Privacy Policy
CENNEDY CANDLE WORKS — PRIVACY POLICY (OFFICIAL | GLOBAL | GDPR-COMPLIANT)
Effective Date: 23 October 2025
1. INTRODUCTION
Welcome to Cennedy Candle Works (“Cennedy”, “the Company”, “we”, “our”, or “us”). This Privacy Policy explains how we collect, use, store, process, transfer, disclose, and protect your personal information when you visit, browse, interact with, or make purchases from any of our official online properties or digital platforms.
This Privacy Policy applies to all users, customers, visitors, suppliers, contractors, affiliates, subscribers, and business partners who interact with Cennedy Candle Works through any physical or digital medium.
By accessing, browsing, registering, placing an order, contacting us, subscribing, or interacting with our services, you fully agree to the practices listed in this Privacy Policy.
If you do not agree, you must discontinue using our websites and services immediately.
2. COVERED WEBSITES & DIGITAL PROPERTIES
This Privacy Policy applies to all current and future Cennedy Candle Works websites, including but not limited to:
|
Region |
Website Domain |
|
India |
|
|
European Union |
https://cennedy.eu |
|
United Kingdom |
https://cennedy.uk |
|
United Arab Emirates |
https://cennedy.ae |
|
United States |
https://cennedyusa.com |
|
Global Storefront |
This policy also applies to the following communication, marketing, and support platforms used by our customers:
|
Platform |
Official Link |
|
WhatsApp Business |
+91-9748953778 |
|
Email Support |
support@cennedy.com |
|
Official Facebook Page |
facebook.com/cennedycandle |
NOTE: Any website, marketplace, reseller, affiliate, or social profile not listed above is not officially operated or governed by this policy, unless specifically stated.
3. ABOUT OUR COMPANY
Legal Entity Name: Cennedy Candle Works
Business Category: Handmade, Artisanal & Luxury Candle Manufacturer & Exporter
Registered & Operational Address:
M88/203 SP Sukhobristi Housing Complex,
Rajarhat Newtown, Kolkata - 135,
West Bengal, India
Country of Registration: Republic of India
Export Capability: Yes — Worldwide via DHL & FedEx
We specialize in:
✔ Luxury scented candles
✔ Spell candles / dressed candles
✔ Meditation & prayer candles
✔ Customized event candles
✔ Eco-friendly décor candles
✔ Natural essential oil aroma blends
Our manufacturing is:
✔ Handcrafted
✔ In-house
✔ Environmentally responsible
✔ Non-toxic & safety tested
4. APPLICABLE GOVERNING PRIVACY LAWS
This Privacy Policy is drafted in accordance with, and respects compliance requirements under, the following laws:
India
- The Information Technology Act, 2000 & Amendments
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
European Union
- General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679
United Kingdom
- UK Data Protection Act 2018
- UK-GDPR Post Brexit Guidance
United States
- Federal Trade Commission (FTC) Act
- California Consumer Privacy Act (CCPA) principles (where applicable)
United Arab Emirates
- Federal Decree-Law No. 45 of 2021 regarding personal data protection
International
- OECD Privacy Principles
- ISO/IEC 27001 Security Standards
5. DEFINITIONS
|
Term |
Meaning |
|
Personal Data |
Any information that can identify an individual directly or indirectly |
|
Sensitive Data |
Financial, authentication, geolocation, or legal identity details |
|
Processing |
Collecting, storing, using, updating, analyzing, or transferring personal data |
|
Controller |
Entity that decides how and why data is processed (Cennedy Candle Works) |
|
Processor |
Third-party services used for operations (payments, hosting, shipping, etc.) |
|
Cookies |
Small digital files stored on browser to remember preferences |
|
Consent |
Freely given, clear approval by user for data usage |
6. WHAT INFORMATION WE COLLECT
We collect only data that is voluntarily submitted, automatically captured for security and functionality, or essential for completing transactions.
6.1 Personal Information Provided by You
We may collect and store the following:
- Full Name
- Email Address
- Mobile Number / WhatsApp Number
- Shipping & Billing Address
- Country, State, Postal Code
- Preferred Currency & Language
- Order History & Feedback
- Gender (optional)
- Gift Message or Customization Notes
6.2 Payment-Related Information
We do not store full credit card or banking authentication credentials. We may receive limited masked financial info for order verification:
- Payment method used
- Transaction ID
- Card type (Visa / Mastercard / Amex)
- Partial card digits (last 4 only)
6.3 Automatically Collected Technical Information
Collected via cookies, analytics, and server logs:
- IP address
- Device type & operating system
- Screen size & browser type
- Timezone & geolocation (approximate)
- Pages visited & session duration
- Click or scroll behavior
- Referral source
6.4 Communications & Customer Support Data
Includes:
- Email conversations
- WhatsApp chats
- Product inquiries
- Support ticket logs
- Submitted feedback or reviews
6.5 Social Media Interaction Data
If you interact with us on Facebook, Instagram, or WhatsApp, we may collect:
- Public profile data
- Username
- Display picture
- Comments or messages
6.6 Legal or Identity Verification Data
Only required when fraud or legal disputes occur:
- Proof of identity
- Proof of address
- Payment dispute communication
7. WHY & HOW WE USE YOUR INFORMATION
We process data strictly for legitimate business, operational, legal, or security purposes.
|
Purpose |
Description |
|
Order placement |
To accept, produce, pack & ship orders |
|
Delivery & tracking |
To send courier updates & delivery status |
|
Support & assistance |
To answer queries & resolve issues |
|
Personalization |
To recommend products based on browsing |
|
Legal obligations |
To comply with tax, export & audit rules |
|
Safety |
To prevent fraud, chargebacks & misuse |
|
Marketing (opt-in) |
To send offers, newsletters, coupons & launch updates |
We never sell, rent, barter, auction, or commercially trade your data.
