SHOP NOW

Effective Date: October 10, 2026

1. Introduction

Welcome to the privacy policy of www.candledropbox.com. At Candle Dropbox, we are your dedicated online destination for carefully selected candle holders and premium candle accessories. For years, we have partnered with skilled artisans and trusted suppliers to bring you durable, beautifully designed pieces that suit every style, from minimalist modern to warm vintage. Your privacy is of utmost importance to us, and this policy is designed to transparently explain how we collect, use, store, protect, and manage your personal information when you interact with our e-commerce platform, browse our curated collections of candle holders, match storage jars, candle trays and other home decor pieces, make purchases, or engage with our brand services.

This privacy policy applies to all visitors, registered users, customers, and other individuals who access or use our website. By accessing, browsing, or making a purchase on www.candledropbox.com, you acknowledge that you have read, understood, and agree to the terms outlined in this policy. If you do not agree with any part of this policy, please refrain from using our website or submitting your personal information to us. This document is drafted in full compliance with applicable data protection regulations in the United Kingdom, the European Economic Area, and other relevant jurisdictions that govern online consumer privacy, to ensure that your personal data is handled with the highest level of care and respect.

2. The Information We Collect From You

We only collect information that is necessary to deliver our high-quality products and seamless shopping experience to you, and we never gather data in ways that are incompatible with the purposes stated in this policy. The categories of information we may collect include the following:

2.1 Information You Provide Voluntarily

This refers to all data that you actively share with us when you interact with different functions on our website:

  • ‌Account Registration Information‌: When you create a My Account profile on our site, we will collect your full name, email address, password, and optional contact preferences to help you manage your order history, save your favorite candle accessory products, and check out more efficiently during future visits.
  • ‌Order and Transaction Information‌: When you place an order for products ranging from our Chic Brass Match Striker Container Jar, Coastal Natural Bamboo Match Holder Cylinder, to our Industrial Concrete Candle Tray Plate or Classic Oval Ceramic Candle Tray, we will collect your full billing address, full shipping address, telephone number, payment method details, and order preferences. Payment information is processed through our fully PCI-compliant third-party payment processors, and we do not store your full credit card or financial account details on our own servers.
  • ‌Communication and Support Information‌: When you reach out to us through the Contact page on our website, send us an email, submit a query about our product craftsmanship, delivery timeline, or return policy, we will collect the content of your message, your name, your contact email, and any additional details you choose to share with us to respond to your inquiry efficiently.
  • ‌Marketing Preference Information‌: When you sign up to receive our newsletter for new product launches, exclusive deals for our fan-favorite candle pieces, seasonal home decor styling tips, or promotional offers, we will collect your email address, and your stated preferences for the type of content you wish to receive.

2.2 Information Collected Automatically

When you browse www.candledropbox.com, our systems automatically gather certain technical information through cookies, web beacons, and similar tracking tools:

  • ‌Device and Technical Data‌: This includes your internet protocol (IP) address, browser type and version, operating system, device type, unique device identifiers, time zone setting, and the location of your device when you access our website. We use this data to optimize our website display for different devices, troubleshoot technical errors, and ensure our security systems function properly.
  • ‌Browsing Behavior Data‌: We collect information about the pages you visit on our site, the products you view (such as our Handcrafted Speckled Ceramic Match Striker Pot, Modern Matte Black Metal Candlestick Holders, or Classic Crystal Votive Candle Holders), the links you click, the search terms you enter on our shop page, the time you spend on each page, and your navigation paths across our site. This data helps us understand how our customers interact with our collections, so we can arrange our product display in a more user-friendly way, and recommend items that align with your personal home decor style preferences.
  • ‌Transaction and Interaction Data‌: We collect records of your past orders, your saved items in the shopping cart, your response to our promotional pop-ups, and your interaction with our “Add to cart” and “View cart” functions across our product catalog.

2.3 Information We Receive From Third Parties

Occasionally, we may receive supplementary information about you from trusted third-party sources, including payment processors that confirm the validity of your payment method, logistics partners that provide us with delivery status updates for your orders, and social media platforms if you choose to connect your account to our website through third-party login features. All information we receive from these third parties will be processed in line with applicable privacy laws and the terms of this policy.

