Privacy policy
Last updated: 15 April 2026
1. General Information
This Privacy Policy describes how Carine Candle OÜ (“we”, “us”, “our”) collects, uses, and processes your personal data when you visit our online store, make a purchase, or interact with us in any other way.
Our online store operates on the Shopify platform.
This Privacy Policy applies in addition to our Terms of Service. In case of any conflict, this Privacy Policy shall prevail regarding personal data processing.
By using our services, you confirm that you have read and understood this Privacy Policy.
2. Personal Data We Collect
Personal data means any information that can identify you.
We may collect the following types of data:
- contact details (name, email address, phone number, address)
- order information (purchases, delivery details, payment information)
- account information (if you create an account)
- communication data (customer support messages)
- device data (IP address, browser type, device information)
- usage data (how you interact with our website)
3. How We Collect Personal Data
We collect personal data in the following ways:
- directly from you (orders, forms, contact)
- automatically when you use our website (cookies and similar technologies)
- through the Shopify platform
- from payment and delivery service providers
4. How We Use Personal Data
We use your personal data to:
- process and fulfil orders
- process payments
- provide customer support
- manage and improve our online store
- ensure security and prevent fraud
- comply with legal obligations
- send marketing communications (only with your consent)
5. Legal Basis for Processing
We process personal data based on:
- performance of a contract (order fulfilment)
- legal obligations (e.g. accounting requirements)
- legitimate interests (website security and improvement)
- consent (for marketing, where applicable)
6. Cookies
We use cookies and similar technologies to:
- ensure proper website functionality
- analyse website traffic
- improve user experience
- display advertisements where applicable
Cookies are divided into:
- essential cookies (necessary for website operation)
- analytics cookies (statistics and usage data)
- marketing cookies (ads and promotions, if used)
You can manage or disable cookies in your browser settings.
7. Sharing of Personal Data
We may share your data with the following parties:
- Shopify
- payment service providers (e.g. Montonio)
- shipping and logistics partners (e.g. DPD)
- IT and marketing service providers
- public authorities, if required by law
We do not sell your personal data to third parties.
8. Shopify
Our online store is hosted on Shopify Inc. Shopify processes personal data to provide services, process payments, and ensure security.
Your data may be processed outside the European Economic Area in accordance with Shopify’s data protection safeguards, including standard contractual clauses and other appropriate measures.
9. Data Retention
We retain personal data only as long as necessary for:
- fulfilling orders
- complying with legal obligations
- resolving disputes
- providing services
10. Your Rights
You have the right to:
- access your personal data
- correct your personal data
- request deletion of your data
- restrict processing
- object to processing
- withdraw marketing consent
If you are located in the European Union, you also have rights under the GDPR.
11. Data Security
We implement reasonable technical and organisational measures to protect your personal data. However, no system is completely secure.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices or content.
13. Data Retention for Disputes
We may retain order-related data for the purpose of resolving disputes and as evidence.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised date.
15. Contact
If you have any questions or wish to exercise your data protection rights, please contact us: