Privacy Policy — Country Crackle Candle

Last updated: September 14, 2026

This Privacy Policy describes how Country Crackle Candle, LLC ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit, interact with, or make a purchase from countrycrackle.com (the "Site").

We're a small, family-run candle company in South Tamworth, New Hampshire. We collect only what we need to run the shop, ship your order, and stay in touch with the people who want to hear from us. This page explains all of it in plain language.

---

1. Personal Information We Collect

Information You Give Us

Order Information. When you make or attempt to make a purchase, we collect your name, billing address, shipping address, email address, phone number, and payment information. Payment card details are processed directly by our payment processor — we never see or store your full card number.

Account Information. If you create an account, we store your login credentials, saved addresses, and order history.

Marketing Information. If you join our email list, Insiders Club, or enter a giveaway, we collect your email address and, where you provide it, your name and phone number.

Review Content. If you leave a product review, we collect your name, email address, review text, star rating, and any photos or videos you choose to upload. See Section 5.

Correspondence. When you email us, message us on social media, or contact support, we keep a record of that correspondence along with your contact details.

Information Collected Automatically

When you visit the Site, we automatically collect information about your device and browsing activity, which we call "Device Information." This includes your IP address, browser type and version, operating system, device identifiers, time zone, referring and exit pages, pages and products viewed, time spent on pages, and date/time stamps.

We collect Device Information using:

• Cookies — small data files placed on your device, often including an anonymous unique identifier
• Log files — automatic server records of actions taken on the Site
• Web beacons, tags, and pixels — electronic files that record how you browse the Site and interact with our emails, including the Meta (Facebook/Instagram) Pixel and the Omnisend on-site tracking script (see Sections 4 and 6)
• Analytics tools — including Google Analytics, which uses cookies to measure how visitors find and use the Site (see Section 6)

When we refer to "Personal Information" in this Policy, we mean both Device Information and the information you give us directly.

Information We Do Not Collect

We do not knowingly collect Social Security numbers, government ID numbers, precise geolocation, biometric data, or information about your health, religion, race, or sexual orientation. We do not ask for it and we have no use for it.

---

2. How We Use Your Personal Information

We use your Personal Information to:

• Fulfill your order — process payment, arrange shipping, send confirmations and tracking, and handle returns, refunds, and exchanges
• Communicate with you — answer questions, provide support, and send service messages about your order
• Send marketing — share new scents, collection launches, seasonal offers, and subscriber-only sales, where you've opted in (Section 4)
• Request and publish reviews — invite you to review a product you purchased and display that review on our Site (Section 5)
• Screen for fraud and protect our business — verify orders, detect suspicious activity, and maintain records needed to investigate and respond to payment disputes, chargebacks, and claims of non-delivery. This includes retaining IP addresses, device information, address and security-code verification results, and carrier delivery confirmation associated with an order.
• Improve the Site — understand how customers browse, measure which products and pages perform, and evaluate our marketing
• Advertise — show you relevant ads and reach new customers who resemble our existing ones (Section 6)
• Comply with law — meet tax, accounting, and recordkeeping obligations and respond to lawful requests

Our legal basis (where applicable). Where required, we rely on: performance of a contract (order fulfillment), your consent (marketing and non-essential cookies), our legitimate interests (fraud prevention, Site improvement, and business protection), and legal obligation (tax and recordkeeping).

---

3. Payment Processing

Payments are processed by Shopify Payments, PayPal, Shop Pay, Apple Pay, and Google Pay, depending on the method you choose at checkout. These providers receive the payment and billing information necessary to complete your transaction and handle it under their own privacy policies. We receive confirmation of payment, the last four digits and card type, and the results of address (AVS) and security code (CVV) verification — we do not receive or retain your full card number.

Shopify adheres to the PCI-DSS standards set by the PCI Security Standards Council for the handling of payment card data.

---

4. Email and SMS Marketing — Omnisend

We use Omnisend as our email marketing and automation platform. If you join our email list, create an account, or make a purchase, we may send you marketing communications about new products, collections, seasonal offers, and other updates.

To do this, we share with Omnisend your name, email address, phone number (where provided), purchase history, and on-site browsing activity. Omnisend also places a tracking script on our Site and tracking pixels in our emails, which allow us to see which pages and products you viewed, whether you opened an email, and which links you clicked. We use this to send more relevant messages — for example, a reminder about a cart you left behind or a scent you were looking at.

Your choices:

• Click "unsubscribe" in the footer of any marketing email. This takes effect immediately and applies to all marketing email.
• Email us at support@countrycrackle.com and we'll remove you ourselves.
• You will continue to receive transactional messages — order confirmations, shipping notifications, and replies to your support requests — because these relate to a purchase you made. These are not marketing and cannot be unsubscribed from separately.