3. How We Use Your Personal Information

We use your collected personal data exclusively for the legitimate purposes that are relevant to our operation of the Candle Dropbox e-commerce platform, to provide you with a convenient, safe, and personalized shopping experience:

  1. ‌Order Fulfillment and Service Delivery‌: We use your name, shipping address, contact telephone number, and order details to process your purchase, arrange the delivery of your selected candle holders, match storage jars or other home decor products, send you order confirmation emails, shipping tracking updates, and notifications if there is any delay or issue with your order. This is the core purpose for collecting your transaction-related information, to ensure you receive the artisan-crafted items you order in perfect condition in the shortest possible time.
  2. ‌Website Functionality Optimization‌: The automatically collected browsing and device information is used to maintain and improve the performance of www.candledropbox.com, fix technical bugs, ensure our website loads smoothly whether you are browsing our new arrival candle accessory collections from a desktop computer or a mobile phone, and customize the display of content to adapt to your device features.
  3. ‌Personalized Experience Provision‌: We analyze your browsing history, viewed products, and past purchase records to recommend items that may match your aesthetic preferences: for example, if you previously purchased the Coastal Woven Seagrass Candle Tray for your beach house decor, we may suggest our Coastal Natural Seagrass Woven Votive Candle Lantern as a complementary product that fits your bohemian, summer patio dining styling taste. This personalized service is designed to help you discover more of our carefully curated pieces that you will love, without forcing you to spend extra time searching through the full product catalog.
  4. ‌Customer Support and After-Sales Service‌: We use your contact information and the details you submit in your support inquiries to respond to your questions about product materials, size specifications, usage methods, our Refund and Returns Policy, Shipping Policy, or any issues you encounter after receiving your order. Our customer service team will get back to you within 2 working days using the contact method you prefer, to resolve your problem efficiently and ensure you are fully satisfied with your shopping experience with us.
  5. ‌Marketing Communication (With Your Consent)‌: If you have explicitly opted in to receive our marketing communications, we will use your email address to send you updates about new product drops such as our latest Ornate Gothic Black Cast Iron Match Box Holder for vintage Halloween tablescapes, exclusive discount codes, holiday promotional campaigns, professional home decor styling guides, and news about our collaboration with new skilled artisans. You can choose to unsubscribe from our marketing emails at any time, by clicking the “unsubscribe” link included at the bottom of every marketing message we send, or by sending an email to our dedicated contact email listed in this policy.
  6. ‌Security and Fraud Prevention‌: We use your IP address, device identifiers, and account behavior data to monitor and prevent unauthorized access to your My Account, detect fraudulent payment activities, block malicious cyberattacks targeting our website, and protect the personal and financial safety of all our customers. This processing is based on our legitimate interest to maintain a secure, trustworthy e-commerce environment for every member of the Candle Dropbox community.
  7. ‌Legal Compliance and Policy Enforcement‌: We may process your personal information when it is required by applicable laws, regulations, valid court orders, or official requests from government authorities. We may also use your data to enforce our Terms of Service, protect the legal rights, property and safety of Candle Dropbox, our customers, our partners and the public, and pursue available legal remedies when there is violation of our usage rules.
  8. ‌Product and Service Improvement‌: We analyze aggregated, anonymized user behavior data to understand the overall preference trends of our cozy home lover community, so that we can select more new candle accessories that match the market demand, optimize our product pricing structure, and upgrade our website functions to better serve all our customers.

