1. Data we may process
When you visit, hosting infrastructure may receive IP address, device and browser information, requested pages, timestamps and security logs. If you email us, we receive your email address, message and any information you choose to include. Do not send passwords, payment details, identity documents or intimate conversation content.
2. Purposes and legal bases
Technical logs may be used to deliver and secure the Website, diagnose errors and prevent abuse on the basis of legitimate interests. Email data is used to answer your request, take pre-contractual steps where relevant, or meet legal obligations. If optional analytics or advertising cookies are introduced, consent will be requested where required before they are set.
3. Cookies and local storage
The current website is designed to work without advertising trackers. Essential hosting or security technologies may still be used. We will update this notice and provide controls before introducing non-essential analytics, personalisation or marketing cookies that require consent.
4. Recipients and international processing
Hosting, email and security suppliers may process limited data on our behalf. Their locations and safeguards depend on the selected production services. Outbound platforms receive data only when you choose to visit them; review their notices before submitting information. We do not receive your external chat history or payment-card details from the platform.
5. Retention and security
We keep personal data only as long as needed for the purposes described, dispute handling, security and legal duties. Retention periods vary by record type. Reasonable technical and organisational measures are used, but no internet service can promise absolute security.
6. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent for future processing. Email privacy@candyainl.nl. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Requests about data held by a linked service must be sent to that service.
7. Children and adult pages
The Website is not directed to children. Pages marked NSFW are restricted to adults aged 18 or over. We do not knowingly invite children to submit personal data.
8. Updates
We will revise this notice when data practices, suppliers or legal requirements change. Material changes will be reflected by a new date at the top of the page. Contact privacy@candyainl.nl with questions about this notice.