What Personal Information We Collect

“Personal information” generally means information that identifies, relates to, describes, can reasonably be associated with, or could reasonably be linked to an individual or household.

The personal information we collect depends on how you interact with our store.

Personal and Contact Information

• Name
• Email address
• Telephone number
• Billing address
• Shipping address
• Account contact information
• Communication preferences

Order and Purchase Information

• Products purchased or placed in your cart
• Product preferences and selections
• Order history
• Order number and transaction details
• Payment status
• Shipping and delivery information
• Discount or promotional code usage
• Returns, refunds, replacements, or customer support requests
• Information relating to disputed, suspicious, or canceled transactions

Customer Account Information

• Name
• Email address
• Telephone number
• Saved billing and shipping addresses
• Order history
• Account preferences
• Login and account authentication information

You are responsible for maintaining the confidentiality and security of your account login information.

Payment Information

Payment information is processed through Shopify Checkout and authorized third-party payment providers. Depending on which payment options are available at checkout, these providers may include:

• Shopify Payments
• PayPal
• Klarna
• Affirm
• Afterpay
• Apple Pay
• Google Pay
• Credit card networks and processors
• Other authorized payment services

Device and Website Usage Information

• IP address
• Browser type
• Device type
• Operating system
• Device identifiers
• General or approximate location derived from an IP address
• Pages viewed
• Products viewed
• Search activity
• Cart and checkout activity
• Date and time of visits
• Referring website or advertising source
• Links and advertisements clicked
• Interactions with emails or marketing messages
• Cookies, pixels, tags, and similar technologies
• Website performance, error, fraud-prevention, and security information

Communications and Customer Support

• The content of your message
• Email address or telephone number
• Order information
• Photographs or documents you provide
• Customer support history
• Records of complaints, refund requests, or disputes
• Any other information you voluntarily provide

Please do not send sensitive personal information through ordinary email or contact forms unless it is necessary for us to assist you.

Marketing and Preference Information

• Email and SMS subscription status
• Marketing preferences
• Promotional offers viewed or used
• Advertising interactions
• Product interests
• Responses to surveys, promotions, or campaigns

Sources of Personal Information

We may collect personal information:

• Directly from you when you place an order, create an account, contact us, or subscribe to marketing
• Automatically from your browser or device
• From Shopify and Shopify-connected services
• From payment processors
• From shipping carriers and fulfillment providers
• From fraud-prevention and security providers
• From advertising and analytics partners
• From social media platforms when you interact with our advertisements or pages
• From customer support, email, SMS, or communication providers
• From publicly available sources when permitted by law

How We Use Your Information

We may collect and use personal information to:

• Operate and maintain our online store
• Display products and store content
• Process and fulfill orders
• Confirm payments
• Send order confirmations
• Provide shipping and delivery updates
• Communicate about delayed, canceled, incomplete, or disputed orders
• Provide customer service
• Respond to questions and complaints
• Handle refunds, replacements, returns, or other order issues
• Create and manage customer accounts
• Save customer preferences
• Improve checkout and the shopping experience
• Personalize products, content, or recommendations
• Remember shopping cart contents
• Analyze website performance and customer interactions
• Measure the effectiveness of advertisements
• Conduct marketing and promotional campaigns
• Send marketing emails or SMS messages when permitted
• Prevent fraud, spam, unauthorized transactions, and abuse
• Detect security incidents
• Protect our customers, business, website, and legal rights
• Enforce our policies and agreements
• Maintain tax, accounting, transaction, and business records
• Comply with applicable laws, legal processes, and regulatory obligations
• Establish, exercise, or defend legal claims
• Carry out a business reorganization, financing, acquisition, sale, or transfer
• Fulfill other purposes disclosed to you when information is collected

We may also use information that has been aggregated or de-identified so that it cannot reasonably be associated with a particular individual.

Customer Accounts

If you create an account with Aryellys Candy Shop, we may store your contact information, addresses, preferences, and order history to make future shopping and checkout easier.

You are responsible for:

• Keeping your login credentials confidential
• Using a secure password
• Restricting access to your device and account
• Notifying us if you believe your account has been accessed without authorization

We may suspend or restrict an account when we reasonably believe it is being used fraudulently, unlawfully, or without authorization.

Email and SMS Marketing

With your consent or as otherwise permitted by law, we may send:

• Promotional emails
• SMS marketing messages
• Discounts
• Product announcements
• Candy-related news
• Abandoned-cart reminders
• Back-in-stock notifications
• Customer surveys
• Other promotional communications

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the email.

You may opt out of SMS marketing by following the instructions in the message, such as replying STOP, where supported.

