Last updated: May 21, 2026
Privacy Policy
Pending owner/attorney review. This Privacy Policy page is review-stage copy and should be replaced or approved before it is treated as final policy language.
Pending owner/attorney legal review
This page contains review-stage policy copy. It is not final legal, warranty, guarantee, privacy, or SMS policy language until the owner and attorney approve it.
Owner/attorney review must confirm what data Candys collects, how it is used, how long it is kept, and how customers can make privacy requests.
Information we collect
Candys collects the information a visitor chooses to send through the website, estimator, contact forms, quote requests, phone links, and optional upload tools.
- Contact details such as name, phone number, email, city, ZIP code, project address details when provided, and language preference.
- Project details such as material choice, measurements, layout, access, demolition, backsplash, sink, cooktop, faucet, notes, price range, and quote status.
- Optional project photos when a customer chooses to upload them.
- SMS opt-in choice, consent context, and message records when SMS is configured and used.
- Basic website and security information such as page views, referrer, UTM/source details, browser data, IP-derived security signals, and rate-limit logs.
Sensitive information
Candys does not ask customers to send Social Security numbers, payment card numbers, government IDs, medical records, tax records, passwords, or unrelated private family information through the website, photo upload, email, or SMS. If a customer sends that kind of information by mistake, Candys may delete it or ask the customer to use a safer process.
How we use information
Candys uses this information to respond to requests, review project fit, prepare planning ranges, schedule owner review, prepare formal quotes, provide customer support, operate the admin dashboard, protect the site, and improve the customer experience.
Calls, email, and text messages
Candys may call or email using the contact information a customer provides. Text messages are optional and are sent only when SMS service is configured, the customer opts in, and the message relates to the submitted project. Message frequency varies, message and data rates may apply, and a customer can reply STOP or clearly ask us to stop texting to opt out, or reply HELP for help.
Mobile number and SMS consent
Candys does not sell mobile numbers or SMS opt-in information. Mobile information and text messaging consent are not shared with third parties or affiliates for marketing or promotional purposes.
Service providers
Candys may use trusted providers for website hosting, database and private storage, email delivery, SMS delivery, analytics, security, and business operations. These providers are used to operate the service, not to let them market unrelated services to customers.
Security and limits
Candys uses reasonable small-business safeguards such as private storage, access limits, validation, and provider controls. No website, email, SMS, or storage system can be guaranteed perfectly secure, so customers should avoid sending sensitive records through public forms or text messages.
Project photos
Review-stage copy. Project photos are optional and are used for owner review, project support, estimating, pricing, and quote preparation. Uploaded photos may be processed by automated tools and trusted third-party services, including AI-assisted analysis, only to help evaluate or price the submitted project. Identifying metadata is stripped before storage or analysis, and customer contact details are not attached to photo-analysis requests. Uploading a photo does not give Candys permission to publish it in the gallery, advertising, social media, or before-and-after proof. Public use requires separate customer and owner approval.
How long we keep information
Candys keeps lead, quote, communication, consent, and project records for as long as needed to respond to the customer, operate the business, keep security records, handle project history, or meet legal and accounting needs. Optional project photos follow the owner-approved upload retention policy.
Customer choices
Customers can ask Candys to update contact details, answer privacy questions, review a deletion request, or stop optional text messages. Some records may need to be kept when they are required for security, business records, legal obligations, or an active project.
Children
The website is for countertop project inquiries from adults, homeowners, property managers, contractors, and business contacts. It is not intended for children.
Policy updates
Candys may update this policy as providers, business processes, or legal requirements change. The last-updated date shows when this page was most recently revised.
Owner/attorney review must confirm what data Candys collects, how it is used, how long it is kept, and how customers can make privacy requests.