Legal

Privacy Policy

Last updated: May 2026

CandieLocks ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit candielocks.com or use our services. By using our website, you consent to the practices described in this policy.

1. Information We Collect

Personal Information You Provide

When you book appointments, make purchases, fill out contact forms, or interact with our website, we may collect: your full name, email address, phone number, payment information (processed securely via Stripe — we do not store card details), service preferences and booking history, and any messages or notes you provide through our forms.

Information Collected Automatically

When you visit our website, we automatically collect certain information through cookies and similar technologies, including: IP address, browser type and version, device information, pages visited and time spent on pages, referring website or source, and general geographic location (city/state level).

Google Analytics

We use Google Analytics (GA4) to analyze website traffic and usage patterns. Google Analytics collects data such as pages visited, session duration, and general demographics. This data is anonymized and used solely to improve our website experience. You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on or by declining cookies via our cookie consent banner.

2. How We Use Your Information

We use the information we collect to: process and manage your service bookings and appointments; process product orders and payments; communicate with you about your appointments, services, and inquiries; send you booking confirmations and appointment reminders; respond to your questions and provide customer support; improve our website, services, and user experience; send marketing communications (only with your consent); comply with legal obligations; and protect against fraud and unauthorized activity.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information with: payment processors (Stripe) to process your transactions securely; email service providers to send booking confirmations and notifications; analytics providers (Google Analytics) for website usage analysis; and law enforcement or regulatory authorities when required by law. All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4. Cookies & Tracking Technologies

Our website uses cookies — small text files stored on your device — to enhance your experience. We use essential cookies (required for the website to function properly, including session management), analytics cookies (Google Analytics cookies to understand website usage patterns), and functional cookies (to remember your preferences such as cookie consent choices). You can manage your cookie preferences through our cookie consent banner displayed when you first visit the website. You can also control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including: encrypted data transmission (SSL/TLS) across our entire website, secure payment processing through Stripe (PCI-DSS compliant), access controls limiting who can view personal data, and regular security reviews of our systems. While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, including: booking and service records (retained for up to 3 years for service history and follow-up), contact form submissions (retained for up to 1 year), purchase and transaction records (retained as required by tax and accounting laws), and analytics data (aggregated and anonymized, retained indefinitely). You may request deletion of your personal data at any time by contacting us.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right to Access — Request a copy of the personal information we hold about you.
  • Right to Correction — Request correction of inaccurate or incomplete information.
  • Right to Deletion — Request deletion of your personal data (subject to legal retention requirements).
  • Right to Opt-Out — Opt out of marketing communications at any time.
  • Right to Data Portability — Request your data in a portable format.
  • Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA): the right to know what personal information we collect, use, and disclose; the right to request deletion of your personal information; the right to opt out of the sale of personal information (we do not sell personal information); and the right to non-discrimination for exercising your CCPA rights. To exercise your CCPA rights, contact us at [email protected]. We will respond to verified requests within 45 days.

9. Nevada Privacy Rights

As a Nevada-based business, we comply with Nevada privacy laws. Nevada residents may submit a request directing us not to sell their personal information. We do not currently sell personal information as defined under Nevada law. To submit such a request, contact us at [email protected].

10. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected information from a child under 13, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this page periodically. Your continued use of the website after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is being handled, please contact us: CandieLocks Email: [email protected] Location: Las Vegas, NV Website: candielocks.com We aim to respond to all privacy-related inquiries within 30 days.

Questions about your privacy?