Privacy Policy

Swedish Candy Culture ("we", "us") operates the Drops experience at drop.swedishcandyculture.com and the main Shopify store at swedishcandyculture.com. For privacy questions, reply to any confirmation email you have received from us, or contact us through the main store.

• Name you provide when reserving a pick.
• Email address for reservations, confirmations, and (with consent) VIP notifications.
• Phone number you provide for pickup coordination.
• Reservation and Shopify order references used to match your reservation to your payment.
• Basic security signals such as IP address and request metadata used to rate-limit and prevent abuse.
• Device, log, and analytics information if analytics is enabled on this site.
• VIP list email address when you opt in through a signup form.

Payment information (card details, billing address) is entered on Shopify's checkout and is handled directly by Shopify. We do not receive or store your full payment card details.

• To reserve picks and hold them for you during the reservation window.
• To process, confirm, and reconcile Shopify orders.
• To send pickup instructions and coordinate handoff.
• To prevent fraud, abuse, and per-customer limit bypass.
• To send VIP notifications about future Drops when you have opted in.

• Shopify — checkout, payment processing, and order storage.
• Lovable Cloud (built on Supabase infrastructure) — hosting, authentication, database, and server functions.
• Email delivery provider — transactional emails such as reservation and pickup notifications.
• Cloudflare Turnstile, when enabled — bot protection on forms.
• AI provider — used only for admin-generated marketing copy from non-personal prompts. Customer information is not sent to the AI provider.

We use browser local storage to remember an in-progress reservation so you can return to your checkout link, and to keep your admin session signed in. We do not sell your information and we do not run advertising cookies. Analytics cookies are used only if analytics is enabled on this site.

Reservation and order records are kept for as long as we need them to support the sale, reconcile payments, respond to customer questions, and meet tax and accounting requirements. Security and rate-limit logs are kept only as long as needed to identify and respond to abuse. VIP list emails are kept until you unsubscribe or ask us to remove you.

We use industry-standard measures — encrypted connections, access controls, and least-privilege server-side logic — to help protect your information. No online service can guarantee absolute security. If you believe your information has been compromised, contact us as soon as possible.

To ask what information we hold about you, to request a copy or correction, to request deletion where applicable, or to unsubscribe from VIP notifications, reply to any email from us or contact us through the main store. We will confirm your identity before acting on requests that involve personal information.

Texas residents have privacy rights under the Texas Data Privacy and Security Act, which may include the right to access personal data we hold about you, to request correction of inaccurate information, to request deletion, to opt out of certain uses of personal data, and to appeal a decision about your request. To exercise these rights, contact us as described above. If we deny a request you may appeal that decision by replying to our response; we will review your appeal within the timeframe required by applicable law.

The Drops experience is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be highlighted on the site.