Text messages. We collect a phone number at checkout so we can reach you about your order if there's a problem with delivery. 

We will only text people who have affirmatively opted in — by checking a box or completing a sign-up form that clearly says you're agreeing to receive marketing texts. Providing your phone number at checkout is not an opt-in and will never be treated as one. If you do opt in, message and data rates may apply, message frequency varies, you can reply STOP at any time to unsubscribe or HELP for assistance, and opting out of texts will not affect your email preferences or your ability to order from us.

Omnisend processes this information on our behalf as our service provider. You can read Omnisend's privacy practices at omnisend.com/privacy.

---

5. Product Reviews — Judge.me

We use Judge.me to collect, verify, and display customer reviews on our Site.

Review requests. After your order is delivered, we may send you an email through Judge.me inviting you to review what you bought. To do this, we share your name, email address, and the contents of your order with Judge.me. Every review request email includes an unsubscribe link, and opting out of review requests does not affect your other email preferences.

What becomes public. If you submit a review, the following is published on our Site and may be displayed publicly:

• Your review text and star rating
• The name you provide (we display first name and last initial where possible)
• Any photos or videos you upload
• A "Verified Buyer" badge, if Judge.me is able to match your review to a completed order

Please don't include anything in a review you wouldn't want public. Do not include your email address, phone number, home address, order number, or any other personal detail in review text or photos.

Use of your review. By submitting a review, photo, or video, you grant Country Crackle Candle a non-exclusive, royalty-free, worldwide license to display, reproduce, and use that content in connection with our business — including on our Site, in email, in social media posts, and in advertising — with attribution limited to the display name you provided. You can withdraw this by asking us to remove your review.

Editing or removing a review. Email support@countrycrackle.com with your order number and we will edit or remove your review. We do not delete or hide reviews simply because they are critical of a product; we remove content that is abusive, off-topic, contains personal information, or is not from a genuine customer.

Judge.me processes review data as our service provider. You can read their privacy practices at judge.me/privacy.

---

6. Cookies, Advertising, and the Meta Pixel

Types of Cookies We Use

Managing Your Cookie Preferences

Where the law requires us to ask for your consent before setting non-essential cookies — including in the European Union, the United Kingdom, and certain other regions — a cookie preference tool appears on your first visit and remains available from the footer of every page. You can accept, reject, or adjust categories at any time using that tool.

Visitors in the United States will not see this banner, because U.S. privacy law takes an opt-out rather than an opt-in approach to advertising cookies. If you're in the U.S., you can still control this: use the opt-out links under "Your Advertising Choices" below, transmit a Global Privacy Control signal (Section 11), or block cookies in your browser settings.

Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies will break checkout.

Google Analytics

We use Google Analytics, a service provided by Google LLC, to understand how visitors find and use our Site — which pages and products get viewed, how people move through the store, where they leave, and which marketing efforts bring people in. Google Analytics sets cookies and collects Device Information including your IP address, browser and device type, pages viewed, and time spent on the Site.

Google processes this information on our behalf and may also use it for its own purposes in accordance with Google's privacy policy at policies.google.com/privacy.

To opt out, install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout, or decline analytics cookies using the cookie preference tool where it is shown to you.

The Meta Pixel

We use the Meta Pixel, a tool provided by Meta Platforms, Inc. (which owns Facebook and Instagram). It allows us to:

• Understand how visitors interact with our Site after viewing or clicking one of our Facebook or Instagram ads
• Show you ads for Country Crackle products based on pages or products you viewed on our Site (retargeting)
• Build audiences of people who share characteristics with our existing customers (lookalike audiences), which may involve sharing a hashed, non-readable version of your email address with Meta

Meta may combine information it collects from our Site with information it has collected about you elsewhere, in accordance with Meta's own privacy policy at facebook.com/privacy/policy. We do not control how Meta uses this information beyond the purposes described above.

Your Advertising Choices

• Manage your ad preferences in your Facebook or Instagram account settings (Settings → Ads)
• Opt out of interest-based advertising broadly through the Digital Advertising Alliance at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org
• Block cookies through your browser settings, or adjust categories in our cookie preference tool where it is shown to you
• Use a browser or extension that transmits a Global Privacy Control signal (see Section 11)

A note for residents of California and certain other states: the use of advertising pixels to share information with third parties may be considered a "sale" or "sharing" of personal information under state privacy law. See Section 11 for your rights and how to opt out.

---

7. How We Share Your Personal Information

We do not sell your personal information for money, and we do not share your email address or contact details with other brands, list brokers, or unrelated third parties.

