Privacy Policy

Last Updated: January 2025

This Privacy Policy describes how Candlesgharomaai ("we," "our," or "us") collects, uses, and protects your personal information when you visit our website or interact with our services. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information We Collect

We collect information that you provide directly to us, including:

Contact Information: Name, email address, and phone number when you contact us through our contact form or email.
Communication Data: Messages and inquiries you send to us.
Website Usage Data: Information about how you interact with our website, including IP address, browser type, pages visited, and time spent on pages.

2. How We Use Your Information

We use the information we collect for the following purposes:

To respond to your inquiries and provide customer service.
To communicate with you about our services and products.
To improve our website and user experience.
To comply with legal obligations and protect our rights.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

Consent: When you provide explicit consent for specific processing activities.
Legitimate Interests: To operate our business and provide services, where such interests do not override your rights and freedoms.
Legal Obligations: To comply with applicable laws and regulations.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With service providers who assist us in operating our website and conducting our business, subject to confidentiality agreements.
When required by law or to protect our rights, property, or safety.
In connection with a business transfer, such as a merger or acquisition.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

6. Your Rights (GDPR and PIPEDA)

Depending on your location, you may have the following rights regarding your personal information:

Right to Access: Request access to your personal information we hold.
Right to Rectification: Request correction of inaccurate or incomplete information.
Right to Erasure: Request deletion of your personal information under certain circumstances.
Right to Restrict Processing: Request limitation of how we process your information.
Right to Data Portability: Request transfer of your data to another service provider.
Right to Object: Object to processing of your personal information based on legitimate interests.
Right to Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, please contact us using the contact information provided below.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies. For more information, please see our Cookies Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

12. Third-Party Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party websites you visit.

We may use third-party service providers to help us operate our website and conduct our business. These service providers may have access to your personal information only to perform services on our behalf and are obligated not to disclose or use it for any other purpose.

13. Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify you and relevant authorities as required by applicable law. We will provide information about the nature of the breach, the data that may have been affected, and the steps we are taking to address the situation.

14. Your Choices

You have choices regarding the information we collect and how it is used. You can choose not to provide certain information, opt out of marketing communications, control cookies through your browser settings, and request access or deletion of your personal information at any time.

15. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information (we do not sell personal information).

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: info@candlesgharomaai.world
Address: 990 George St, Vancouver, BC V6A 2E2, Canada
Phone: +16045685483

We will respond to your inquiry within 30 days of receipt. If you are not satisfied with our response, you may contact your local data protection authority.