CENNEDY CANDLE WORKS PVT LTD — PRIVACY POLICY (OFFICIAL | GLOBAL | GDPR-COMPLIANT)

Effective Date: 18.11.2025

1. INTRODUCTION

Welcome to CENNEDY CANDLE WORKS PVT LTD  (“Cennedy”, “the Company”, “we”, “our”, or “us”). This Privacy Policy explains how we collect, use, store, process, transfer, disclose, and protect your personal information when you visit, browse, interact with, or make purchases from any of our official online properties or digital platforms.

This Privacy Policy applies to all users, customers, visitors, suppliers, contractors, affiliates, subscribers, and business partners who interact with CENNEDY CANDLE WORKS PVT LTD  through any physical or digital medium.

By accessing, browsing, registering, placing an order, contacting us, subscribing, or interacting with our services, you fully agree to the practices listed in this Privacy Policy.

If you do not agree, you must discontinue using our websites and services immediately.

2. COVERED WEBSITES & DIGITAL PROPERTIES

This Privacy Policy applies to all current and future CENNEDY CANDLE WORKS PVT LTD  websites, including but not limited to:

Region                Website Domain
India                 https://cennedy.in
European Union        https://cennedy.eu
United Kingdom        https://cennedy.uk
United Arab Emirates  https://cennedy.ae
United States         https://cennedy.us
Global Storefront     https://cennedy.com

This policy also applies to the following communication, marketing, and support platforms used by our customers:

Platform              Official Link
WhatsApp Business     +91-9163666529
Email Support         support@cennedy.com
Official Facebook Page facebook.com/cennedycandle

NOTE: Any website, marketplace, reseller, affiliate, or social profile not listed above is not officially operated 
or governed by this policy, unless specifically stated.

3. ABOUT OUR COMPANY

Legal Entity Name: CENNEDY CANDLE WORKS PVT LTD 
Business Category: Handmade, Artisanal & Luxury Candle Manufacturer & Exporter

Registered & Operational Address:
M88/203 SP Sukhobristi Housing Complex,
Rajarhat Newtown, Kolkata - 135,
West Bengal, India

Country of Registration: Republic of India
Export Capability: Yes — Worldwide via DHL & FedEx

We specialize in:
✔ Luxury scented candles
✔ Spell candles / dressed candles
✔ Meditation & prayer candles
✔ Customized event candles
✔ Eco-friendly décor candles
✔ Natural essential oil aroma blends

Our manufacturing is:
✔ Handcrafted
✔ In-house
✔ Environmentally responsible
✔ Non-toxic & safety tested

4. APPLICABLE GOVERNING PRIVACY LAWS

This Privacy Policy is drafted in accordance with, and respects compliance requirements under, the following laws:

India
• The Information Technology Act, 2000 & Amendments
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

European Union
• General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679

United Kingdom
• UK Data Protection Act 2018
• UK-GDPR Post Brexit Guidance

United States
• Federal Trade Commission (FTC) Act
• California Consumer Privacy Act (CCPA) principles (where applicable)

United Arab Emirates
• Federal Decree-Law No. 45 of 2021 regarding personal data protection

International
• OECD Privacy Principles
• ISO/IEC 27001 Security Standards

5. DEFINITIONS

Term                 Meaning
Personal Data        Any information that can identify an individual directly or indirectly
Sensitive Data       Financial, authentication, geolocation, or legal identity details
Processing           Collecting, storing, using, updating, analyzing, or transferring personal data
Controller           Entity that decides how and why data is processed (CENNEDY CANDLE WORKS PVT LTD )
Processor            Third-party services used for operations (payments, hosting, shipping, etc.)
Cookies              Small digital files stored on browser to remember preferences
Consent              Freely given, clear approval by user for data usage

6. WHAT INFORMATION WE COLLECT

We collect only data that is voluntarily submitted, automatically captured for security and functionality, 
or essential for completing transactions.

6.1 Personal Information Provided by You

 
We may collect and store the following:
• Full Name  
• Email Address  
• Mobile Number / WhatsApp Number  
• Shipping & Billing Address  
• Country, State, Postal Code  
• Preferred Currency & Language  
• Order History & Feedback  
• Gender (optional)  
• Gift Message or Customization Notes  

6.2 Payment-Related Information

 
We do not store full credit card or banking authentication credentials.  
We may receive limited masked financial info for order verification:
• Payment method used  
• Transaction ID  
• Card type (Visa / Mastercard / Amex)  
• Partial card digits (last 4 only)  

6.3 Automatically Collected Technical Information

  
Collected via cookies, analytics, and server logs:
• IP address  
• Device type & operating system  
• Screen size & browser type  
• Timezone & geolocation (approximate)  
• Pages visited & session duration  
• Click or scroll behavior  
• Referral source  

6.4 Communications & Customer Support Data

 
Includes:
• Email conversations  
• WhatsApp chats  
• Product inquiries  
• Support ticket logs  
• Submitted feedback or reviews  

6.5 Social Media Interaction Data

  
If you interact with us on Facebook, Instagram, or WhatsApp, we may collect:
• Public profile data  
• Username  
• Display picture  
• Comments or messages  

6.6 Legal or Identity Verification Data  
Only required when fraud or legal disputes occur:
• Proof of identity  
• Proof of address  
• Payment dispute communication

7. WHY & HOW WE USE YOUR INFORMATION

We process data strictly for legitimate business, operational, legal, or security purposes.