Opting out of marketing does not prevent us from sending transactional or service-related communications, including order confirmations, shipping updates, account notices, fraud alerts, or responses to customer support requests.

Message and data rates may apply to SMS communications depending on your mobile service provider.

Cookies and Tracking Technologies

Our Shopify store and connected services use cookies, pixels, tags, local storage, and similar technologies.

These technologies may be used to:

• Keep products in your shopping cart
• Remember your preferences
• Keep you signed into your account
• Support checkout and payment processing
• Operate essential website functions
• Improve website performance
• Analyze visitor behavior
• Measure advertising effectiveness
• Personalize content and advertisements
• Identify referral and advertising sources
• Detect fraud, spam, security threats, and abuse
• Comply with legal and regulatory requirements

Some cookies are necessary for the website to function. Other cookies may be used for analytics, personalization, or advertising, depending on your location and privacy choices.

Shopify, payment providers, analytics tools, advertising platforms, and other connected applications may place or access cookies and similar technologies.

You may control cookies through:

• The cookie banner or privacy settings available on our website
• Your browser settings
• Device privacy settings
• Advertising preference tools provided by third parties

Disabling certain cookies may cause parts of the website, shopping cart, customer account, checkout, or payment process to function incorrectly.

Analytics and Advertising

We may use analytics and advertising services to understand how visitors use our store, improve our website, measure advertising performance, and display advertisements that may be relevant to customers.

These services may include:

• Google Analytics
• Google Ads
• Google Tag Manager
• Meta or Facebook Ads
• TikTok Ads
• Microsoft or Bing Ads
• Shopify Analytics
• Shopify-connected marketing services
• Email and SMS marketing platforms
• Other analytics, measurement, advertising, or tracking services connected to our store

These services may use cookies, pixels, tags, device identifiers, and similar technologies to collect information about:

• Website visits
• Product views
• Search activity
• Cart and checkout activity
• Purchases
• Advertising interactions
• Device and browser information
• Approximate location
• Referral sources

Information collected through these technologies may be combined with information collected through other websites, applications, devices, or services according to the privacy practices of the applicable provider.

Managing Advertising Preferences

You may be able to control or opt out of certain advertising and analytics activities through:

• Our website’s cookie or privacy preference controls
• Our Your Privacy Choices page
• Google Privacy and advertising settings
• Google Analytics opt-out tools
• Meta or Facebook advertising settings
• Microsoft or Bing personalized advertising settings
• TikTok advertising and privacy settings
• Digital Advertising Alliance opt-out tools
• Your browser or device privacy settings

Opting out of targeted advertising does not necessarily stop all advertisements. You may continue to see advertisements that are not based on your activity or interests.

Sale, Sharing, and Targeted Advertising

We may disclose certain personal information to advertising and analytics providers through cookies, pixels, tags, application integrations, or similar technologies.

Depending on the law that applies where you live, these activities may be considered:

• A “sale” of personal information
• “Sharing” personal information
• Processing personal information for targeted advertising
• Cross-context behavioral advertising

The categories of information involved may include:

• Online identifiers
• IP addresses
• Device identifiers
• Cookie identifiers
• Internet or network activity
• Browsing and search activity
• Product and shopping interests
• Advertising interactions
• Approximate location
• Commercial information, such as products viewed or purchased
• Inferences about possible customer interests

This information may be disclosed to:

• Analytics providers
• Advertising networks
• Social media platforms
• Marketing providers
• Shopify and Shopify-connected advertising services

You may opt out of eligible sale, sharing, or targeted advertising activities by using the Your Privacy Choices or data-sharing opt-out link available on our website.

Where required by applicable law and supported by our website systems, we may also recognize an enabled Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information associated with that browser or device.

An opt-out choice may apply only to the browser or device from which it was submitted unless you are signed into an account and the law requires the choice to be associated with your account.

We do not knowingly sell or share the personal information of children under 16 for targeted advertising purposes.

Who We Share Personal Information With

We may disclose personal information to third parties when reasonably necessary to operate our business and provide our services.

These parties may include:

• Shopify and Shopify-connected services
• Payment processors and financial institutions
• Shipping carriers
• Delivery and fulfillment providers
• Email and SMS marketing platforms
• Advertising and analytics providers
• Fraud-prevention and security providers
• Customer service platforms
• Website applications and technology providers
• Data hosting, storage, backup, and performance providers
• Professional advisors, including accountants, attorneys, insurers, and tax professionals
• Government agencies, courts, law enforcement, or regulators when required or permitted by law
• Successors or potential purchasers in connection with a business transaction

These providers may process information according to our instructions, their contractual obligations, their own privacy policies, or applicable law.

We do not authorize service providers to use customer information for purposes unrelated to the services they provide to us, except where separately disclosed or legally permitted.

