PRIVACY POLICY 

  Sweet Candy Company, Inc.   •   Effective May 15, 2026 

This Privacy Policy explains how Sweet Candy Company, Inc. and its affiliates, brands, and authorized operators (collectively, "Sweet Candy Company," "Sweet’s," "we," "our," or "us") collect, use, protect, and disclose information about you. This Policy applies when you visit sweetcandy.com, use our mobile apps, interact with our live chat feature, or visit our physical store (collectively, the "Services").  Your use of any of these Services shall be deemed a knowing and full waiver and release of all claims, privacy or otherwise, known or unknown, associated with such use.  Should you refuse such waiver and release of Sweet Candy Company, please cease all use or engagement of Services immediately.

We may update this Policy periodically. Material changes will be communicated via homepage notice or email. The effective date at the top of this document reflects the most recent revision.

2.1 Information You Provide Directly

We collect information you provide when you:

•        Create an account or place an order

•        Fill out forms or participate in promotions, contests, or surveys

•        Apply for employment

•        Contact customer service or use our live chat feature

•        Request charity donations or fundraiser participation

•        Engage with us on social media

This may include: name, email, phone number, postal address, ZIP code, date of birth, account credentials, photographs, social media usernames, and employment history (for job applicants).

2.2 Transaction Information

When you place an order we collect: items ordered, transaction amount, date and store location, payment card type, expiration date, and the last four digits of your card. We do NOT store full card numbers. All payment transactions are handled by our PCI-compliant third-party payment processor.

2.3 Information Collected Automatically

When you use our Services, we and our service providers automatically collect:

•        Log data: IP address, browser type, ISP, referring/exit pages, and timestamps

•        Device information: hardware model, operating system, unique device identifiers

•        Location data: approximate or precise location if you have enabled location services

•        Usage data: pages viewed, time spent, links clicked, and purchase behavior

2.4 Cookies, the Meta Pixel, and Tracking Technologies

We use cookies, web beacons, pixels (including the Meta Pixel), embedded scripts, and similar tracking technologies ("Tracking Technologies") to collect information and deliver advertising.

META (FACEBOOK) PIXEL — IMPORTANT DISCLOSURE

The Meta Pixel is a piece of code on our website that allows Meta Platforms, Inc. to collect data about your visit — such as pages viewed, products browsed, and actions taken — and match it to your Facebook or Instagram account. We use it to:

•        Measure the effectiveness of our Facebook and Instagram ad campaigns

•        Build “Custom Audiences” of website visitors for retargeting

•        Deliver personalized ads on Facebook, Instagram, and Meta’s partner network

To opt out of Meta’s use of your data for advertising, visit facebook.com/settings/?tab=ads or use a Global Privacy Control (GPC) browser signal, which we honor as a valid opt-out request.

2.5 Live Chat Feature

We use a third-party live chat service to support customer inquiries. When you use the chat:

•        Conversations may be recorded and stored by us and our chat provider

•        The chat provider may use cookies or similar technologies to recognize your browser

•        Personal information you share in chat is collected to respond to your inquiry and improve our Services

•        Transcripts may be reviewed by customer service staff and shared with third-party support vendors

We do not share chat content with advertising partners without your consent.

2.6 In-Store Cameras

We operate security cameras at our physical location for security and operational improvement purposes. Footage is retained for a limited period and is not shared with third parties except as required by law or for security investigations.

2.7 Information from Third Parties

We may receive information about you from social media platforms, advertising partners, and data providers. This information may be combined with information we already hold about you.

We use your information to:

•        Provide, maintain, and improve our Services and your in-store and online experiences

•        Process orders and send confirmations, receipts, and transactional communications

•        Send technical notices, security alerts, and administrative messages

•        Respond to inquiries and requests, including via live chat

•        Communicate with you about products, promotions, rewards, and events

•        Deliver targeted advertisements on our site and on third-party platforms including via the Meta Pixel

•        Monitor and analyze trends, usage, and marketing campaign performance

•        Personalize your experience and provide content matched to your interests

•        Investigate and prevent fraudulent transactions and other illegal activities

•        Comply with applicable law and legal process

We may share your information with:

•        Service providers and vendors: Companies performing services on our behalf, including payment processing, order fulfillment, email and chat services, analytics, and advertising (including Meta)

•        Advertising partners: Including Meta, Google, and Microsoft Advertising. Sharing data for advertising purposes may constitute a “sale” or “sharing” under California and New York law

•        Affiliates, subsidiaries, and authorized operators: To provide products and services and support our business network

•        Business transfers: In connection with any merger, acquisition, financing, or sale of company assets

•        Legal and safety disclosures: When required by law, court order, or to protect our rights or the safety of others

•        With your consent: For any other purpose disclosed at the time of collection

We may also use and share aggregated or de-identified data that cannot reasonably be used to identify you.

Our Services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly. Contact us at feedback@sweetcandy.com if you believe we may have information from or about a child under 16.

6.1 Categories of Personal Information Collected

6.2 Your California Rights

As a California resident, you have the right to:

•        Know: Request disclosure of categories and specific pieces of personal information we hold about you, the sources, purposes, and third parties we share with

•        Delete: Request deletion of personal information we have collected from you (subject to certain exceptions)

•        Correct: Request correction of inaccurate personal information we hold about you

•        Opt-Out of Sale / Sharing: Opt out of the sharing of your data with advertising partners, including via the Meta Pixel

•        Limit Use of Sensitive Personal Information: Request we limit use of sensitive personal information to necessary purposes only

•        Data Portability: Request a portable copy of your personal information

•        Non-Discrimination: We will not discriminate against you for exercising any of these rights

6.3 How to Submit a California Rights Request

To exercise your rights, contact us at:

•        Email: feedback@sweetcandy.com — subject line: “California Privacy Rights Request”

•        Mail: Sweet Candy Company, 3780 West Directors Row, Salt Lake City, UT 84104, Attn: Privacy

•        GPC Signal: Enable Global Privacy Control in a supported browser — we will treat it as an opt-out of sale and sharing

Requests must include your first name, last name, email, state, and ZIP code. We will verify your identity before processing. We will respond within 45 days (with a possible 45-day extension). You may submit up to two requests per 12-month period.

