Privacy Policy

September, 2026

This Privacy Policy explains how Candlelight Art (“Candlelight Art,” “we,” “us” or “our”) may collect, use, disclose, retain and otherwise process personal information when you visit or interact with our website, purchase products from us, communicate with us, subscribe to communications, follow links to third-party services, or otherwise interact with Candlelight Art.

By using our website or providing personal information to us, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, we will seek that consent in an appropriate manner.

1. Scope

This Privacy Policy applies to personal information handled by Candlelight Art in connection with:

our website and online shop;
orders placed through our WooCommerce store;
customer-service and other communications;
email, newsletter and subscriber lists;
website analytics, cookies and similar technologies;
promotions, surveys or other features we may offer; and
other commercial activities operated under the Candlelight Art trading name.

This Privacy Policy does not govern the privacy practices of Etsy, payment processors, social-media platforms or other independently operated third-party websites, applications or services. Those parties process information under their own terms and privacy policies.

2. Meaning of Personal Information

“Personal information” means information about an identifiable individual or information that may reasonably be linked to an identifiable individual.

Personal information generally does not include information that has been anonymized, aggregated or otherwise processed so that it no longer identifies an individual, where applicable law permits us to treat that information as non-personal information.

3. Information We May Collect

Depending on how you interact with Candlelight Art, we may collect the following categories of information.

A. Identity and contact information

This may include:

your name;
billing and delivery addresses;
email address;
telephone number;
account username or similar account information; and
other contact details you choose to provide.

B. Order and transaction information

This may include:

products viewed, selected or purchased;
order numbers and transaction records;
billing and delivery details;
payment status;
delivery, download and fulfilment information;
discount or promotional-code information;
customer notes;
refund, cancellation or return information; and
correspondence concerning an order.

We may receive limited payment-related information from our payment processors. Unless expressly indicated otherwise, complete payment-card details are normally collected and processed by the applicable payment provider rather than stored directly by Candlelight Art.

C. Account information

Where customer accounts are offered, we may collect or maintain:

account login information;
order history;
saved addresses;
account preferences; and
other information associated with the account.

Passwords are ordinarily stored in encrypted or hashed form by the systems supporting the website and are not intended to be readable by Candlelight Art.

D. Communications and submissions

We may collect information contained in:

emails and contact-form submissions;
customer-service enquiries;
reviews, feedback and survey responses;
requests for refunds, returns or support;
social-media messages or interactions; and
other information you voluntarily provide to us.

E. Email and subscriber information

If you join an email, newsletter, promotional or subscriber list, we may collect:

your name;
email address;
subscription status;
sign-up source;
consent records;
message delivery and engagement information;
preferences and interests; and
unsubscribe or suppression records.

We may use third-party email or customer-relationship platforms to manage these communications.

F. Website, device and analytics information

When you access or use our website, we and our service providers may automatically collect information such as:

Internet Protocol address;
browser type and version;
device type;
operating system;
general or approximate location;
language and time-zone settings;
referral source;
pages, products and links viewed;
searches and interactions;
dates, times and duration of visits;
shopping-cart activity;
order attribution data;
cookie identifiers;
advertising or analytics identifiers;
error, diagnostic and performance data; and
other technical or usage information.

We may use multiple analytics, performance, security, marketing and website-management tools. The particular providers and technologies used may change as we develop the website and our business.

G. Information from third parties

We may receive personal information from third parties where permitted, including:

WooCommerce and WordPress-related services;
hosting and website-service providers;
payment processors;
delivery and fulfilment providers;
email and marketing platforms;
fraud-prevention and security providers;
analytics and advertising providers;
social-media platforms;
professional advisers;
customers purchasing or sending products for another person; and
Etsy, where information is made available to us in connection with an Etsy transaction or seller function.

If you provide another person’s information to us, such as a recipient’s delivery details, you are responsible for having the authority to provide that information for the relevant purpose.

4. How We Collect Information

We may collect personal information:

directly from you;
automatically through our website and associated technologies;
from service providers acting for us;
from independently operated platforms through which we conduct business;
from publicly available sources where permitted by law; and
through other lawful means consistent with this Privacy Policy.

