Privacy Policy

Last updated: 30 August 2026

The Yum Candy, based in Santarém, Portugal, is responsible for the personal information described in this policy. Contact: [email protected].

1. Information we collect

Depending on how you use the website, we may process your name, billing and delivery details, email address, telephone number, account information, order history, customer-service messages, reviews, photographs you submit, device and browser information, IP address, cookie identifiers, website activity, fraud-prevention information, and payment confirmation or transaction references. Payment-card details are processed by payment providers and are not intended to be stored directly by us.

2. Why we use it

We use personal information to operate the store; process payments and orders; deliver purchases; provide customer support; manage accounts, returns and disputes; prevent fraud and protect the website; meet accounting, tax and legal duties; improve products and website performance; measure advertising; and send marketing where consent or another lawful basis permits it.

3. Legal bases

Where European data-protection law applies, processing may be based on performance of a contract, compliance with legal obligations, legitimate interests such as security and service improvement, or consent. You may withdraw consent at any time, without affecting earlier lawful processing.

4. Service providers

We share only the information reasonably required with service providers that help operate the store, including ecommerce hosting, payment processing, fraud prevention, delivery, email, customer support, analytics, advertising, IT and professional advisers. We may also disclose information where required by law or to protect legal rights. We do not publish customer information or sell it as a customer list.

5. Analytics, advertising and cookies

Subject to your cookie choices and applicable law, we may use analytics and advertising technologies, including services supplied by Google and Meta, to understand website use, measure campaigns and improve relevant advertising. These providers may receive device, browser, cookie and interaction information under their own privacy terms. You can manage non-essential cookies through the cookie controls available on the website and through your browser settings.

6. International transfers

Some service providers may process information outside Portugal or the European Economic Area. Where required, recognised safeguards such as adequacy decisions or approved contractual protections are used.

7. Retention and security

Information is retained only for as long as reasonably necessary for orders, customer service, fraud prevention, accounting, tax, disputes and legal obligations. We use appropriate organisational and technical safeguards, but no online system can promise absolute security.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability of your personal information, and may withdraw consent. We may need to verify identity before acting. You may also complain to the competent data-protection authority.

9. Children

The website is not directed to children who cannot legally consent to the processing of their information. We do not knowingly collect children’s personal information in that situation.

10. Marketing choices

You can unsubscribe from promotional email using the link in the message. We may still send essential order, account, security and service communications.