6.4 Authorized Agents

You may designate an authorized agent to submit requests on your behalf. The agent must provide written proof of authorization, and we may require you to directly verify your identity.

6.5 Shine the Light

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. Send a letter to the address above with “California Shine the Light Request” in the first line and include your name, street address, city, state, and ZIP code.

6.6 Minors Under 18

California residents under 18 who have registered for our Services may request removal of content or information they posted. Contact us with “California Minor Content Removal” in your request. We will make good-faith efforts to remove or anonymize such content as required by law.

7.1 Data Security — NY SHIELD Act

Consistent with the New York SHIELD Act, we implement and maintain reasonable administrative, technical, and physical safeguards to protect the private information of New York residents, including:

•        Designating an employee responsible for our data security program

•        Identifying internal and external risks to the security of private information

•        Training employees on security practices and procedures

•        Using encryption and password protection for data in transit and at rest

•        Selecting service providers capable of maintaining appropriate safeguards

•        Reviewing and updating our security program in light of business changes and new threats

7.2 Breach Notification

In the event of a breach of the security of private information of New York residents, we will notify affected individuals without unreasonable delay, consistent with the SHIELD Act. We will also notify the New York Attorney General, the Department of State, and the Division of State Police as required by law.

7.3 Sharing with Advertising Partners

We share personal information with advertising partners — including via the Meta Pixel — in ways that may constitute a “sale” under New York law. New York residents may opt out by:

•        Emailing feedback@sweetcandy.com with subject line “New York Do Not Sell Request”

•        Enabling the Global Privacy Control (GPC) signal in a supported browser

•        Visiting facebook.com/settings/?tab=ads to opt out of Meta’s use of your data directly

7.4 Your New York Rights

New York residents have the right to:

•        Know what personal data we collect, the purpose of collection, and whether it is shared or sold

•        Access a copy of their personal data

•        Request correction of inaccurate personal data

•        Request deletion of their personal data (subject to applicable exceptions)

•        Opt out of the sale of their personal data

•        Non-discrimination for exercising their rights

To exercise these rights, contact us at feedback@sweetcandy.com with “New York Privacy Request” in the subject line.

Nevada residents may opt out of the “sale” of certain covered information under Nevada law. We currently do not sell covered information as defined under Nevada law. If you wish to be notified if our practices change, email feedback@sweetcandy.com with “Nevada Data Privacy” in the subject line.

We take reasonable administrative, technical, and physical measures to protect your personal information. Our online store is powered by Shopify, which is Level 1 PCI-DSS compliant, uses HTTPS encryption for data in transit, encrypts sensitive stored information, and uses bcrypt for password hashing.

No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a breach, we will notify affected individuals as required by applicable law, including New York’s SHIELD Act.

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order and transaction records are generally retained for at least seven years. You may request deletion of your information as described in Sections 6 and 7.

11.1 Account Information

You may update or correct your account information by logging into your account. To deactivate your account, email feedback@sweetcandy.com with your name, account name, and a deactivation request.

11.2 Cookies and Tracking

You can control cookies through your browser settings. Removing or blocking cookies may affect the functionality of our website. You may also use the Global Privacy Control (GPC) browser signal to opt out of data sharing with advertising partners, including Meta. We honor GPC signals as valid opt-out requests.

11.3 Advertising Opt-Outs

You can opt out of targeted advertising from specific partners:

•        Meta (Facebook/Instagram): facebook.com/settings/?tab=ads

•        Google: google.com/settings/ads/anonymous

•        Microsoft/Bing: advertise.bingads.microsoft.com

•        Network Advertising Initiative: networkadvertising.org/choices/

•        Digital Advertising Alliance: optout.aboutads.info

11.4 Email Communications

You may opt out of promotional emails by clicking the unsubscribe link in any email or contacting us at feedback@sweetcandy.com. We may still send transactional messages related to your account or orders.

11.5 Do Not Track / Global Privacy Control

We currently do not alter our data practices in response to standard browser “Do Not Track” signals. However, we do honor the Global Privacy Control (GPC) signal as an opt-out of the sale and sharing of your personal data.

Our Services may contain links to or integrations with third-party websites and services. This Policy does not apply to their practices. Key third parties we work with include:

Sweet Candy Company is based in the United States and does not intend to offer its Services to residents of the European Economic Area (EEA). If you access our Services from the EEA, your data will be transferred to and processed in the United States. Our platform is operated through Shopify and is subject to the Shopify Data Processing Addendum at shopify.com/legal/dpa.

For questions, requests, or complaints about this Privacy Policy or our data practices:

Sweet Candy Company, Inc.

Attn: Privacy / Customer Service

3780 West Directors Row

Salt Lake City, UT 84104

Email: feedback@sweetcandy.com

Phone: (801) 886-1444   |   Toll Free: (800) 669-8669

California requests: include “California Privacy Rights Request” in the subject line.

New York requests: include “New York Privacy Request” in the subject line.

Nevada requests: include “Nevada Data Privacy” in the subject line.