Privacy Policy

Privacy Policy

Last updated and effective date: May 8, 2025

Introduction

This privacy policy describes how Candy Club Corporation ("Candy Club", "we", "us", or "our") collect, use, disclose, and protect our customers' personal information. It also tells you about the rights and choices you have with respect to your personal information, and how you can reach us regarding any privacy questions or concerns. Please note, our privacy practices are subject to the applicable laws of the states and countries where we do business. This privacy policy contains certain region-specific terms that only apply to customers located in those regions. We reserve the right to make changes and updates to this privacy policy at any time.

Applicability of this Privacy Policy

This privacy policy applies to the personal information submitted to, held by, and/or processed by Candy Club online and offline, including information gained when you visit Candy Club websites, access any sites or services that link to this privacy policy, communicate with us, engage with us on social media; or participate in online or offline programs or events, including Candy Club Subscription membership or our sweepstakes or contests.

Please note that we may provide different or additional privacy notices in connection with certain activities, programs, and offerings.

Our websites may include links to websites and/or applications operated and maintained by third parties. Please note that we do not control the privacy practices of third parties, our third-party partners, or websites or that we do not own.

What Types of Information We Collect or Process

"Personal Information", means information that identifies, relates to, describes, or can be associated with a human person or household. The types of personal information we collect or receive from or about you depends on your interactions with us and our products and services. The following are types of personal information that we may collect or process:

Identifiers including your full name, nicknames, postal address, e-mail address, phone number, date of birth, account name, signature, username, social media handle, or other similar personal identifiers. If you are the winner of a Candy Club sweepstakes or contest, we may also request a form IRS 1099-Misc.
Device Information, including device identifier, internet protocol (IP) address, cookies, beacons, tracking pixels, or other device identifiers.
Internet Activity including browsing or search history and information regarding your interactions with our websites, emails, or advertisements.
Geographic Data including location information, whether provided manually or enabled through your device.
Personal Financial Information including credit card numbers, billing information, and other card details.
Shopping Information including products you have purchased, viewed, or added to cart, order details, and activity related to your Candy Club Subscription membership.
User-provided Content including your communications with us on or offline and any other content you submit or provide (such as social media profiles, photographs, images, videos, voicemails, survey responses, comments, product reviews, and other content).
Conclusions we draw based on any of the information above.
Sensitive Personal Information Candy Club only collects sensitive personal information, as defined by applicable privacy laws, for the purposes allowed by law or with your consent. Candy Club does not collect or process sensitive personal information for the purpose of inferring characteristics about you.
Employment Information. If you apply for a job with Candy Club, we may, in addition to the categories of information above, collect government-issued identifiers including your driver’s license number, passport number or other similar government identifier, citizenship information including immigration status and work authorizations, demographic data including age, gender, race, or ethnicity, educational and employment information including institutions attended, degrees earned, previous places of employment, job titles, tenure, and health or medical information regarding any disabilities, some of which may include characteristics of protected classifications under U.S. state or federal law. Full information about the categories of information collected from our job applicants will be available in the individual job posting. Additionally, if you are placing a wholesale order, we may gather information regarding your employment and the company you represent.

How We Collect Personal Information

We may collect personal information about you from various sources, including:

Directly from You: We collect personal information provided directly to us including when you fill in any form on our website, make a purchase through our website, make a Candy Club account or subscribe to our Candy Club Subscription program, enter a contest or promotion sponsored by us, join a waitlist, RSVP for an event, interact with or post on our social media accounts, respond to a survey, apply for a job, or sign up to receive emails or text messages.

Automatic Data Collection Technologies: As you navigate through and interact with our website, click on emails we send you, or interact with our ads, we may use automatic data collection technologies such as cookies, flash cookies, or web beacons to collect certain information about your equipment, browsing actions, and patterns.

From Third Parties: We obtain information from businesses that we have partnered with, such as partners utilizing drop-ship, Klayvio, Amazon, Paypal, Afterpay, ApplePay, Square and other partners we choose to collaborate or work with.

Social Media Platforms: If you interact with us on social media or use plugins, widgets, or other tools provided by social media platforms or networks (including TikTok, Instagram, Facebook, Twitter, Google, YouTube, and Pinterest), we may collect information that you disclose to us, or that the social media platforms disclose to us. We encourage our users to familiarize themselves with privacy policies of these third party social media platforms.