4. Sharing of Your Personal Information

We will never sell, rent, or lease your personal information to any third parties for their independent marketing purposes, without your explicit written consent. We only share your necessary information with trusted third parties under strictly limited circumstances that are outlined below:

  • ‌Authorized Service Providers‌: We share your relevant information with third-party service providers that perform essential operational functions for our business, including PCI-compliant payment processors that handle your transaction payments, professional logistics and delivery partners that ship your orders to your designated address, cloud hosting service providers that store our website data securely, email delivery platforms that send order updates and marketing emails (if you opted in), and IT maintenance teams that help us keep our website systems running smoothly. All these service providers are bound by strict data protection agreements that require them to protect your personal information, and they are only allowed to process your data in line with our explicit instructions, and for no other independent purposes.
  • ‌Business Transaction Transfer‌: In the event that Candle Dropbox undergoes a merger, acquisition, asset sale, or full or partial transfer of our business operations, your personal information may be transferred to the relevant successor entity, as part of the transferred business assets. We will notify all our registered users via email and a prominent notice on our website, before any transfer of your personal data takes place, to ensure that your privacy rights continue to be protected under the updated privacy policy of the successor entity.
  • ‌Legal and Regulatory Disclosure‌: We may disclose your personal information if we are required to do so by applicable law, binding court order, or formal request from a competent government authority. We may also disclose your information when we believe in good faith that disclosure is necessary to protect our legal rights, protect the safety of our customers, our staff, or the public, investigate potential fraud, or respond to an official legal proceeding.
  • ‌Consent-Based Sharing‌: Apart from the situations listed above, we will always ask for your explicit separate consent before we share your personal information with any third party for any other purposes.

5. Data Retention Period

We will only keep your personal information for as long as it is strictly necessary to fulfill the specific purposes for which we originally collected it. The specific retention timelines are as follows:

  • For order transaction information: We retain your full order records, including order details, shipping information, and transaction receipts, for a period of 7 years after your order is completed, to comply with applicable tax laws, commercial accounting regulations, and after-sales service requirements.
  • For registered account information: We keep your My Account profile information for as long as you maintain an active account on our website. If you choose to permanently delete your account, we will remove all your personal data from our active systems within 10 working days, except for the information we are legally required to retain for longer periods to meet regulatory compliance obligations.
  • For marketing contact information: We keep your email address in our marketing subscriber list until you choose to unsubscribe, or until you have not interacted with our marketing communications for a period of 3 consecutive years, at which point we will remove your contact details from our marketing database.
  • For automatically collected browsing behavior data: We store the non-identifiable, aggregated browsing statistics for a maximum of 24 months, after which we will anonymize the data completely so that it can no longer be linked back to any individual user.
    When your personal information is no longer needed for the stated purposes, legal requirements, or business operation needs, we will securely delete or irreversibly anonymize the data, to ensure it can never be associated back to you.

6. Your Rights Over Your Personal Data

Under applicable data protection laws including the UK General Data Protection Regulation, you hold a series of full legal rights over your personal information. You can exercise all these rights at any time, free of charge, by contacting us using the contact methods listed in Section 8 of this policy:

  1. ‌Right of Access‌: You have the right to request a copy of all personal information that we hold about you, including the categories of data we process, the purposes of processing, the third parties we have shared your data with, and the data retention timeline. We will provide you with a complete copy of your personal data in a structured, commonly used electronic format within one month after receiving your request.
  2. ‌Right to Rectification‌: If you find that any of your personal information stored on our system (such as your shipping address, email address, or contact phone number) is inaccurate or incomplete, you have the right to ask us to correct and update that information immediately. You can also edit most of your profile information directly in the My Account section on our website, without needing to contact our support team.
  3. ‌Right to Erasure (Right to be Forgotten)‌: You have the right to request us to delete all your personal information from our systems, under circumstances including when the data is no longer necessary for the purposes we collected it for, when you withdraw your consent to the processing, when you object to the processing and we have no legitimate overriding legal grounds to continue processing your data, or when your personal data has been processed in violation of applicable laws. We will process your erasure request within one month, except for the information we are legally obligated to retain to meet our regulatory compliance responsibilities.
  4. ‌Right to Restriction of Processing‌: You have the right to request us to temporarily suspend the processing of your personal data, under circumstances including when you contest the accuracy of your personal data, when the processing is unlawful but you do not want us to delete your data, when we no longer need your data for our original processing purposes but you require the data for the establishment, exercise or defense of legal claims, or when you have objected to our legitimate-interest based processing while we verify whether our legitimate grounds override your objection.
  5. ‌Right to Data Portability‌: You have the right to receive the personal data you have provided to us, in a machine-readable, structured format, and to request us to transmit this data directly to another data controller, where technically feasible.
  6. ‌Right to Object‌: You have the right to object to our processing of your personal data that is based on our legitimate business interests, at any time. If you raise an objection, we will stop processing your personal data immediately, unless we can demonstrate compelling legitimate grounds for the processing that override your rights, freedoms and interests, or the processing is for the purpose of establishing, exercising, or defending legal claims. You also have the absolute right to object to our processing of your personal information for direct marketing purposes, at any time, and we will immediately stop sending you all marketing communications once you submit the objection.
  7. ‌Right to Withdraw Consent‌: For any processing activity of your personal data that is based on your explicit consent, you have the full right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of any processing we have conducted before your withdrawal.

