Privacy Policy

This Privacy Policy describes the practices of Candy House (Private) Limited ("Candy House", "we", "us" or "our") regarding the collection, use, disclosure and protection of your information when you visit our website, use our mobile application (the "App"), place orders, or otherwise interact with our services (together, the "Services"). It is provided in accordance with applicable data-protection laws and the Google Play User Data policy.

1. Introduction

By accessing or using our Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please do not use our Services. If we provide our App through Google Play, this Policy together with the Google Play Developer Program Policies governs our handling of user data.

2. Information We Collect

We only collect data that is reasonably necessary to provide and improve our Services. The categories of information we may collect include:

2.1 Information you provide directly

• Contact details — name, email address, phone number and delivery address when you place an order, request a custom gift box, or contact us.
• Order information — products selected, gift messages and order history.
• Communications — messages, enquiries and feedback you send to us.

2.2 Information collected automatically

• Device & technical data — device model, operating system version, unique device identifiers, app version and language settings.
• Usage data — pages or screens viewed, features used, and the date and time of access.
• Approximate location — derived from your IP address to support delivery and regional availability. We do not collect precise GPS location unless you explicitly grant permission.
• Cookies & similar technologies — on our website we use cookies and local storage to remember preferences and measure performance. You can control cookies through your browser settings.

2.3 Payment information

Where payments are supported, transactions are processed by trusted third-party payment providers. We do not store full card or banking details on our own servers.

3. How We Use Your Information

We use the information we collect to:

• Process, fulfil and deliver your orders and gift boxes;
• Respond to your enquiries, requests and customer-support needs;
• Operate, maintain, secure and improve our Services;
• Personalise content and remember your preferences;
• Send service-related communications such as order confirmations and updates;
• Detect, prevent and address fraud, abuse or technical issues; and
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for purposes unrelated to those described in this Policy without your consent.

4. Legal Basis for Processing

Where applicable law requires it, we process personal data on the basis of: performance of a contract (to fulfil your orders), your consent (for example, optional marketing or precise location), our legitimate interests (to operate and improve our Services), and compliance with legal obligations.

5. How We Share Information

We share your information only in the limited circumstances below, and we require recipients to protect it:

• Service providers — delivery partners, payment processors, hosting and analytics providers who process data on our behalf under appropriate confidentiality and security obligations.
• Legal & safety — when required by law, regulation, legal process, or to protect the rights, safety and property of Candy House, our customers or the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, in which case we will provide notice before your information is transferred.

We do not share your personal data with third parties for their own independent marketing without your explicit consent.

6. Mobile App Permissions

Our App may request the following device permissions, each of which you may grant or deny:

• Internet / network access — required to load products and submit orders.
• Location (optional) — to suggest nearby availability and estimate delivery; used only while you use the App and only with your permission.
• Camera / photos (optional) — only if you choose to upload an image, for example a custom gift-box reference.
• Notifications (optional) — to send order updates; you can disable these at any time in your device settings.

7. Data Security

We implement appropriate technical and organisational measures — including encryption in transit (HTTPS/TLS), access controls and secure storage — to protect your information against unauthorised access, alteration, disclosure or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention & Deletion

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to comply with our legal obligations, resolve disputes and enforce our agreements. When data is no longer required, we delete or anonymise it. You may request deletion of your account and associated personal data at any time by contacting us using the details below; we will respond within a reasonable period in line with applicable law.

9. Your Rights & Choices

Depending on your location, you may have the right to:

• Access, correct or update your personal information;
• Request deletion of your personal information;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent; and
• Request a copy of your data in a portable format.

To exercise any of these rights, please contact us at the details in Section 12. You may also control cookies via your browser and app permissions via your device settings.

10. Children's Privacy

Our Services are intended for a general audience and are not directed at children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it promptly.

11. International Data Transfers

Candy House operates from Pakistan. If you access our Services from outside Pakistan, your information may be processed in countries whose data-protection laws differ from those in your country. Where required, we take steps to ensure your information receives an adequate level of protection.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after an update constitutes acceptance of the revised Policy.

13. Contact Us

If you have any questions, requests or concerns about this Privacy Policy or your personal data, please contact us:

• Candy House (Private) Limited
• Address: 31-Km Ferozpur Road, Lahore, 54000, Pakistan
• Phone: +92 321 875 6419

← Back to the Candy World