Privacy Policy

Last updated: 22 September 2026

The Candle Diary respects your privacy and is committed to handling your personal information responsibly, transparently and securely.

This Privacy Policy explains how we collect, use, store and share your personal data when you visit https://thecandlediary.com/, create an account, place an order, contact us or otherwise interact with The Candle Diary.

By using our website or providing your personal data, you acknowledge the practices described in this Privacy Policy.

1. Who We Are

The Candle Diary operates an online store offering candles, candle gift sets and related products.

For the purposes of applicable data-protection law, The Candle Diary is responsible for determining how and why your personal data is processed.

Contact details

The Candle Diary
21-A, Vijaydeep Society
Sai Mandir, Juno Kosad Road
Kosad, Surat – 394107
Gujarat, India

Email: shop@thecandlediary.com
Phone: +91 90990 13806
Website: https://thecandlediary.com/

2. Scope of This Policy

This Privacy Policy applies to personal data collected through:

Our website and online store.
Customer accounts and checkout.
Order, payment and delivery processes.
Contact forms, emails, calls and customer-support requests.
Product reviews, wishlists and other website features.
Marketing communications where you have subscribed or provided consent.
Cookies and similar website technologies.

This Policy does not control the privacy practices of third-party websites or services that operate independently from The Candle Diary.

3. Personal Data We May Collect

Depending on how you use the website, we may collect the following information.

Identity and contact information

Full name.
Email address.
Telephone number.
Billing address.
Shipping address.
Account username or similar identifier.

Order and transaction information

Products purchased or added to your cart.
Order number and order history.
Transaction amount.
Payment status and transaction reference.
Delivery and tracking information.
Returns, replacements, refunds and complaints.

Complete debit-card, credit-card, UPI or banking credentials are generally processed directly by the selected payment gateway. We may receive limited transaction information such as the payment status, payment method and transaction reference.

Account information

If you create an account, we may collect:

Login and account details.
Saved addresses.
Wishlist information.
Order history.
Account preferences.

Passwords are stored in protected or encrypted form through the website platform. You are responsible for keeping your login credentials confidential.

Communications and customer support

We may collect information you provide when you:

Contact us by email, telephone or contact form.
Ask a question about a product.
Request order assistance.
Submit a complaint or return request.
Participate in a survey, promotion or giveaway.

Reviews and submitted content

When you submit a review, rating, photograph or testimonial, we may collect your name, email address, review content and any files you voluntarily provide.

Approved reviews and the associated display name may be visible publicly on the website.

Technical and usage information

When you visit the website, certain information may be collected automatically, including:

Internet Protocol address.
Browser type and version.
Device type and operating system.
Pages viewed and actions performed.
Date, time and duration of visits.
Referring website or source.
Approximate location derived from an IP address.
Cookie identifiers.
Website error, security and diagnostic information.

4. How We Collect Personal Data

We may collect personal data:

Directly from you when you create an account, place an order or contact us.
Automatically through cookies, server logs and similar technologies.
From payment processors after a payment attempt.
From courier and delivery partners regarding order status.
From marketing, analytics, security or technology providers.
From publicly available sources where permitted by law.

5. How We Use Personal Data

We may use your personal data to:

Process and deliver orders

Confirm and process purchases.
Verify payments.
Prepare invoices.
Pack, dispatch and deliver products.
Send order and tracking updates.
Process cancellations, returns, replacements and refunds.

Operate customer accounts

Create and maintain your account.
Display order history and saved preferences.
Provide wishlist and account-management features.
Facilitate password resets and account security.

Provide customer support

Respond to questions and requests.
Resolve delivery, payment or product issues.
Investigate complaints.
Maintain a record of customer communications.

Communicate with you

We may send service-related communications such as:

Order confirmations.
Payment notifications.
Dispatch and delivery updates.
Account-security messages.
Responses to enquiries.
Important changes affecting your order or account.

These communications are necessary for providing the requested services and may not always include an unsubscribe option.

Marketing and promotions

Where you have consented or where otherwise permitted by law, we may send information about:

New products.
Special offers.
Seasonal collections.
Promotions and events.
Relevant updates from The Candle Diary.

You can unsubscribe from promotional communications at any time by using the unsubscribe option provided or contacting us.

Improve our website and services

We may analyse website activity to:

Understand how visitors use the website.
Improve navigation and checkout.
Measure the performance of products and campaigns.
Diagnose technical errors.
Develop new features and customer experiences.

Security and fraud prevention

We may process information to:

Protect customer accounts.
Detect suspicious transactions.
Prevent fraud, misuse and unauthorized access.
Maintain website and payment security.
Enforce our Terms and Conditions.

Meet legal obligations

We may use or retain personal data to:

Maintain tax, invoicing and accounting records.
Respond to lawful requests from government authorities.
Establish, exercise or defend legal claims.
Comply with consumer-protection, data-protection and other applicable laws.

6. Basis for Processing

We process personal data where:

You have provided valid consent.
Processing is necessary to fulfil your order or provide a service you requested.
Processing is required to comply with a legal obligation.
Processing is permitted as a legitimate use under applicable law.
Processing is reasonably necessary to prevent fraud, protect security or resolve a dispute.

Where processing depends on consent, you may withdraw your consent. Withdrawal will not affect processing already carried out lawfully before the withdrawal.

Some information is necessary to process an order. If you do not provide it, we may be unable to complete your purchase or deliver the requested service.

7. Cookies and Similar Technologies

Cookies are small files stored on your device when you visit a website.

The Candle Diary may use the following categories of cookies:

Essential cookies

These cookies support core website functions such as:

Maintaining the shopping cart.
Completing checkout.
Remembering account login status.
Protecting website security.
Processing session and payment information.