We do share information with the service providers who help us run the business. Each one receives only what it needs, and each is contractually required to handle it on our behalf:

We may also disclose Personal Information:

• To comply with applicable law, a subpoena, search warrant, or other lawful request
• To investigate, prevent, or take action regarding fraud, payment disputes, or violations of our policies — including providing order records, IP addresses, and delivery evidence to card networks, banks, and payment processors in connection with a chargeback
• To establish, exercise, or defend legal claims
• In connection with a merger, acquisition, or sale of business assets, in which case we'll notify you before your information is transferred and becomes subject to a different privacy policy

---

8. Data Retention

We keep Personal Information only as long as we have a reason to:

If you ask us to delete your information, we will do so — but we may retain what we are legally required to keep (such as transaction records for tax purposes) or what we reasonably need to resolve an open dispute, prevent fraud, or enforce our agreements. We will tell you if that applies to your request.

---

9. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your Personal Information, including encryption in transit (SSL/TLS across the entire Site), PCI-DSS-compliant payment processing, restricted internal access on a need-to-know basis, and vendors selected in part for their own security practices.

No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your Personal Information, we will notify you and the appropriate authorities as required by applicable law.

---

10. Children's Privacy

The Site is intended for adults. We do not knowingly collect personal information from anyone under 16, and we do not direct our marketing to children. If you believe a child has provided us with personal information, please contact us at support@countrycrackle.com and we will delete it promptly.

---

11. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

• Know and access — find out what personal information we hold about you, where we got it, why we have it, and who we've shared it with
• Correct — have inaccurate information fixed
• Delete — ask us to erase your personal information, subject to the legal exceptions in Section 8
• Portability — receive a copy of your information in a portable format
• Opt out of "sale" or "sharing" — direct us to stop sharing your information for targeted advertising purposes (see Section 6)
• Limit use of sensitive information — we don't collect sensitive personal information, so this has no practical effect here
• Non-discrimination — we will not deny you products, charge you a different price, or give you a lesser experience for exercising any of these rights
• Appeal — if we deny your request, you may appeal that decision by replying to our response. We will respond to an appeal within the timeframe your state's law requires, and if we deny the appeal we will tell you how to contact your state attorney general.

How to Exercise Your Rights

Email support@countrycrackle.com with the subject line "Privacy Request" and tell us what you'd like. Please write from the email address associated with your orders, or include enough detail for us to locate your records. We'll verify your identity before acting — usually by confirming order details we already hold — and respond within 45 days, extendable once if the request is complex.

An authorized agent may submit a request on your behalf with written permission signed by you; we may also ask you to confirm the request directly.

Global Privacy Control

We honor the Global Privacy Control (GPC) signal. If your browser or extension transmits a GPC signal, we treat it as a valid request to opt out of the sale and sharing of personal information for that browser. Because this signal is browser-specific, it will not carry across devices or browsers, and it does not by itself opt you out of marketing email.

Do Not Track

Some browsers offer a "Do Not Track" setting. There is currently no industry standard for how sites should respond to it, so we do not alter our practices in response to DNT signals. We do respond to Global Privacy Control signals as described above.

---

12. Notice of Financial Incentive (Insiders Club)

We offer a 10% discount on your first order when you join our Insiders Club email list. Because this gives you something of value in exchange for your personal information, it may be considered a "financial incentive" under California law.

• What we collect: your email address, and your name if you provide it
• What you get: a 10% discount code for your first order, plus early access to new scents and subscriber-only offers
• How to join: sign up through any email capture form on the Site
• How to withdraw: unsubscribe from any email at any time, or email support@countrycrackle.com. Withdrawing does not affect a discount you've already used.
• How we value it: we calculate the value of your information as roughly equal to the value of the discount offered — that is, 10% of a typical first order — based on the expected revenue and margin from an average email subscriber over time. We offer this program in good faith and believe the value of the data is reasonably related to the value of the incentive.

---

13. Visitors Outside the United States

We ship within the United States only, and our Site is operated from the United States. If you visit from elsewhere, your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country. By using the Site, you consent to that transfer.

---

14. Third-Party Links

Our Site may link to other websites, including social media platforms and our carriers' tracking pages. We are not responsible for the privacy practices of those sites. We encourage you to read their policies before providing them with information.

---

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the updated policy on this page with a new "Last updated" date. If we make a material change to how we use your Personal Information, we'll let you know by email or with a notice on the Site.

---

16. Contact Us

Questions, requests, or complaints about privacy — we'd genuinely rather hear from you than have you wonder.

Email: support@countrycrackle.com Mail: Country Crackle Candle, LLC · PO Box 54 · South Tamworth, NH 03883