5. How We May Use Personal Information

We may collect, use and otherwise process personal information for purposes including:

operating, administering and improving the website and business;
providing products, digital content and customer services;
receiving, confirming, processing, fulfilling and delivering orders;
providing order, payment, delivery and download notifications;
establishing and administering customer accounts;
processing payments, refunds, returns and cancellations;
verifying transactions and preventing fraud, abuse or unauthorized activity;
providing technical support and responding to enquiries;
communicating with customers about purchases, accounts or services;
maintaining transaction, tax, accounting and business records;
managing inventory and product availability;
measuring website traffic, usage, engagement and performance;
understanding customer preferences and purchasing patterns;
personalizing or improving content, products, communications and user experiences;
conducting analytics, testing, research and business planning;
measuring the effectiveness of advertising, promotions and communications;
developing and marketing products or services;
administering mailing lists, newsletters and subscriber communications;
requesting feedback or reviews;
protecting our website, customers, rights, property and systems;
detecting, investigating or addressing technical, security, legal or policy issues;
enforcing our terms, policies and contractual rights;
responding to legal proceedings, governmental requests or regulatory requirements;
obtaining professional, financial, legal, technical or insurance advice;
evaluating or completing a financing, sale, transfer, restructuring or other business transaction;
complying with applicable legal, regulatory, tax and record-keeping requirements; and
carrying out other purposes that are disclosed when information is collected, are reasonably connected with the foregoing purposes, or are otherwise permitted or required by law.

We may use anonymized or aggregated information for research, analytics, commercial planning, product development and other lawful purposes. Where permitted by law, we may retain and use information that no longer identifies an individual without applying the restrictions that govern personal information.

6. Consent and Other Permitted Processing

Where required, Candlelight Art may obtain consent expressly, through an affirmative action, or implicitly from the circumstances and the individual’s conduct.

For example, when you provide information to place an order, you consent to its use and disclosure as reasonably necessary to process payment, fulfil the order, communicate with you and maintain appropriate transaction records.

We may also collect, use or disclose personal information without renewed consent where permitted or required by law. This may include processing reasonably necessary to provide a requested product or service, comply with legal obligations, investigate fraud, collect a debt, respond to an emergency or protect legal rights.

You may withdraw consent to processing that depends on consent, subject to reasonable notice and any legal, contractual or operational restrictions. Withdrawing consent may prevent us from providing some products, features or services.

7. Email and Marketing Communications

We may send transactional or service-related communications concerning orders, accounts, enquiries, downloads, deliveries, security, policy changes or other matters relating to an existing interaction with Candlelight Art.

We may also send newsletters, product announcements, offers and other commercial electronic communications where we have the consent or other legal authority required to do so.

Marketing communications will include an unsubscribe method where required by law. You may unsubscribe using the link provided in the message or by contacting us. We may retain limited information concerning your unsubscribe request so that we can honour it and maintain a suppression record.

Unsubscribing from promotional communications will not prevent us from sending non-promotional communications reasonably required to administer an order, account, transaction, legal notice or customer-service matter.

8. Cookies and Similar Technologies

Our website and our service providers may use cookies, pixels, tags, local storage, scripts, software-development kits, log files and similar technologies.

These technologies may be used to:

operate essential website and shopping-cart functions;
remember settings and preferences;
maintain sessions and customer accounts;
process and attribute transactions;
protect the website and detect fraud;
assess performance and diagnose errors;
understand website traffic and user behaviour;
measure marketing and communication effectiveness;
personalize content or advertising; and
support integrations with third-party services.

Some technologies are necessary for the website to function. Others may be provided by analytics, advertising, social-media or other third parties.

You may be able to control certain cookies through our cookie-management tool, where provided, or through your browser or device settings. Blocking cookies may affect website functionality, prevent the shopping cart or account features from operating correctly, or reduce the availability of certain services.

Browser “Do Not Track” signals and similar mechanisms are not applied uniformly across the industry. Unless we state otherwise, our website may not respond to all such signals.

9. WooCommerce and WordPress

Our online shop is operated using WooCommerce within a WordPress website.

Information submitted through the store may be stored in our WordPress or WooCommerce systems and processed through relevant plugins, extensions, hosting infrastructure, payment providers, email systems, security services, delivery tools and other integrations.

