Privacy Policy

Last updated: November 3, 2026  ·  Effective: November 3, 2026

1. Who we are

SweetWhirl Candy Co. ("SweetWhirl", "we", "us") is a small candy business located at 1428 Alder Street, Suite B, Portland, OR 97205, USA. We operate this website to sell our handmade candies and lollipops within the United States. For any privacy question, email us at sweetwhirl.candy@gmail.com or call (503) 555-0147.

2. Information we collect

Information you give us

• Contact form: your name, email address, chosen topic and message, used only to reply to you.
• Newsletter ("The Sweet Letter"): your email address, collected only when you subscribe. You can unsubscribe at any time via the link in every email.
• Orders / checkout: your name, email address, delivery address, city and ZIP code, and the contents of your order. We do not collect or store credit-card numbers on this website; payment is completed through a secure payment link sent by email and processed by our payment provider.
• Gift messages: any message you write for a handwritten gift card, used only to prepare your gift.

Information collected automatically

• Essential site data: your shopping-cart contents and cookie-consent choice are stored in your browser (local storage / essential cookies) so the site works correctly when you return.
• Technical data: like most websites, our hosting may log IP address, browser type, device type, pages visited and time of visit for security and troubleshooting.
• Analytics & advertising data (with consent): if you accept all cookies, we may use privacy-respecting analytics and Google advertising tools as described in Sections 4 and 5.

3. How we use information

• To process, pack, ship and support your orders.
• To reply to your questions and provide customer service.
• To send order confirmations, payment links, shipping and tracking updates.
• To send our monthly newsletter, only if you subscribed.
• To maintain site security, prevent fraud and comply with legal obligations (for example, tax and food-business record-keeping).
• With your cookie consent, to understand which pages and products are popular and to measure our advertising.

We never sell your personal information. We never use your order or contact details for purposes unrelated to the reason you provided them.

4. Cookies & your choices

A cookie is a small file stored in your browser. When you first visit our site, a banner asks whether you accept all cookies or want essential cookies only. Your choice is saved, and you can change it at any time using the Cookie Settings button in the footer of every page.

You can also block or delete cookies in your browser settings. Note that blocking essential cookies may stop the cart and checkout from working correctly.

5. Advertising & analytics

We may advertise with Google Ads. If you accept all cookies, Google may use cookies to measure conversions (for example, whether an ad led to an order) and to serve ads based on your prior visits to this or other websites. You can opt out of personalized advertising at any time:

• Google Ads Settings: adssettings.google.com
• Industry opt-out: optout.aboutads.info

Choosing “Essential only” in our cookie banner means analytics and advertising cookies are not set by us.

6. Who we share information with

We share only what is needed to run our business:

• Delivery carriers (name and address) to ship your order.
• Payment provider to process your payment securely via the emailed payment link.
• Website hosting and email providers to operate this site and send emails you requested.
• Analytics / advertising providers (only with your cookie consent), as described above.
• Authorities, only when required by law.

7. How long we keep information

• Order records: kept as long as needed for accounting, tax and food-safety obligations (typically up to 7 years).
• Contact-form messages: deleted once handled, and no later than 24 months after our last reply.
• Newsletter emails: kept until you unsubscribe.
• Cart and consent data stored in your browser: until you clear it or it expires (up to 12 months).

8. Security

We use HTTPS encryption, limit access to customer information to staff who need it, and do not store payment-card numbers. No internet transmission is 100% secure, but we work to protect your information with reasonable technical and organizational measures.

9. Your rights

Depending on where you live (for example, California under the CCPA/CPRA, or the EEA/UK under the GDPR), you may have the right to:

• Know what personal information we hold about you and receive a copy.
• Ask us to correct inaccurate information.
• Ask us to delete your information, subject to legal record-keeping duties.
• Opt out of the “sale” or “sharing” of personal information — we do not sell personal information.
• Withdraw cookie or newsletter consent at any time.
• Not be discriminated against for exercising your rights.

To exercise any right, email sweetwhirl.candy@gmail.com. We will verify your request using the email address you used with us and respond within the time required by applicable law (generally within 45 days).

10. Children's privacy

This website is intended for adult shoppers and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

If we make material changes, we will post the updated policy on this page and revise the “Last updated” date above. Continued use of the site after changes take effect means you accept the updated policy.

12. Contact us

SweetWhirl Candy Co.
1428 Alder Street, Suite B, Portland, OR 97205, USA
Email: sweetwhirl.candy@gmail.com
Phone: (503) 555-0147 (Mon–Sat, 9 AM – 6 PM PT)