Other Sources: We may obtain information about you from other sources including third party data analytics companies, marketing or advertising companies, fraud prevention companies, or from public sources.

Cookies and Similar Online Tracking Technologies

We and/or our third-party partners and service providers may use cookies, flash cookies, tracking pixels, web beacons, software developer kits, third-party libraries, or other similar online tracking technologies to collect information about you. These technologies may allow us to collect and store information about your preferences and navigation to, from, and on our website, or to track website traffic.

We may, from time to time enter into agreements with third parties who use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including personal information, order level transaction data, item level transaction data, retail data, mobile application data, and other information relating to purchasing history. Any information provided to us is subject to strict confidentiality requirements of the third party provider and subject to all applicable laws relating to privacy. We use this information to improve our marketing and communications with you.

To the extent these online tracking technologies are deemed to be a “sale” or “sharing” of information you may opt-out of these online tracking technologies by setting your browser to refuse all or some browser cookies, or to alert you when cookies are being sent, or selecting the ‘Do not Track’ setting in the privacy settings of your browser. Please note, some features of our websites may not be available to you as a result. For Google Analytics, you may exercise an opt out by visiting tools.google.com/dlpage/gaoptout or downloading the Google Analytics Opt-out Browser Add-on.

Using Your Personal Information

We may use your personal information for many reasons, including:

Providing Products, Services, and Programs: We use your personal information to provide you with our products and services, for example fulfilling orders; processing payment; sending receipts and order updates; sending notifications regarding your account and purchases; to create, update, change and otherwise manage your account or your Candy Club Subscription membership and to provide participating customers with our Candy Club Subscription program, including account setup and maintenance, tracking deliveries and preferences, and sending you subscription-related messages. The types of information obtained in order to provide you with products or services, including the Candy Club Subscription Program, may include Identifiers, Personal Financial Information, and Shopping Information.

Communications With You: We may use your personal information to communicate with you, for example when sending you marketing emails or SMS text messages, tailoring social media advertisements for products in which you may be interested, corresponding with you regarding your orders, requests, questions, comments, or complaints and to otherwise provide you with customer service, or to communicate with you regarding any Candy Club-administrated sweepstakes or contests you may have entered.

Data Analytics: We use personal information to draw conclusions about you and your product preferences, to analyze your shopping activity, and/or to track your interactions with our marketing emails and advertisements. We may use personal information and conclusions we draw from personal information to improve our website, ads, emails, and marketing. We may also use this information to personalize your interactions with us, for example by tailoring our ads to your interests, recommending you products, and/or pre-populating your information at checkout.

Website Security and Fraud Detection: We may use personal information to detect any malware, deception, fraud, or illegal activity on our website including attempted fraudulent transactions, violations of our Terms of Service, attempted security breaches, and to otherwise provide a safe and secure online experience for our users.

Managing our Business: We may use personal information that is necessary for us to run our business, including keeping records relating to finance, contracts, online and in-person transactions, products sold, and customer service.

Legal Obligations: We may use personal information to comply with our legal obligations to you or others, to provide evidence or establish defenses to any claims against us, or to otherwise exercise our legal rights.

Sharing Your Personal Information

We may share personal information in the following manners and with the following persons or entities:

Third-Party Service Providers: We may share personal information with certain third-party service providers who help us provide our products and services, for example companies we partner with in order to process your payments online or in-store, to pick up, ship and deliver orders, to facilitate e-mails and SMS messages; to send you advertisements, marketing, and offers, and to provide you customer service. We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your personal information, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other third parties who assist us in the delivery of text messages.

Related Corporate Entities: We may disclose personal information with our corporate entities, such as our parent company and our sister companies including Sugarfina Corporation and Sugarfina USA LLC, who may access or use personal information within the same parameters detailed in this Privacy Policy.

Social Media Platforms and Networks: Some of our websites have features such as, plugins, widgets, and/or other tools made available by social media platforms and networks that may result in information being collected or disclosed between us and such parties. Their use of your information is not governed by this privacy policy.

