working, this page will say who runs it and how to unsubscribe, and every email will carry a one-click unsubscribe link.

Who else sees your information

We share only what is necessary to get you your order:

• Our payment provider — to take the payment and to check it is not fraudulent.
• Our courier — your name, address and phone number, so they can deliver and contact you if they cannot find you.
• Vercel, our host, which processes requests to the site.
• Anyone we are legally required to disclose to, such as a tax authority or under a valid court order.

We do not sell your information, and we never will. We do not share it for anyone else’s marketing.

How long we keep it

Order records are kept as long as tax and accounting law requires. Correspondence is kept while it is useful for supporting you, and cleared out when it is not. Anything held only with your consent is deleted as soon as you withdraw it.

What you can ask us to do

• Tell you what we hold about you.
• Correct anything that is wrong.
• Delete it, where we are not required to keep it for tax or legal reasons.
• Stop using it for a particular purpose.
• Send you a copy.

Write to orders@thecandycabinet.com. We will respond within 30 days. There is no charge, and you do not need to give a reason.

Complaints

If you are unhappy with how your information has been handled, contact us first at orders@thecandycabinet.com or +91 89779 37035, and we will look into it properly. You also retain the right to complain to the relevant data protection authority.

Children

This site is not directed at children under 18, and we do not knowingly collect their information. If you believe a child has given us personal information, tell us and we will remove it.

Security

The site is served over HTTPS. Payment information never touches our systems. No system is perfectly secure, but we keep what we hold to the minimum, which is the most effective protection available to a business our size.

Changes

We will update this page when what we do changes, and the effective date at the top will change with it.