Shopify

Our online store is powered by Shopify.

Shopify provides the e-commerce infrastructure that allows us to:

• Display products
• Operate customer accounts
• Manage shopping carts
• Process checkout
• Receive and manage orders
• Connect payment providers
• Manage store analytics
• Operate certain marketing, fraud-prevention, and customer privacy features

Personal information may be stored and processed by Shopify, Shopify affiliates, Shopify-connected applications, payment providers, and other services used to operate the store.

Shopify may process certain information for its own purposes as described in Shopify’s applicable privacy notices and service terms.

Depending on our Shopify settings and the services enabled on our store, Shopify may use customer information to provide enhanced, personalized, analytics, advertising, fraud-prevention, or network-based services.

Payment Processors

When you submit payment information, it is transmitted to Shopify and the applicable payment processor.

Payment providers may use information to:

• Authorize transactions
• Verify identity
• Prevent fraud
• Process refunds
• Handle payment disputes
• Comply with financial and legal requirements

Their handling of personal information is governed by their own terms and privacy policies.

Aryellys Candy Shop does not control the privacy or security practices of independent payment processors.

Shipping and Delivery

To fulfill and deliver your order, we may disclose necessary information to shipping carriers, delivery providers, fulfillment companies, and related service providers.

This information may include:

• Customer name
• Shipping address
• Email address
• Telephone number
• Order number
• Package information
• Product and delivery details

Carriers may use this information to provide tracking notifications, delivery updates, address verification, and customer support related to the shipment.

Fraud Prevention and Store Security

We may use fraud-detection tools, payment verification services, Shopify security features, payment processor checks, automated risk indicators, and manual review to protect our store and customers from suspicious or unauthorized activity.

Fraud-prevention reviews may involve:

• IP addresses
• Device information
• Billing and shipping addresses
• Payment status
• Order value
• Order history
• Account activity
• Checkout behavior
• Transaction patterns
• Information provided by payment or fraud-prevention providers

We may delay, cancel, decline, or request additional verification for an order that appears fraudulent, unauthorized, unusually risky, or inconsistent.

Legal Disclosures

We may disclose personal information when we reasonably believe disclosure is necessary to:

• Comply with applicable law
• Respond to a subpoena, court order, warrant, or lawful request
• Cooperate with law enforcement or regulatory authorities
• Investigate fraud, theft, abuse, or security incidents
• Enforce our store policies or agreements
• Protect the safety, rights, and property of our business, customers, employees, service providers, or others
• Establish, exercise, or defend legal claims

We may also disclose information when you direct us to do so or provide your consent.

Business Transfers

If Aryellys Candy Shop or Dones Enterprises LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, transfer of ownership, or similar business transaction, personal information may be reviewed, disclosed, or transferred as part of that transaction.

Any recipient of the information may continue to use it subject to this Privacy Policy unless you are notified otherwise.

Data Retention

We retain personal information for as long as reasonably necessary to:

• Process and fulfill orders
• Provide customer service
• Maintain customer accounts
• Manage returns, refunds, and disputes
• Prevent fraud and unauthorized transactions
• Maintain business and transaction records
• Comply with tax, accounting, legal, and regulatory requirements
• Enforce agreements and policies
• Establish, exercise, or defend legal claims

The length of time information is retained depends on:

• The type of information
• The reason it was collected
• Legal and accounting obligations
• Fraud-prevention and security needs
• Whether a customer account remains active
• Whether an order, refund, dispute, or legal matter remains unresolved

We may retain certain order, payment-status, shipping, refund, tax, fraud, or accounting records even after you request account deletion when retention is required or permitted by law.

When information is no longer reasonably necessary, we may delete, destroy, anonymize, or de-identify it.

Data Security

Aryellys Candy Shop uses reasonable administrative, technical, and organizational safeguards to help protect personal information against:

• Unauthorized access
• Loss
• Misuse
• Alteration
• Destruction
• Unauthorized disclosure

Our store is hosted through Shopify and uses HTTPS and Transport Layer Security (TLS) to help protect information transmitted between a customer’s browser and our website.

Payment information is processed by Shopify and authorized third-party payment providers. Aryellys Candy Shop does not directly store complete payment card numbers or card security codes on its own servers.

Our security practices may include:

• Encrypted website connections
• Restricted access to administrative accounts
• Account authentication controls
• Fraud-detection and transaction-monitoring tools
• Security monitoring
• Software and platform updates
• Service providers designed to prevent spam, abuse, or unauthorized transactions
• Backups and operational safeguards where appropriate

Customers should use strong passwords, protect their devices, and avoid sharing account credentials.

If we become aware of a security incident involving personal information, we may investigate the incident and provide notifications as required by applicable law.