We may ask you to provide necessary identity verification information before processing your rights request, to ensure that the requester is the legitimate owner of the personal data, and to prevent unauthorized third parties from accessing or modifying your personal information. If your request is manifestly unfounded, repetitive, or excessive, we may charge you a reasonable administrative fee, or refuse to process your request, and we will explain the reason for the refusal to you in writing. If you are not satisfied with our handling of your personal data or our response to your rights request, you also have the right to submit a complaint to the relevant data protection supervisory authority in your resident jurisdiction.

7. Data Security Protection

We take the security of your personal information extremely seriously, and we have implemented a series of strict technical, physical and administrative security measures to protect your data from unauthorized access, disclosure, alteration, destruction, loss, or misuse:

  • All data transmission between your browser and our www.candledropbox.com website is protected by industry-standard SSL/TLS encryption, to ensure that your personal information and order details cannot be intercepted during transmission over the internet.
  • All our backend servers that store user personal data are hosted in secure, ISO 27001 certified data centers, with 24/7 physical security monitoring, strict access control, and redundant backup systems to prevent data loss due to hardware failure or unexpected incidents.
  • We have implemented role-based access control systems inside our team: only a very limited number of authorized staff who need to access your personal data to complete their work (such as customer service team and order fulfillment team) are granted access to your information, and all access logs are recorded and audited on a regular basis.
  • We conduct regular security vulnerability scanning, penetration testing, and staff data protection training for all our team members, to make sure all our personnel understand the strict privacy protection rules, and can comply with the best practices for protecting user personal data.

While we have made every possible effort to deploy the most advanced security measures to protect your personal information, please note that no data transmission method over the internet, or electronic storage method, can be guaranteed to be 100% secure. If we detect a personal data security breach that is likely to pose a high risk to your rights and freedoms, we will notify you and the relevant regulatory authority without undue delay, in line with the requirements of applicable data protection laws.

8. Contact Information

If you have any questions, comments, concerns about this Privacy Policy, or if you wish to exercise any of your data rights outlined in this document, you can contact us through the following official channels:

  • Contact Email: [email protected]
  • Contact Postal Address: The Bartonfields Centre, Barton Blount, Church Broughton, Derby, England, DE65 5AP
  • Contact Telephone Number: +44 2081910802

Our dedicated data protection team will review and respond to your inquiry as soon as possible, usually within 3 working days after we receive your message.

9. Updates to This Privacy Policy

We may occasionally update and revise this Privacy Policy from time to time, to reflect the changes in our business operations, new website functions, updated legal regulatory requirements, or other relevant developments. When we make material changes to this policy, we will post the updated version on this page of www.candledropbox.com, adjust the “Effective Date” at the top of the policy, and place a prominent notification on our website homepage to inform you of the upcoming changes. For any changes that will significantly expand the scope of our data processing activities, we will obtain your explicit consent before the new policy takes effect. We encourage you to review this Privacy Policy periodically each time you visit our website, to stay informed about how we protect your personal information.

This Privacy Policy is last updated and officially effective from October 10, 2026, and all terms in this version apply to all interactions between you and Candle Dropbox after this effective date.