Purpose               Description
Order placement       To accept, produce, pack & ship orders
Delivery & tracking   To send courier updates & delivery status
Support & assistance  To answer queries & resolve issues
Personalization       To recommend products based on browsing
Legal obligations     To comply with tax, export & audit rules
Safety                To prevent fraud, chargebacks & misuse
Marketing (opt-in)    To send offers, newsletters, coupons & launch updates

We never sell, rent, barter, auction, or commercially trade your data.

8. LEGAL BASIS FOR DATA PROCESSING (GDPR)

Basis                     When It Applies
Consent                  Newsletter signup, marketing communication
Contractual Necessity    When placing an order or requesting service
Legitimate Interest      Website analytics, security monitoring
Legal Obligation         Audits, customs, taxation & compliance
Protection of Vital Interests   Preventing fraud or harmful misuse

9. COOKIE POLICY

We use cookies to enhance user experience, store cart items, display relevant currency, and secure transactions.

Types used:
• Essential cookies (required for checkout)
• Functional cookies (preferences)
• Performance & analytics cookies
• Advertising & remarketing cookies

You may accept, decline, or customize cookie preferences via browser or on-site popup.

10. DATA RETENTION POLICY

Type of Data                   Retention Duration
Order & billing records        Minimum 5–7 years
Support tickets & chats        Up to 36 months
Analytics data                 12–24 months
Newsletter subscriber data     Until unsubscribed
Legal or fraud investigation data  As required

All retention complies with taxation, export law, customs, and warranty law.

11. DATA STORAGE & SECURITY

We maintain rigorous digital and physical security:

• SSL encryption (HTTPS)
• Secure hosting & firewall protection
• Limited access privilege
• Encrypted payment gateway via PCI-DSS systems
• Two-factor authentication on admin panels
• Regular malware and vulnerability scans

However, no online system is 100% hack-proof, and users agree to use the service at their own risk.

12. INTERNATIONAL DATA TRANSFER

Because we ship worldwide, your data may be processed or stored on secure servers outside your country.

Data transfers follow:
• Standard Contractual Clauses (SCC)
• GDPR data adequacy model
• Secure encryption protocols

13. SHARING & DISCLOSURE OF DATA

We share only minimal required data with verified third-party partners:

Category                  Example
Shipping Providers        DHL, FedEx
Payment Gateways          Razorpay, PayPal, Stripe, PayU
Analytics Tools           Google Analytics
Cloud & Hosting           ISO-certified server providers
Legal / Audit             Chartered Accountants / Authorities

No marketer, advertiser, or external database receives full access.

14. CHILD & MINOR DATA POLICY

• Our website is intended only for age 18+ individuals.  
• We do not knowingly collect data from minors.  
• If we detect accidental collection, it is deleted immediately.  

Parents may request data removal via support@cennedy.com

15. USER RIGHTS UNDER GDPR, UK-GDPR & CCPA

You may request any of the following actions at any time:

Right                 Explanation
Access                Get copy of all stored personal data
Rectification         Correct inaccurate information
Deletion              Request data erasure (“Right to be forgotten”)
Restriction           Limit processing of data
Portability           Request export of your data file
Objection             Opt-out of marketing or tracking
Withdraw Consent      Stop previously allowed data use

Submit requests to: support@cennedy.com  
We may require identity validation for security.

16. EMAIL, SMS & WHATSAPP MARKETING POLICY

Marketing communication is strictly opt-in.

You may unsubscribe at any time via:
• Email unsubscribe button
• WhatsApp STOP reply
• By contacting support

We never send spam or share marketing lists.

17. THIRD-PARTY LINKS DISCLAIMER

Our website may contain links to external websites.

We are not responsible for external privacy practices, accuracy, or content.

Users must review the privacy policies of external websites before use.

18. BREACH NOTIFICATION POLICY

In the unlikely event of a suspected or confirmed data breach:

1. Affected users will be notified within 72 hours (GDPR standard).  
2. Authorities will be informed where legally required.  
3. Corrective and preventive action will be immediately implemented.

19. CHANGES & UPDATES TO THIS POLICY

We reserve the right to modify, update, expand, or revise this Privacy Policy.

Updates become effective immediately upon posting.

The Last Updated date will always be displayed at the top.

20. CONTACT INFORMATION

For all privacy, data protection, or legal-related queries:

📌 Registered Business Address:  
CENNEDY CANDLE WORKS PVT LTD   
M88/203 SP Sukhobristi Housing Complex  
Rajarhat Newtown, Kolkata - 135  
West Bengal, India  

📩 Email: support@cennedy.com  
📞 WhatsApp Business: +91-9163666529  
📘 Facebook: facebook.com/cennedycandle

21. FINAL USER CONSENT STATEMENT

By using any Cennedy website, purchasing products, contacting us, or submitting personal data, you  officially acknowledge and agree to:

• Full acceptance of this Privacy Policy  
• Responsible usage of all provided services  
• Compliance with regional laws applicable to you  
• No misuse, fraud, or intentional violation  

If you do not agree, you must immediately discontinue usage of our services.