Skip to content

Privacy Policy

CENNEDY CANDLE WORKS — PRIVACY POLICY (OFFICIAL | GLOBAL | GDPR-COMPLIANT)

Effective Date: 23 October 2025


1. INTRODUCTION

Welcome to Cennedy Candle Works (“Cennedy”, “the Company”, “we”, “our”, or “us”). This Privacy Policy explains how we collect, use, store, process, transfer, disclose, and protect your personal information when you visit, browse, interact with, or make purchases from any of our official online properties or digital platforms.

This Privacy Policy applies to all users, customers, visitors, suppliers, contractors, affiliates, subscribers, and business partners who interact with Cennedy Candle Works through any physical or digital medium.

By accessing, browsing, registering, placing an order, contacting us, subscribing, or interacting with our services, you fully agree to the practices listed in this Privacy Policy.

If you do not agree, you must discontinue using our websites and services immediately.


2. COVERED WEBSITES & DIGITAL PROPERTIES

This Privacy Policy applies to all current and future Cennedy Candle Works websites, including but not limited to:

Region

Website Domain

India

https://cennedy.in

European Union

https://cennedy.eu

United Kingdom

https://cennedy.uk

United Arab Emirates

https://cennedy.ae

United States

https://cennedyusa.com

Global Storefront

https://cennedy.com

This policy also applies to the following communication, marketing, and support platforms used by our customers:

Platform

Official Link

WhatsApp Business

+91-9748953778

Email Support

support@cennedy.com

Official Facebook Page

facebook.com/cennedycandle

NOTE: Any website, marketplace, reseller, affiliate, or social profile not listed above is not officially operated or governed by this policy, unless specifically stated.


3. ABOUT OUR COMPANY

Legal Entity Name: Cennedy Candle Works
Business Category: Handmade, Artisanal & Luxury Candle Manufacturer & Exporter
Registered & Operational Address:
M88/203 SP Sukhobristi Housing Complex,
Rajarhat Newtown, Kolkata - 135,
West Bengal, India

Country of Registration: Republic of India
Export Capability: Yes — Worldwide via DHL & FedEx

We specialize in:
Luxury scented candles
Spell candles / dressed candles
Meditation & prayer candles
Customized event candles
Eco-friendly décor candles
Natural essential oil aroma blends

Our manufacturing is:
Handcrafted
In-house
Environmentally responsible
Non-toxic & safety tested


4. APPLICABLE GOVERNING PRIVACY LAWS

This Privacy Policy is drafted in accordance with, and respects compliance requirements under, the following laws:

India

  • The Information Technology Act, 2000 & Amendments
  • The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

European Union

  • General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679

United Kingdom

  • UK Data Protection Act 2018
  • UK-GDPR Post Brexit Guidance

United States

  • Federal Trade Commission (FTC) Act
  • California Consumer Privacy Act (CCPA) principles (where applicable)

United Arab Emirates

  • Federal Decree-Law No. 45 of 2021 regarding personal data protection

International

  • OECD Privacy Principles
  • ISO/IEC 27001 Security Standards

5. DEFINITIONS

 

Term

Meaning

Personal Data

Any information that can identify an individual directly or indirectly

Sensitive Data

Financial, authentication, geolocation, or legal identity details

Processing

Collecting, storing, using, updating, analyzing, or transferring personal data

Controller

Entity that decides how and why data is processed (Cennedy Candle Works)

Processor

Third-party services used for operations (payments, hosting, shipping, etc.)

Cookies

Small digital files stored on browser to remember preferences

Consent

Freely given, clear approval by user for data usage


6. WHAT INFORMATION WE COLLECT

We collect only data that is voluntarily submitted, automatically captured for security and functionality, or essential for completing transactions.

6.1 Personal Information Provided by You

We may collect and store the following:

  • Full Name
  • Email Address
  • Mobile Number / WhatsApp Number
  • Shipping & Billing Address
  • Country, State, Postal Code
  • Preferred Currency & Language
  • Order History & Feedback
  • Gender (optional)
  • Gift Message or Customization Notes

6.2 Payment-Related Information

We do not store full credit card or banking authentication credentials. We may receive limited masked financial info for order verification:

  • Payment method used
  • Transaction ID
  • Card type (Visa / Mastercard / Amex)
  • Partial card digits (last 4 only)

6.3 Automatically Collected Technical Information

Collected via cookies, analytics, and server logs:

  • IP address
  • Device type & operating system
  • Screen size & browser type
  • Timezone & geolocation (approximate)
  • Pages visited & session duration
  • Click or scroll behavior
  • Referral source

6.4 Communications & Customer Support Data

Includes:

  • Email conversations
  • WhatsApp chats
  • Product inquiries
  • Support ticket logs
  • Submitted feedback or reviews

6.5 Social Media Interaction Data

If you interact with us on Facebook, Instagram, or WhatsApp, we may collect:

  • Public profile data
  • Username
  • Display picture
  • Comments or messages

6.6 Legal or Identity Verification Data

Only required when fraud or legal disputes occur:

  • Proof of identity
  • Proof of address
  • Payment dispute communication

7. WHY & HOW WE USE YOUR INFORMATION

We process data strictly for legitimate business, operational, legal, or security purposes.

