Privacy Policy

1. Controller

The controller in the sense of data protection laws, particularly the EU General Data Protection Regulation (GDPR), is:

Blue Candle LLC6407 Magnolia St Ste 203Milton, FL 32570

2. Collection and Storage of Personal Data, Type and Purpose of Use

We only process personal data to the extent necessary to provide a functional website and to fulfill our contractual and legal obligations.

The processed data includes in particular:

Master data (e.g., name, address)
Contact data (e.g., email, phone number)
Contract and payment data (e.g., ordered products, delivery address, transaction information)
Usage and communication data (e.g., IP address, browser type, access times)

Purposes of processing:

Processing of orders and payments
Shipping and returns processing
Customer service and communication
Website security and functionality
Marketing, analysis, and statistical purposes (only with consent)

3. Legal Basis for Processing

We process personal data on the following legal bases:

Art. 6 para. 1 lit. a GDPR – Consent (e.g., newsletter, cookies)
Art. 6 para. 1 lit. b GDPR – Fulfillment of contract or pre-contractual measures
Art. 6 para. 1 lit. c GDPR – Legal obligations (e.g., tax retention)
Art. 6 para. 1 lit. f GDPR – Legitimate interest (e.g., IT security, reach measurement)

4. Data Collection When Visiting the Website

When you access our website, the following data is automatically processed:

IP address
Date and time of access
Time zone difference to GMT
Content of the requested page
Access status / HTTP status code
Amount of data transferred
Website from which the request originated
Browser type, operating system, language, and version

This information is stored in server log files for a maximum of 14 days and serves the stability and security of the website (Art. 6 para. 1 lit. f GDPR).

5. Cookies and Consent Management

We use cookies to provide basic website functions and – only with your consent – to set marketing and analysis cookies.
Legal basis: Section 25 TTDSG in conjunction with Art. 6 para. 1 lit. a or f GDPR.

Consent management is handled via a Consent Management Tool (e.g., Cookiebot).
You can withdraw your consent at any time via the Cookie Settings on our website.

6. Order and Contract Processing

To process orders, we process:

First and last name
Billing and shipping address
Email address and, if applicable, phone number
Payment data

Legal basis: Art. 6 para. 1 lit. b GDPR
For shipping, the necessary data is passed on to our logistics and shipping service providers.

7. Payment Processing

For payment processing, we use:

Shopify Payments / Stripe Payments Europe Ltd. (Ireland)
Mollie B.V. (Netherlands)
PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg)
Klarna Bank AB (publ) (Sweden)
possibly other services indicated at checkout

Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (fulfillment of contract).
The payment service providers are each independent controllers within the meaning of Art. 4 No. 7 GDPR.

8. Shipping Service Providers

For the shipment of goods, address and contact data are transmitted to the shipping companies commissioned by us.
Legal basis: Art. 6 para. 1 lit. b GDPR

9. Newsletter

With your consent (Art. 6 para. 1 lit. a GDPR), we use your email address to send you our newsletter.
The newsletter is sent via Klaviyo Inc. (USA).

You can withdraw your consent at any time via the unsubscribe link in the newsletter or by email to info@getfeel1.com.

10. Web Analytics and Marketing Tools

With your consent (Art. 6 para. 1 lit. a GDPR), we use, among others, the following services:

Google Analytics & Google Tag Manager (Google Ireland Ltd.)
Meta Pixel & Meta Ads (Meta Platforms Ireland Ltd.)
possibly Outbrain, Criteo, Klar Insights

These tools help us understand user behavior and optimize advertising.
Data may be transferred to third countries (especially the USA).
Insofar as there is no adequacy decision, we use Standard Contractual Clauses (Art. 46 GDPR).

11. Hosting and Security

Our website is operated via Shopify International Ltd. (Ireland) and uses, among other things, security services and CDN functions from Cloudflare Inc. (USA).
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure operation).

12. Automation and Data Integration

For process automation, Zapier Inc. (USA) may be used.
Legal basis: Art. 6 para. 1 lit. f GDPR (efficient business processes).
Data transfer is carried out using Standard Contractual Clauses (Art. 46 GDPR).

13. Duration of Storage

Personal data is stored only for as long as necessary for the respective purpose or as required by law.
After these periods expire, data is deleted or blocked.

14. Rights of Data Subjects

You have the right:

to information about your stored data (Art. 15 GDPR)
to rectification of incorrect data (Art. 16 GDPR)
to erasure (Art. 17 GDPR), provided there are no legal obligations to the contrary
to restriction of processing (Art. 18 GDPR)
to data portability (Art. 20 GDPR)
to object to processing (Art. 21 GDPR)
to withdraw granted consent (Art. 7 para. 3 GDPR)

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

15. No Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

16. Data Security

We protect your data through technical and organizational security measures (e.g., SSL encryption) to prevent loss, misuse, or unauthorized access.

17. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy to new legal requirements or changes to our services.
The current version is always available at www.getfeel1.com.

18. Contact

For questions regarding payment or your order, please visit our contact page:
👉 https://getfeel1.com/pages/kontakt