The information processed and the parties receiving it may depend on:

the products purchased;
the payment and delivery method selected;
the customer’s location;
the plugins or features enabled at the relevant time; and
the technical and commercial services used to operate the store.

We may modify, replace, add or discontinue WooCommerce, WordPress or related service providers and integrations without separately amending each reference in this Privacy Policy, provided that personal information continues to be handled in accordance with applicable law.

10. Etsy Store

Our website may contain links to a Candlelight Art store or product listings hosted on Etsy.

Etsy is an independently operated third-party platform. When you visit Etsy, create an Etsy account, place an order through Etsy or otherwise interact with Etsy, Etsy may collect and process personal information under Etsy’s own terms, privacy policy and cookie practices.

Candlelight Art does not control Etsy’s general collection or use of information. However, Etsy may provide Candlelight Art with information reasonably required for us to administer our Etsy shop and fulfil transactions, such as:

a purchaser or recipient’s name;
email address;
delivery address;
order details;
communications;
payment or order status; and
other information made available through Etsy’s seller tools.

We may use information received through Etsy to process and fulfil orders, communicate with customers, provide support, comply with legal obligations, prevent fraud and manage our business. We will not use Etsy customer information for unrelated purposes where prohibited by Etsy’s rules or applicable law.

A link from our website to Etsy does not mean that Candlelight Art controls or assumes responsibility for Etsy’s privacy or security practices.

11. How We May Disclose Personal Information

We may disclose personal information to:

website hosts and infrastructure providers;
WordPress, WooCommerce and related plugin or extension providers;
payment processors and financial institutions;
delivery, postal, logistics and fulfilment providers;
digital-download and file-delivery services;
cloud storage and information-technology providers;
security, anti-fraud and identity-verification providers;
email, newsletter and customer-relationship platforms;
analytics, advertising and marketing providers;
social-media and communications platforms;
customer-service and administrative providers;
accountants, lawyers, insurers, consultants and other professional advisers;
governmental, judicial, regulatory, law-enforcement or tax authorities;
a purchaser, investor, lender, successor or other participant in a proposed or completed business transaction; and
other parties with your direction or consent, or where permitted or required by law.

Service providers may use personal information to perform services for us and may have their own independent legal obligations. Some providers may also process information for their own purposes where disclosed through their services or privacy notices.

We do not disclose personal information merely in exchange for direct monetary payment as a standalone business activity. However, certain analytics, advertising or technology arrangements may be characterized as “selling,” “sharing” or targeted-advertising activity under the laws of some jurisdictions. Where such laws apply, we will provide any legally required rights or controls.

12. International Processing

Candlelight Art and its service providers may process, store or access personal information in Canada, the United States, the European Economic Area or other countries in which we or our service providers operate.

As a result, personal information may be subject to the laws of another jurisdiction and may be accessible to courts, governmental bodies, law-enforcement authorities or national-security authorities in that jurisdiction.

By interacting with Candlelight Art, you acknowledge that personal information may be processed outside your province, territory or country of residence, subject to applicable legal requirements.

13. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

administer transactions and customer relationships;
maintain financial, tax and business records;
provide products or services;
resolve disputes and respond to complaints;
prevent fraud and protect systems;
enforce agreements;
maintain consent and unsubscribe records;
meet legal, regulatory, accounting or insurance requirements; and
establish, exercise or defend legal claims.

Retention periods may vary according to the type of information, the nature of the relationship, technical and operational requirements, legal limitation periods and applicable law.

We may delete, anonymize or aggregate information when we determine that it is no longer reasonably required, subject to legal, technical and operational constraints. Information may remain temporarily in backups, archives or system logs after it is removed from active systems.

Nothing in this Privacy Policy requires us to retain information for longer than we consider necessary, unless retention is required by law.

14. Security

We use physical, organizational and technical safeguards that we consider reasonable and appropriate in light of the nature and sensitivity of the personal information, the purposes for which it is handled, and the size and circumstances of our business.

These measures may include access controls, passwords, software updates, hosted security features, encryption provided by relevant systems, restricted administrative access and the use of established service providers.

No website, storage system, electronic transmission or security measure is completely secure. We therefore cannot guarantee that information will never be lost, misused, accessed, disclosed, altered or destroyed without authorization.

