Privacy Policy
Who we are
Candy Box operates the website: https://candy-box.co.uk.
What Personal Data We Collect and Why
Comments
When visitors leave comments, we collect the data provided in the comments form, along with the visitor’s IP address and browser details for spam detection. After comment approval, the profile picture linked to your Gravatar account (if used) is visible.
Media
If you upload images, avoid including embedded location data (EXIF GPS). Visitors can download and extract location data from images on the site.
Contact Forms
Data submitted via contact forms is used solely for customer service and is not shared with third parties.
Cookies
- Comments: If you leave a comment, cookies can save your name, email, and website for convenience, lasting one year.
- Login: Temporary cookies are set to check if your browser accepts cookies. Login cookies last two days, and display preferences last a year. Selecting “Remember Me” extends login cookies for two weeks.
- Editing/Publishing: An additional cookie is stored after you publish or edit an article, expiring after one day.
Compliance with Anti-Spam Regulations
We comply with all applicable anti-spam regulations. If you receive marketing emails from us, you can opt-out at any time by clicking the “unsubscribe” link at the footer of the email. For SMS marketing, simply reply with “STOP” to opt-out of future messages.
Embedded Content from Other Websites
Embedded content (e.g., videos or articles) from other sites behaves as if you visited the external site, meaning those sites may collect data or use cookies.
Analytics and Data Sharing
We do not share any personal data with third parties except for authorisation data with Facebook for social login, per the terms agreed with Facebook.
How Long We Retain Your Data
- Comments: Retained indefinitely for easy follow-up.
- Registered Users: Personal information is stored in the user profile, which can be viewed, edited, or deleted by users. Website administrators can also access and manage this information.
Your Data Rights
If you have an account or left comments, you may request an exported file of your data. You can also request deletion of personal data, except for data retained for legal or security purposes.
Where We Send Your Data
Visitor comments may be reviewed by an automated spam detection service.