Blocking essential cookies may prevent parts of the website from working correctly.

Preference cookies

These cookies remember choices such as account preferences, saved settings and recently viewed products.

Analytics cookies

These cookies help us understand website traffic, visitor behaviour and page performance so that we can improve the website.

Marketing cookies

Where used and permitted, these cookies may help measure advertising performance or show relevant promotional content.

You can manage cookies through your browser settings and, where available, the website’s cookie-preference controls. Disabling certain cookies may affect website functionality.

8. How We Share Personal Data

We may share personal data only where reasonably necessary with the following categories of service providers:

Payment providers

Payment gateways, banks and financial-service providers may process payment and transaction information.

Courier and delivery partners

We may share your name, address, telephone number and order-delivery details with shipping providers to fulfil and track your order.

Website and technology providers

This may include:

Website hosting providers.
WooCommerce and related service providers.
Cloud storage providers.
Security and fraud-prevention services.
Website maintenance and technical-support providers.
Email, SMS and customer-communication providers.
Analytics and performance services.

Professional advisers

We may share relevant information with accountants, auditors, lawyers, insurers and other professional advisers where necessary.

Government and legal authorities

Information may be disclosed when required by law, a court order or a lawful request from a competent authority.

Business transfers

If The Candle Diary undergoes a merger, restructuring, acquisition or transfer of business assets, relevant personal data may be transferred as part of that transaction, subject to applicable law.

We do not sell or rent your personal data in exchange for money.

Service providers receiving personal data are expected to use it only for the agreed purpose and apply appropriate confidentiality and security safeguards.

9. International Processing

Some technology, hosting, analytics, communication or payment providers may process information using systems located outside India.

Where personal data is transferred or processed outside India, we will take reasonable steps to ensure that the transfer is permitted under applicable law and that appropriate protections are in place.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected or as required by applicable law.

Retention periods may depend on:

Whether you maintain an active account.
The completion of an order or customer-service request.
Tax, accounting and invoicing requirements.
Fraud-prevention and security needs.
Warranty, refund or dispute periods.
The establishment or defence of legal claims.
Any statutory retention obligation.

For example:

Account information may be retained while your account remains active.
Order and invoice records may be retained for the period required under tax and accounting laws.
Marketing information may be retained until you unsubscribe or withdraw consent.
Customer-service communications may be retained until the matter is resolved and for a reasonable period afterwards.
Security and transaction logs may be retained for periods required under applicable law.

When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

11. Data Security

We use reasonable administrative, technical and organisational measures designed to protect personal data against:

Unauthorized access.
Accidental loss.
Misuse or alteration.
Unlawful disclosure.
Destruction or damage.

These measures may include access controls, secure connections, password protection, system monitoring, backups and restrictions on service-provider access.

No internet transmission or storage system can be guaranteed to be completely secure. You should use a strong password, protect your login credentials and avoid sharing sensitive information through unsecured channels.

If a personal-data breach occurs, we will take appropriate remedial action and provide notifications where required by applicable law.

12. Your Privacy Rights

Subject to applicable law, you may have the right to:

Ask for a summary of the personal data we process about you.
Request information about the manner in which your personal data is processed.
Correct inaccurate or misleading personal data.
Complete incomplete personal data.
Update outdated personal data.
Request deletion or erasure where retention is no longer necessary.
Withdraw previously provided consent.
Opt out of promotional communications.
Raise a complaint about the handling of your personal data.
Nominate another individual to exercise applicable rights on your behalf in the event of death or incapacity.

You may also update certain information through your customer account.

To exercise a privacy right, contact shop@thecandlediary.com. We may request information reasonably necessary to verify your identity and locate the relevant records.

Certain requests may be declined or limited where retaining or processing the information is required for legal compliance, fraud prevention, dispute resolution or another lawful purpose.

13. Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent by:

Using an unsubscribe option in a promotional message.
Changing available cookie preferences.
Updating available account settings.
Emailing shop@thecandlediary.com.

Withdrawal should be as straightforward as giving consent. However, withdrawing consent for information required to process an order may prevent us from providing the relevant service.

14. Children’s Privacy

Our website and online purchasing services are intended for adults.

We do not knowingly collect personal data directly from a person under 18 without appropriate involvement or verifiable consent from a parent or legal guardian where required.

If you believe that a child has provided personal data without appropriate permission, contact us so that we can review and, where appropriate, delete the information.

15. Product Reviews, Comments and Public Information

Information included in an approved product review or comment may be displayed publicly.

Do not include sensitive personal information, payment information, residential addresses or other confidential details in a review or public comment.

Reviews may be checked through automated spam-prevention and security services.

16. Third-Party Links and Embedded Content

The website may contain links to or embedded content from third-party websites, social networks or service providers.

Third parties may collect information according to their own privacy policies. The Candle Diary does not control and is not responsible for their independent privacy practices.

You should review the privacy policy of a third-party service before providing personal information to it.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

Our website or business operations.
The services and technologies we use.
Legal or regulatory requirements.
Our data-handling practices.

The revised policy will be published on this page with an updated “Last updated” date.

Material changes may also be communicated through the website, email or another appropriate method where required.

18. Privacy Questions and Grievances

For privacy questions, requests or complaints, contact:

Email: shop@thecandlediary.com
Phone: +91 90990 13806
Support hours: 10:00 AM to 6:00 PM

Postal address:
The Candle Diary
21-A, Vijaydeep Society
Sai Mandir, Juno Kosad Road
Kosad, Surat – 394107
Gujarat, India

Please include sufficient information to identify your account or order and explain the nature of your request.

We will acknowledge and address privacy grievances within the timelines required by applicable law. If your concern is not resolved, you may approach the competent data-protection authority when available under applicable law.