You are responsible for protecting your account credentials, using secure devices and notifying us if you believe your interaction with Candlelight Art or your customer account has been compromised.

15. Privacy Incidents

Where a loss of, unauthorized access to, or unauthorized disclosure of personal information occurs, we will investigate and take measures we consider appropriate in the circumstances.

We will notify affected individuals, regulators or other parties where notification is required by applicable law. We may maintain records concerning privacy incidents where legally required.

16. Access and Correction

Subject to applicable law, you may request access to personal information that Candlelight Art holds about you or request correction of information that is inaccurate or incomplete.

We may require sufficient information to:

verify your identity;
locate the relevant records;
understand the scope of the request; and
protect the privacy and legal rights of others.

Access may be limited or refused where permitted or required by law, including where information is protected by legal privilege, relates to another person, contains confidential commercial information, cannot be disclosed for legal or security reasons, or is not reasonably retrievable.

We may charge a reasonable fee where permitted by law and after giving any notice required by law.

17. Other Privacy Choices

Depending on the circumstances and applicable law, you may be able to:

withdraw certain consent;
unsubscribe from promotional emails;
request correction of information;
request access to information;
adjust cookie or browser settings; or
close a customer account.

These rights are not absolute and may be subject to identity verification, statutory exceptions, retention obligations, technical limitations and other lawful restrictions.

Residents of jurisdictions that provide additional privacy rights may contact us to make a request. We will assess the request under the law that applies to the particular individual, information and processing activity.

18. Children

Our website and shop are intended for use by adults and are not directed at children for the purpose of collecting personal information from them.

We do not knowingly seek to collect personal information directly from children who are unable to provide valid consent under applicable law. A parent, guardian or other responsible adult should place orders or communicate with us on behalf of a child.

If you believe that a child has provided personal information to us inappropriately, please contact us.

19. Third-Party Websites and Services

Our website may contain links, embedded content, integrations or features provided by third parties, including Etsy, payment providers, social-media services and other websites.

Candlelight Art is not responsible for the content, availability, security or privacy practices of independently operated third parties. You should review their terms and privacy notices before providing information to them.

The inclusion of a link or integration does not constitute a representation that the third party follows the same privacy practices as Candlelight Art.

20. Business Transactions

Personal information may be disclosed, transferred or made available as part of a proposed or completed sale, financing, merger, reorganization, transfer of assets, change of control, insolvency proceeding or other business transaction involving some or all of Candlelight Art’s operations.

Where appropriate, we may require the recipient to use the information for purposes connected with evaluating or completing the transaction and to handle it in accordance with applicable law.

21. Legal Disclosure

We may preserve, use or disclose personal information where we reasonably believe it is necessary to:

comply with a subpoena, court order, warrant or other lawful process;
respond to a governmental, regulatory or law-enforcement request;
administer tax, accounting or regulatory obligations;
investigate suspected fraud, security incidents or unlawful conduct;
collect amounts owed;
enforce our agreements, rights or policies;
protect the safety, rights or property of Candlelight Art, our customers or others; or
establish, exercise or defend legal claims.

22. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in our business, website, technology, service providers, legal obligations or privacy practices.

The revised policy will be posted on our website with an updated effective date. Unless applicable law requires otherwise, changes become effective when the revised policy is posted.

We may provide additional notice of material changes where we consider it appropriate or where legally required. Your continued interaction with Candlelight Art after a revised policy takes effect will be subject to the revised policy, to the extent permitted by law.

23. Governing Framework

Candlelight Art handles personal information in accordance with privacy laws applicable to its activities, which may include Canada’s Personal Information Protection and Electronic Documents Act.

Nothing in this Privacy Policy is intended to exclude, restrict or waive a right or obligation that cannot lawfully be excluded, restricted or waived.

24. Privacy Contact

Questions, concerns, complaints and requests concerning this Privacy Policy or Candlelight Art’s handling of personal information may be directed to:

Privacy Contact
Candlelight Art
Email: sales@candlelightart.com

Please include sufficient information for us to understand and respond to your enquiry. We may ask you to verify your identity before addressing a request involving personal information.

We will review privacy complaints and respond as required by applicable law. If you are not satisfied with our response, you may have the right to contact the Office of the Privacy Commissioner of Canada or another competent privacy authority.