Purchase of the Company: We may disclose personal information to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Candy Club’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Candy Club about our users is among the assets transferred.

Legal Requirement or Rights: In the event that a legal requirement (including but not limited to complying with tax obligations, filing or defending against legal claims or lawsuits, enforcing our Terms of Use or other agreements, complying with a government investigation, complying with a court order, subpoena, or warrant, responding to a possible or confirmed security breach, or otherwise exercising any legal right) obligates us to disclose personal information, we may disclose the same.

Advisors: We may disclose personal information to our financial, legal, insurance, or other advisors in the course of our business operations.

Protecting our Customers and Employees: We may disclose personal information if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Candy Club Corporation, our customers, or others.

Other Purposes: We may also disclose personal information for any other purpose disclosed by us when you provide the information or to fulfill the purpose for which you provide it.

Safeguarding Your Personal Information

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Any payment transactions will be encrypted using SSL technology.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our website, you are responsible for keeping this password confidential.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the website. If you believe your information has been compromised by use of our site, please contact us at CandyClub@Sugarfina.com .

Choices and Rights about how we Use and Disclose your Information

We strive to provide you with choices regarding the personal information you provide to us. These choices and your rights may very depending on the applicable laws where you live. We have created mechanisms to provide you with the following control over your information:

Opting out of Tracking Technologies and Advertising: We use certain tracking technologies, including cookies, to help keep track of items you put into your shopping cart, including when you have abandoned your cart. We may use information collected via cookies to send you SMS or email messages regarding items left in your cart. Our use of these tracking technologies may amount to “sale” / “sharing” of some of your personal information under certain privacy laws. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent, or select the ‘Do not Track’ setting in the privacy settings of your browser. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe's website. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly. If you have trouble controlling or disabling cookies, please contact us at CandyClub@Sugarfina.com .

Your Right to Know, Correct, and Delete Personal Information: Pursuant to applicable laws where you live, you may have rights to know what information we have collected about you within a certain period of time, the right to correct information we have collected about you, the right to know how we have processed or disclosed the information we have collected about you, the right to refuse our collection, processing, or disclosure of your information, and/or the right to request the deletion of certain of that information.

Requests to Know or Delete: To make a request to know what information we have collected about you, how we have processed it, or to request deletion as described above, please contact us CandyClub@Sugarfina.com.

We will respond to your request consistent with applicable law.

We will process deletion requests in accordance with applicable law. Please note that we are not obligated to make a data access disclosure or process a data deletion request if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.

Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification. We will respond to your request in accordance with timeframes prescribed by applicable law. Please note that we may retain and refuse to delete information that the law entitles us to retain, including where there is a transactional need to retain the information, when it is necessary to retain for risk management, to improve functionality, to facilitate a business relationship with the consumer, where we have an existing legal obligation, or for other lawful internal purposes. Please note that depending on applicable laws where you live, you may be entitled to appeal our response to your request to know, correct, or delete, and you also have the right to be free from unlawful discrimination when exercising your rights under our Privacy Policy.

Promotional Offers from Candy Club: If you do not wish to have your email address used by the Candy Club to promote our own or third parties' products or services, you can opt out by following the instructions for 'unsubscribing' in any marketing communication, or at any other time by sending us an email stating your request to CandyClub@Sugarfina.com . Please note, however, that unsubscribing from marketing materials may also disqualify you from participating in the Candy Club Subscription program.

Targeted Advertising: If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers' target-audience preferences, you can opt out by following the instructions for 'unsubscribing' in any marketing communication or at any other time by sending us an email stating your request to CandyClub@Sugarfina.com

SMS Messages: You can opt-out of receiving text messages from us by replying “STOP” to the SMS text message.

International Transmission of Information

Because Candy Club operates in both USA and Canada, information which we receive about Canadian customers may be transmitted to and processed by our USA entity. Since privacy laws differ in USA, your information may be processed in accordance with those laws. By using our website, you consent to international processing and transmission of your personal information in the manner described.

Children under the Age of 14

Our website is not intended for children under 14 years of age. No one under age 14 may provide any information to or on the website. We do not knowingly collect personal information from children under 14. If you are under 14, do not use or provide any information on this website or on or through any of its features. If we learn we have collected or received personal information from a child under 14 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 14, please contact us at CandyClub@Sugarfina.com .

