Privacy policy

Privacy Policy

Last Updated: October 31, 2025

Effective Immediately

At Candles by Bea (“we,” “us,” or “our”), we deeply respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [www.candlesbybea.com] (the “Site”), place an order, sign up for our mailing list, or otherwise engage with our brand.

By using our Site or purchasing our products, you consent to the practices described in this policy.


1. Information We Collect

We collect only the information necessary to serve you effectively and fulfill your orders:

A. Personal Information You Provide

  • Name, shipping & billing address – required to process and deliver orders
  • Email address – used for order confirmations, shipping updates, and (if opted in) marketing
  • Phone number – occasionally used by carriers for delivery coordination
  • Payment details – processed securely via third-party gateways (e.g., Stripe, PayPal); we never store full credit card numbers
  • Account preferences – if you create an account (e.g., saved addresses)

B. Automatically Collected Data

  • IP address, browser type, device type, and pages visited – collected via cookies and analytics tools (e.g., Google Analytics) to improve site experience
  • Order history and browsing behavior – used to personalize recommendations (if applicable)

C. Voluntary Submissions

  • Messages sent via contact forms
  • Responses to surveys or feedback requests


2. How We Use Your Information

We use your data only for legitimate business purposes, including:

  • Processing and fulfilling your orders
  • Communicating about your purchase (e.g., shipping confirmations)
  • Responding to customer service inquiries
  • Preventing fraud and enhancing site security
  • Sending promotional emails only if you’ve explicitly opted in
  • Improving our products, website, and customer experience
  • Complying with legal obligations (e.g., tax reporting)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.


3. How We Protect Your Information

We implement reasonable technical and organizational measures to protect your data:

  • SSL encryption across our entire website (look for “https://” and the padlock icon)
  • Secure payment processing through PCI-compliant third parties (e.g., Stripe, PayPal)—your card details never touch our servers
  • Limited internal access – only essential personnel can access customer data, and only for order fulfillment or support
  • Regular software updates to patch security vulnerabilities
  • Strong password policies for backend systems

While no system is 100% immune to risk, we take data protection seriously and continuously evaluate our safeguards.


4. Third-Party Services

We use trusted partners to operate our business, including:

  • BigCartel – our e-commerce platform (they process and store order data per their own Privacy Policy )
  • Payment processors (e.g., Afterpay, Stripe, PayPal) – handle transactions securely
  • Shipping carriers (e.g., USPS, UPS) – receive name and address to deliver packages

These providers are contractually obligated to protect your data and use it only as directed.


5. Your Rights & Choices

Depending on your location (e.g., California under CCPA), you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your data (subject to legal exceptions, such as tax records)
  • Opt out of marketing emails (unsubscribe link in every email)
  • Withdraw consent at any time (where applicable)

To exercise these rights, please contact us at [email protected] with “Privacy Request” in the subject line. We’ll respond within 30 days.


6. Data Retention

We retain your personal information only as long as necessary:

  • Order records: 7 years (for tax, accounting, and warranty purposes)
  • Marketing emails: until you unsubscribe
  • Cookies/analytics: up to 26 months (per Google Analytics default)


7. Children’s Privacy

Our products and website are not intended for children under 13. We do not knowingly collect data from minors.


8. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The “Last Updated” date at the top will indicate revisions. Continued use of our Site constitutes acceptance.


9. Contact Us

Have questions or concerns about your privacy?

We’re here to help.

Email: [email protected]

Mailing Address: [Optional: Add your business mailing address if you’d like]

Thank you for trusting Candles by Bea with your home, your rituals, and your information.

—

Light well,

Bea