Privacy Policy

1. Introduction

At Rugged Candle Company, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us.

By using our website, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our website.

2. Information We Collect

Personal Information You Provide

We collect information that you voluntarily provide to us when you:

Create an Account:

• Name
• Email address
• Password (encrypted)
• Phone number (optional)

Place an Order:

• Billing address
• Shipping address
• Payment information (processed securely by Stripe - we do not store full credit card details)
• Order history
• Purchase preferences

Contact Us:

• Name
• Email address
• Phone number
• Message content
• Any information you choose to provide

Subscribe to Newsletter:

• Email address
• Name (optional)
• Communication preferences

Submit a Product Review:

• Name
• Email address
• Review content
• Star rating
• Photos (optional)

Information Automatically Collected

When you visit our website, we automatically collect certain information:

Device & Browser Information:

• IP address
• Browser type and version
• Operating system
• Device type (mobile, tablet, desktop)
• Screen resolution

Usage Data:

• Pages visited
• Time and date of visits
• Time spent on pages
• Referring website
• Click patterns
• Search queries on our site

Cookies & Tracking Technologies:

• Session cookies (essential for site functionality)
• Analytics cookies (Google Analytics, PostHog)
• Marketing cookies (Facebook Pixel, if consent given)
• Preference cookies (to remember your choices)

3. How We Use Your Information

We use the collected information for the following purposes:

Order Processing & Fulfillment

• Process and complete your orders
• Send order confirmations and shipping notifications
• Handle returns and refunds
• Provide customer support

Account Management

• Create and maintain your account
• Authenticate your identity
• Save your preferences and order history
• Enable features like saved addresses and wish lists

Communication

• Send transactional emails (order updates, shipping info)
• Respond to your inquiries and support requests
• Send marketing emails (only if you've opted in)
• Notify you of promotions, new products, and special offers

Website Improvement

• Analyze usage patterns to improve our website
• Conduct A/B testing for better user experience
• Fix bugs and technical issues
• Optimize site performance and speed

Marketing & Analytics

• Understand customer preferences and behavior
• Personalize your shopping experience
• Create targeted advertising campaigns
• Measure effectiveness of marketing efforts

Legal Compliance

• Comply with legal obligations
• Prevent fraud and unauthorized transactions
• Protect our rights and property
• Enforce our Terms of Service

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We only share your information in the following circumstances:

Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

Payment Processing:

• Stripe (for secure payment processing)
• We do not store your full credit card information

Shipping & Fulfillment:

• Shipping carriers (USPS, UPS, FedEx) to deliver your orders
• They receive only the information necessary for delivery

Email Communications:

• Email service providers (for newsletters and transactional emails)
• They only access your email address and communication preferences

Analytics & Marketing:

• Google Analytics (website usage analytics)
• PostHog (product analytics and user behavior)
• Facebook Pixel (advertising, only if you consent)

Cloud Infrastructure:

• Web hosting providers
• Database hosting services
• Content delivery networks (CDN)

Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal requests from government authorities
• Court orders or subpoenas
• Legal processes or investigations
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activity

Business Transfers

If Rugged Candle Company is acquired by or merged with another company, your information may be transferred to the new owners. We will notify you via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

5. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device that help websites remember your preferences and improve functionality.

Types of Cookies We Use

Necessary Cookies (Always Active):

• Essential for website functionality
• Enable shopping cart and checkout
• Remember your login status
• Cannot be disabled

Analytics Cookies (Optional):

• Google Analytics - tracks website usage and performance
• PostHog - product analytics and user behavior
• Help us understand how visitors use our site
• Require your consent via our cookie banner

Marketing Cookies (Optional):

• Facebook Pixel - enables targeted advertising
• Track conversions and ad effectiveness
• Require your consent via our cookie banner

Managing Cookies

You can control cookies through:

• Our cookie consent banner (appears on first visit)
• Your browser settings (block or delete cookies)
• Opting out of Google Analytics: tools.google.com/dlpage/gaoptout

Note: Blocking necessary cookies may affect website functionality.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

Account Information:

• Retained while your account is active
• Deleted within 30 days of account closure request

Order History:

• Retained for 7 years for tax and accounting purposes
• Required by law in some jurisdictions

Marketing Communications:

• Retained until you unsubscribe
• Unsubscribe links provided in every marketing email

Analytics Data:

• Aggregated analytics data retained indefinitely
• Individual user data anonymized after 26 months (Google Analytics default)

Legal Obligations:

• Some data may be retained longer if required by law
• Financial records retained per IRS requirements

7. Your Privacy Rights

Depending on your location, you may have the following rights:

Access & Portability

• Request a copy of your personal data
• Receive your data in a structured, machine-readable format
• Transfer your data to another service provider

Correction & Update

• Update or correct inaccurate information
• Modify your account details at any time
• Contact us to update information we hold

Deletion (Right to be Forgotten)

• Request deletion of your personal data
• We will delete data unless legally required to retain it
• Some data may remain in backups for a limited time

Opt-Out of Marketing

• Unsubscribe from marketing emails (link in every email)
• Opt out of SMS marketing (reply STOP)
• Disable marketing cookies via cookie settings

Object to Processing

• Object to specific uses of your data
• Request we stop processing your data for direct marketing

Restrict Processing

• Request we limit how we use your data
• Useful if you dispute accuracy of data

Withdraw Consent

• Withdraw consent for data processing at any time
• Does not affect lawfulness of prior processing

How to Exercise Your Rights

Email us at: hello@ruggedcandle.com Subject: "Privacy Rights Request"

We will respond within 30 days and may request verification of your identity.