Purpose

Description

Order placement

To accept, produce, pack & ship orders

Delivery & tracking

To send courier updates & delivery status

Support & assistance

To answer queries & resolve issues

Personalization

To recommend products based on browsing

Legal obligations

To comply with tax, export & audit rules

Safety

To prevent fraud, chargebacks & misuse

Marketing (opt-in)

To send offers, newsletters, coupons & launch updates

We never sell, rent, barter, auction, or commercially trade your data.


8. LEGAL BASIS FOR DATA PROCESSING (GDPR)

 

Basis

When It Applies

Consent

Newsletter signup, marketing communication

Contractual Necessity

When placing an order or requesting service

Legitimate Business Interest

Website analytics, security monitoring

Legal Obligation

Audits, customs, taxation & compliance

Protection of Vital Interests

Preventing fraud or harmful misuse

 

 

 

 


9. COOKIE POLICY

We use cookies to enhance user experience, store cart items, display relevant currency, and secure transactions.

Types used:

  • Essential cookies (required for checkout)
  • Functional cookies (preferences)
  • Performance & analytics cookies
  • Advertising & remarketing cookies

You may accept, decline, or customize cookie preferences via browser or on-site popup.


10. DATA RETENTION POLICY

 

Type of Data

Retention Duration

Order & billing records

Minimum 5–7 years

Support tickets & chats

Up to 36 months

Analytics data

12–24 months

Newsletter subscriber data

Until unsubscribed

Legal or fraud investigation data

As required

All retention complies with taxation, export law, customs, and warranty law.


11. DATA STORAGE & SECURITY

We maintain rigorous digital and physical security:

  • SSL encryption (HTTPS)
  • Secure hosting & firewall protection
  • Limited access privilege
  • Encrypted payment gateway via PCI-DSS systems
  • Two-factor authentication on admin panels
  • Regular malware and vulnerability scans

However, no online system is 100% hack-proof, and users agree to use the service at their own risk.


12. INTERNATIONAL DATA TRANSFER

Because we ship worldwide, your data may be processed or stored on secure servers outside your country.

Data transfers follow:

  • Standard Contractual Clauses (SCC)
  • GDPR data adequacy model
  • Secure encryption protocols

13. SHARING & DISCLOSURE OF DATA

We share only minimal required data with verified third-party partners:

Category

Example

Shipping Providers

DHL, FedEx

Payment Gateways

Razorpay, PayPal, Stripe, PayU

Analytics Tools

Google Analytics

Cloud & Hosting

ISO-certified server providers

Legal / Audit

Chartered Accountants / Authorities

No marketer, advertiser, or external database receives full access.


14. CHILD & MINOR DATA POLICY

  • Our website is intended only for age 18+ individuals.
  • We do not knowingly collect data from minors.
  • If we detect accidental collection, it is deleted immediately.

Parents may request data removal via support@cennedy.com


 

 

 

15. USER RIGHTS UNDER GDPR, UK-GDPR & CCPA

You may request any of the following actions at any time:

Right

Explanation

Access

Get copy of all stored personal data

Rectification

Correct inaccurate information

Deletion

Request data erasure (“Right to be forgotten”)

Restriction

Limit processing of data

Portability

Request export of your data file

Objection

Opt-out of marketing or tracking

Withdraw Consent

Stop previously allowed data use

Submit requests to: support@cennedy.com

We may require identity validation for security.


16. EMAIL, SMS & WHATSAPP MARKETING POLICY

Marketing communication is strictly opt-in.
You may unsubscribe at any time via:

  • Email unsubscribe button
  • WhatsApp STOP reply
  • By contacting support

We never send spam or share marketing lists.


17. THIRD-PARTY LINKS DISCLAIMER

Our website may contain links to external websites.
We are not responsible for external privacy practices, accuracy, or content.

Users must review the privacy policies of external websites before use.


18. BREACH NOTIFICATION POLICY

In the unlikely event of a suspected or confirmed data breach:

  1. Affected users will be notified within 72 hours (GDPR standard).
  2. Authorities will be informed where legally required.
  3. Corrective and preventive action will be immediately implemented.

19. CHANGES & UPDATES TO THIS POLICY

We reserve the right to modify, update, expand, or revise this Privacy Policy.
Updates become effective immediately upon posting.

The Last Updated date will always be displayed at the top.


20. CONTACT INFORMATION

For all privacy, data protection, or legal-related queries:

📌 Registered Business Address:
Cennedy Candle Works
M88/203 SP Sukhobristi Housing Complex
Rajarhat Newtown, Kolkata - 135
West Bengal, India

📩 Email: support@cennedy.com
📞 WhatsApp Business: +91-9748953778
📘 Facebook: facebook.com/cennedycandle


21. FINAL USER CONSENT STATEMENT

By using any Cennedy website, purchasing products, contacting us, or submitting personal data, you officially acknowledge and agree to:

  • Full acceptance of this Privacy Policy
  • Responsible usage of all provided services
  • Compliance with regional laws applicable to you
  • No misuse, fraud, or intentional violation

If you do not agree, you must immediately discontinue usage of our services.