Privacy Contact

To ask questions or comment about this privacy policy and our privacy practices, contact us at: CandyClub@Sugarfina.com

Candy Club Corporation

Attention: Legal Counsel

RE: Privacy

5275 W Diablo Dr. Suite A1-101,

Las Vegas, NV 89118

Changes To Our Privacy Policy

We reserve the right to make changes to this privacy policy at any time. Any changes we make will be posted on this page. If we make material changes to this policy or to how we treat our users' personal information, we will provide you with additional notice (for example by sending an email to the email address specified in your account). The date the privacy policy was last revised appears at the top of the page. We encourage you to view this privacy policy regularly in order to understand our privacy practices and your rights and choices regarding your information.

California Privacy Rights

If you are a California resident, California law requires us to disclose to you the following additional information and grants you addition rights described below:

If you are a California resident, you may request that we:

Disclose to you the following information covering the 12 months preceding your request:

The categories of personal information we collected about you and the categories of sources from which we collected such personal information:
The specific pieces of personal information we collected about you;
The business or commercial purpose for collecting personal information about you; and
The categories of personal information about you that we otherwise shared or disclosed and the categories of third parties with whom we shared or to whom we disclosed such personal information.

Correct your personal information.

Delete your personal information.

Opt our of the "sale" or "sharing" of your personal information

California Shine the Light: Customers who are residents of California may request information concerning the categories of personal information (if any) we disclose to third parties or affiliates for their direct marketing purposes free of charge once per calendar year.

Types of Personal Information Collected

We collect the following categories of personal information:

Identifiers, such as name, contact information, and online identifiers;

Personal information, as defined in the California customer records law, such as name, contact information, and financial information;

Characteristics of protected classifications under California or federal law, such as age and gender;

Commercial information, such as transaction information and purchase history;

Internet or network activity information, such as browsing history and interactions with our website;

Geolocation data, such as IP location;

Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics; and

Sensitive personal information such as username and password, payment card number, date and code, and geolocation information.

Types of Personal Information Disclosed

We disclose the following personal information to third parties, such as our service providers and affiliates, for our operational business purposes:

Identifiers, such as name, contact information, and online identifiers;

Personal information, as defined in the California customer records law, such as name, contact information, and financial information;

Characteristics of protected classifications under California or federal law, such as age and gender;

Commercial information, such as transaction information and purchase history;

Internet or network activity information, such as browsing history and interactions with our website;

Geolocation data, such as IP location; and

Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics; and

Sensitive personal information such as username, payment card number, expiration date and code, and geolocation information.

Depending on a California resident’s particular interactions and relationship with us, we may not have disclosed each of the above categories of personal information about each resident.

We collect the above personal information directly from California residents themselves, as well as from other sources, such as our business partners and other retailers. We use this personal information to operate, manage, and maintain our business, to provide our products and services, and to otherwise accomplish our business purposes and objectives.

Please see the “Applicability of this Privacy Policy”, “What Types of Information we Collect”, “How We Collect Personal Information”, “Using Your Personal Information” and “Sharing Your Personal Information” sections of this privacy policy for more information on how we collect, use, or disclose California residents’ information and for your rights regarding your information.

Notice of Financial Incentives and Bona Fide Loyalty Program

We provide discounts, coupons, and other benefits to customers who sign up to receive our marketing emails or text messages. These offerings may constitute “financial incentives”. We also offer our Candy Club Subscription members a loyalty program that provides incentives such as rewards, early access, event invitations, and exclusive offers. We also offer sweepstakes, giveaways and contests which may be entered by all eligible participants. Membership in our rewards program or entrance in one of our sweepstakes or contests usually requires the provision of personal information including but not limited to your name, birthdate, and/or other contact information. Offering perks or prizes in exchange for your personal information may constitute a “financial incentive” program under California law or a “bona fide loyalty program” under Colorado law. The value of personal information to us is depends on what offerings you take advantage of, what prizes you may qualify for, and whether you opt-out of any offerings.

You may request that we delete your Candy Club Subscription account or otherwise delete your information any time by submitting a request CandyClub@Sugarfina.com .