8. Children's Privacy

Our website is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

If you are under 18, please do not:

• Create an account
• Make purchases
• Submit reviews
• Provide any personal information

If we learn we have collected information from a child under 18, we will delete it immediately. Parents or guardians who believe we may have collected information from a child should contact us.

9. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards

• SSL/TLS Encryption - All data transmitted is encrypted
• Secure Payment Processing - PCI DSS compliant via Stripe
• Encrypted Databases - Personal data stored encrypted
• Firewalls - Protect against unauthorized access
• Regular Security Audits - Identify and fix vulnerabilities

Administrative Safeguards

• Access Controls - Limited employee access to personal data
• Background Checks - For employees with data access
• Confidentiality Agreements - All employees sign NDAs
• Security Training - Regular employee training

Physical Safeguards

• Secure Data Centers - Industry-leading cloud providers
• Access Restrictions - Limited physical access to servers
• Backup Systems - Regular backups in secure locations

No System is 100% Secure

While we use reasonable measures to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.

Your Responsibility:

• Use strong, unique passwords
• Do not share your account credentials
• Log out when using shared devices
• Report suspicious activity immediately

10. Third-Party Links

Our website may contain links to third-party websites (social media, partner sites, etc.). We are not responsible for the privacy practices of these sites.

When you click external links:

• You leave our website
• You become subject to the third party's privacy policy
• We recommend reviewing their privacy policies

Third-Party Services We Link To:

• Instagram, Facebook (social media)
• Stripe (payment processing - see their privacy policy)
• Shipping carriers (for tracking)

11. International Data Transfers

Rugged Candle Company is based in the United States. If you access our website from outside the U.S., your information will be transferred to and processed in the United States.

What This Means:

• U.S. privacy laws may differ from your country
• By using our site, you consent to this transfer
• We take steps to ensure adequate protection

For EU/UK Visitors:

• We comply with GDPR requirements
• Standard Contractual Clauses used for transfers
• You retain all rights under GDPR

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know

• What personal information we collect
• Sources of information
• Business purposes for collection
• Third parties we share with

Right to Delete

• Request deletion of your personal information
• Subject to legal exceptions

Right to Opt-Out

• Opt out of sale of personal information
• Note: We do not sell personal information

Right to Non-Discrimination

• Equal service regardless of privacy rights exercised
• No price differences or service denial

How to Exercise CCPA Rights

Email: hello@ruggedcandle.com Subject: "CCPA Rights Request"

We will respond within 45 days (may extend to 90 days with notice).

13. European Privacy Rights (GDPR)

If you are in the European Union or UK, you have rights under GDPR:

Legal Basis for Processing

We process your data based on:

• Contract - To fulfill orders and provide services
• Legitimate Interest - For analytics and business operations
• Consent - For marketing and optional cookies
• Legal Obligation - To comply with laws

Your GDPR Rights

• Access, correction, deletion (as described above)
• Data portability
• Object to processing
• Restrict processing
• Withdraw consent
• Lodge complaint with supervisory authority

Data Protection Officer

For GDPR inquiries: Email: hello@ruggedcandle.com Subject: "GDPR Inquiry"

EU Representative

If required in the future, we will appoint an EU representative and update this policy.

14. Do Not Track Signals

Some browsers have "Do Not Track" (DNT) features. Currently, there is no industry standard for how to respond to DNT signals. Our website does not respond to DNT signals at this time.

You can control tracking through:

• Our cookie consent settings
• Browser cookie settings
• Ad blocker extensions
• Google Analytics opt-out

15. Email Communications

Transactional Emails (Cannot Opt-Out)

• Order confirmations
• Shipping notifications
• Password resets
• Important account updates

Marketing Emails (Can Opt-Out)

• Promotions and special offers
• New product announcements
• Newsletter
• Personalized recommendations

To Unsubscribe:

• Click "Unsubscribe" link in any marketing email
• Email us at hello@ruggedcandle.com
• Log into your account and update preferences

We will process unsubscribe requests within 10 business days.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• Legal or regulatory requirements
• New features or services

How We Notify You

• Update "Last Updated" date at top of page
• For significant changes: email notification to registered users
• For significant changes: prominent website notice

Your Continued Use

Continued use of our website after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

17. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:

Rugged Candle Company Email: hello@ruggedcandle.com Website: ruggedcandle.com

Response Time: We aim to respond to all privacy inquiries within 48 hours (business days).

For Privacy Rights Requests: Please include in your email:

• Your name
• Email address associated with your account
• Specific request (access, deletion, correction, etc.)
• Verification information if needed

18. Your Consent

By using our website, you consent to this Privacy Policy and agree to its terms.

You have the right to:

• Withdraw consent at any time
• Object to data processing
• Request deletion of your data

We will:

• Respect your privacy rights
• Protect your personal information
• Be transparent about our data practices
• Comply with applicable privacy laws

Thank you for trusting Rugged Candle Company with your personal information.