Your Privacy Rights

Depending on where you live and subject to applicable law, you may have the right to request:

• Confirmation of whether we process your personal information
• Access to the personal information we maintain about you
• Information about the categories of personal information collected
• Information about the sources and purposes of collection
• Information about categories of third parties that receive information
• Correction of inaccurate personal information
• Deletion of certain personal information
• A copy or export of your personal information
• Data portability
• Restriction of certain processing
• Objection to certain processing
• Withdrawal of consent
• Opt-out from marketing communications
• Opt-out from the sale or sharing of personal information
• Opt-out from targeted advertising
• Opt-out from certain profiling or automated decision-making
• Limitation of certain uses of sensitive personal information, where applicable
• Appeal of a decision regarding a privacy request, where applicable

These rights are not absolute. We may deny or limit a request when permitted by law, including when information must be retained for:

• Order fulfillment
• Legal compliance
• Tax or accounting obligations
• Security
• Fraud prevention
• Dispute resolution
• Internal business records
• Establishing or defending legal claims

How to Exercise Your Privacy Rights

To submit a privacy request, contact us using:

• Our Contact Us page
• Email: [email protected]
• Telephone: 1 (844) 28-CANDY
• The Your Privacy Choices link available on our website, when applicable

Please clearly describe the privacy right you wish to exercise and provide enough information for us to identify the relevant account, order, or records.

We may need to verify your identity before completing a request. Verification may require matching information you provide with information already associated with your account or orders.

We will only request information reasonably necessary to verify and process your request.

Where permitted by law, you may use an authorized agent to submit a request. We may require proof that the agent is authorized to act on your behalf and may contact you directly to verify your identity and instructions.

If we deny a request, you may have the right to appeal the decision. Appeal instructions will be provided when required by applicable law.

Non-Discrimination

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Exercising a privacy right will not result in:

• Denial of products or services
• Unlawful differences in pricing
• Unlawful differences in service quality
• Retaliation

However, certain information may be necessary to provide a requested service, process an order, maintain an account, or complete a transaction.

Children’s Privacy

Aryellys Candy Shop is a general-audience online retail store. Our website is not intended to collect personal information directly from children under 13.

Purchases must be completed by an adult or with the involvement and authorization of a parent or legal guardian.

We do not knowingly collect personal information from children under 13.

If you are a parent or legal guardian and believe that a child has provided personal information to us, please contact us. We will review the request and take appropriate action, which may include deleting the information where required.

International and Interstate Data Transfers

Our business is located in the United States.

Personal information may be transferred to, stored in, or processed in the United States or other locations where Shopify, payment processors, analytics providers, advertising platforms, shipping providers, and other service providers operate.

Privacy and data-protection laws in those locations may differ from the laws in your state, province, or country.

When required, appropriate safeguards may be used for international transfers.

By interacting with our store and providing personal information, you understand that your information may be processed outside your state, province, or country of residence, subject to applicable law.

Automated Decision-Making

Aryellys Candy Shop does not currently engage in fully automated decision-making that produces legal or similarly significant effects on customers without meaningful human involvement.

Limited automated processes may be used for:

• Fraud prevention
• Payment authorization
• Security checks
• Spam detection
• Address verification
• Transaction-risk assessment
• Advertising measurement
• Product recommendations
• Temporary transaction review

An automated fraud or payment result may cause an order to be delayed, reviewed, declined, or canceled.

Where required by law, you may have rights relating to certain automated processing.

Do Not Track and Global Privacy Control

Some web browsers provide a traditional “Do Not Track” (DNT) signal.

Because there is no single, consistently applied industry standard for responding to traditional DNT signals, our website may not change all data-collection practices in response to a DNT setting alone.

Global Privacy Control (GPC) is treated separately from traditional Do Not Track signals.

Where required by applicable law and supported by our systems, we may recognize an enabled GPC signal as a request to opt out of the sale or sharing of personal information or its use for targeted advertising.

You may also submit an opt-out request using the Your Privacy Choices link on our website.

Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, payment services, advertising providers, shipping carriers, or other services.

We are not responsible for the privacy, security, content, or practices of third-party websites and services.

We encourage you to review the privacy policies of any third party before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes involving:

• Our business
• Legal or regulatory requirements
• Shopify services and settings
• Our website
• Connected applications
• Payment providers
• Shipping or fulfillment services
• Analytics and advertising tools
• Security practices
• Customer privacy options

Any changes will be posted on this page with a revised “Last updated” date.

Material changes may also be communicated through the website, email, account notices, or other appropriate methods when required.

Your continued use of our website after an updated Privacy Policy becomes effective indicates that the updated policy applies to future interactions, subject to applicable law.