Shopping Cart
Last updated: November 2026
At Candy Dukes , we attach great importance to the protection of your personal data. This page explains what data we collect, why, how long we keep it, and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Who is responsible for your data?
The data controller is CLIC PHARMA SARL, which publishes the website candydukes.com. Its full contact details are available in our legal notice . For any questions regarding your data, please contact us via our contact form or at contact@candydukes.com.
What data do we collect?
- When placing an order : name, surname, delivery and billing address, email, telephone, order contents.
- When creating an account : the same information, your password (encrypted), your order history, your loyalty points and your Wishlist.
- When subscribing to the newsletter : your email address.
- When you contact us : your email address and the content of your message.
- When you post a review or request a back-in-stock alert: your first name, your email and your review.
- During your browsing : technical data (pages viewed, device, browser), only if you accept it via our cookie banner.
We never collect or store your bank details: payments are processed directly by our secure payment providers.
Why do we use your data?
- Processing and delivering your orders , managing customer service, returns and complaints (contract execution).
- Manage your account and loyalty program (contract execution).
- Comply with our legal obligations , including accounting and tax obligations (legal obligation).
- To send you the Duke's Letter , our newsletter, and our offers (with your consent).
- We invite you to give your opinion on your order (our legitimate interest in improving our services).
- To measure the site's audience and the effectiveness of our advertisements (your consent, collected via the cookie banner).
- Preventing fraud and securing the site (our legitimate interest).
Who can access your data?
Your data is intended for Candy Dukes . It is never sold. We only share it with service providers necessary for the operation of the site, and only with those providers:
- Website hosting : OVH (France).
- Payment : PayPlug and PayPal.
- Delivery : our carriers, including Mondial Relay, receive your name, address, email and phone number to deliver your package.
- Sending emails and newsletters : our email sending provider.
- Customer reviews : Trustpilot, which may invite you by email to rate your order.
- Audience measurement and advertising : Google (Google Analytics) and Meta (Facebook, Instagram), only if you have accepted it.
Some of these service providers (Google, Meta, PayPal) may transfer data outside the European Union. These transfers are governed by the safeguards provided by the GDPR, such as the EU-US data protection framework or the European Commission's standard contractual clauses.
How long do we keep your data?
- Order data and invoices : 10 years, duration imposed by accounting law.
- Customer account : until its deletion, then 3 years after your last activity.
- Newsletter : until you unsubscribe, or 3 years without opening or clicking on it from you.
- Messages sent via the contact form : 3 years after our last exchange.
- Cookies : Maximum 13 months. Your choice on the cookie banner is saved for 6 months.
What are your rights?
You have the right to access, rectify, erase, restrict, and object to the processing of your data at any time, as well as the right to data portability. You can also withdraw your consent at any time and define instructions regarding the fate of your data after your death.
- Newsletter : each email contains an unsubscribe link.
- Cookies : You can change your choices at any time by clicking on Manage my cookies .
- Customer account : you can view and modify your information from your customer area.
To exercise your other rights, contact us via our contact form or at contact@candydukes.com. We will respond within one month. If, after contacting us, you believe your rights have not been respected, you can file a complaint with the CNIL ( www.cnil.fr ).
Security
The site is fully secure (HTTPS connection). Passwords are encrypted, and access to data is restricted to only those individuals who need it to process your orders.
Cookies
To learn everything about the cookies placed on the site and how to manage them, please consult our cookie policy .