8. LEGAL BASIS FOR DATA PROCESSING (GDPR)
|
Basis |
When It Applies |
|
Consent |
Newsletter signup, marketing communication |
|
Contractual Necessity |
When placing an order or requesting service |
|
Legitimate Business Interest |
Website analytics, security monitoring |
|
Legal Obligation |
Audits, customs, taxation & compliance |
|
Protection of Vital Interests |
Preventing fraud or harmful misuse |
9. COOKIE POLICY
We use cookies to enhance user experience, store cart items, display relevant currency, and secure transactions.
Types used:
- Essential cookies (required for checkout)
- Functional cookies (preferences)
- Performance & analytics cookies
- Advertising & remarketing cookies
You may accept, decline, or customize cookie preferences via browser or on-site popup.
10. DATA RETENTION POLICY
|
Type of Data |
Retention Duration |
|
Order & billing records |
Minimum 5–7 years |
|
Support tickets & chats |
Up to 36 months |
|
Analytics data |
12–24 months |
|
Newsletter subscriber data |
Until unsubscribed |
|
Legal or fraud investigation data |
As required |
All retention complies with taxation, export law, customs, and warranty law.
11. DATA STORAGE & SECURITY
We maintain rigorous digital and physical security:
- SSL encryption (HTTPS)
- Secure hosting & firewall protection
- Limited access privilege
- Encrypted payment gateway via PCI-DSS systems
- Two-factor authentication on admin panels
- Regular malware and vulnerability scans
However, no online system is 100% hack-proof, and users agree to use the service at their own risk.
12. INTERNATIONAL DATA TRANSFER
Because we ship worldwide, your data may be processed or stored on secure servers outside your country.
Data transfers follow:
- Standard Contractual Clauses (SCC)
- GDPR data adequacy model
- Secure encryption protocols
13. SHARING & DISCLOSURE OF DATA
We share only minimal required data with verified third-party partners:
|
Category |
Example |
|
Shipping Providers |
DHL, FedEx |
|
Payment Gateways |
Razorpay, PayPal, Stripe, PayU |
|
Analytics Tools |
Google Analytics |
|
Cloud & Hosting |
ISO-certified server providers |
|
Legal / Audit |
Chartered Accountants / Authorities |
No marketer, advertiser, or external database receives full access.
14. CHILD & MINOR DATA POLICY
- Our website is intended only for age 18+ individuals.
- We do not knowingly collect data from minors.
- If we detect accidental collection, it is deleted immediately.
Parents may request data removal via support@cennedy.com
15. USER RIGHTS UNDER GDPR, UK-GDPR & CCPA
You may request any of the following actions at any time:
|
Right |
Explanation |
|
Access |
Get copy of all stored personal data |
|
Rectification |
Correct inaccurate information |
|
Deletion |
Request data erasure (“Right to be forgotten”) |
|
Restriction |
Limit processing of data |
|
Portability |
Request export of your data file |
|
Objection |
Opt-out of marketing or tracking |
|
Withdraw Consent |
Stop previously allowed data use |
Submit requests to: support@cennedy.com
We may require identity validation for security.
16. EMAIL, SMS & WHATSAPP MARKETING POLICY
Marketing communication is strictly opt-in.
You may unsubscribe at any time via:
- Email unsubscribe button
- WhatsApp STOP reply
- By contacting support
We never send spam or share marketing lists.
17. THIRD-PARTY LINKS DISCLAIMER
Our website may contain links to external websites.
We are not responsible for external privacy practices, accuracy, or content.
Users must review the privacy policies of external websites before use.
18. BREACH NOTIFICATION POLICY
In the unlikely event of a suspected or confirmed data breach:
- Affected users will be notified within 72 hours (GDPR standard).
- Authorities will be informed where legally required.
- Corrective and preventive action will be immediately implemented.
19. CHANGES & UPDATES TO THIS POLICY
We reserve the right to modify, update, expand, or revise this Privacy Policy.
Updates become effective immediately upon posting.
The Last Updated date will always be displayed at the top.
20. CONTACT INFORMATION
For all privacy, data protection, or legal-related queries:
📌 Registered Business Address:
Cennedy Candle Works
M88/203 SP Sukhobristi Housing Complex
Rajarhat Newtown, Kolkata - 135
West Bengal, India
📩 Email: support@cennedy.com
📞 WhatsApp Business: +91-9748953778
📘 Facebook: facebook.com/cennedycandle
21. FINAL USER CONSENT STATEMENT
By using any Cennedy website, purchasing products, contacting us, or submitting personal data, you officially acknowledge and agree to:
- Full acceptance of this Privacy Policy
- Responsible usage of all provided services
- Compliance with regional laws applicable to you
- No misuse, fraud, or intentional violation
If you do not agree, you must immediately discontinue usage of our services.

