<\/p>\n\n\n\n

SECTION 1 \u2013 GENERAL INFORMATION<\/strong><\/strong><\/h3>\n\n\n\n

Who we are<\/strong><\/strong><\/strong><\/h4>\n\n\n\n

The website candygym.fitness is operated by CandyGym FZ-LLC., a private company incorporated under the laws of UAE, <\/p>\n\n\n\n

CandyGym FZ-LLC, Bay Square Building 12, office 305, Business Bay. Dubai. P.O.BOX : 88 777.<\/p>\n\n\n\n

This Privacy Policy explains how we collect and process your personal data when you:<\/strong><\/h5>\n\n\n\n

\n
• browse our website;<\/li>\n\n\n\n
• create an account or place an order;<\/li>\n\n\n\n
• sign up for newsletters or marketing;<\/li>\n\n\n\n
• contact our customer service;<\/li>\n\n\n\n
• submit documentation to verify that you are a qualified researcher.<\/li>\n<\/ul>\n\n\n\n

  All processing is carried out in accordance with the General Data Protection Regulation (EU) 2016\/679 (\u201cGDPR\u201d) and applicable Dubai data-protection rules.<\/p>\n\n\n\n

  SECTION 2 \u2013 WHAT PERSONAL DATA WE PROCESS IF YOU CREATE AN ACCOUNT<\/strong><\/h3>\n\n\n\n

  If you register an account we process:<\/strong><\/h5>\n\n\n\n

  \n
  • First and last name<\/li>\n\n\n\n
  • Date of birth (optional)<\/li>\n\n\n\n
  • E-mail address and telephone number<\/li>\n\n\n\n
  • Saved shipping \/ billing addresses<\/li>\n\n\n\n
  • Order history, favourites and product reviews<\/li>\n<\/ul>\n\n\n\n

    We use this data to perform our contract with you, comply with legal obligations (e.g. invoicing) and pursue our legitimate interest in understanding customer preferences. <\/p>\n\n\n\n

    SECTION 3 \u2013 WHAT PERSONAL DATA WE PROCESS WHEN YOU BROWSE THE WEBSITE<\/strong><\/h3>\n\n\n\n

    When you merely browse, we collect:<\/strong><\/strong><\/h5>\n\n\n\n

    \n
    • Partial IP address and approximate location<\/li>\n\n\n\n
    • Device and browser type, plug-ins, operating system, time-zone<\/li>\n\n\n\n
    • Click-stream data, page-response times, error logs, scrolls and mouse-overs<\/li>\n<\/ul>\n\n\n\n

      Processing is based on our legitimate interest in improving site performance and security.<\/p>\n\n\n\n

      SECTION 4 \u2013 WHAT PERSONAL DATA WE PROCESS WHEN YOU SUBSCRIBE TO OUR NEWSLETTER<\/strong><\/h3>\n\n\n\n

      If you opt-in, we store:<\/strong><\/strong><\/strong><\/h5>\n\n\n\n

      \n
      • E-mail address<\/li>\n\n\n\n
      • Interaction data (opens, clicks)<\/li>\n<\/ul>\n\n\n\n

        You may withdraw consent at any time via the \u201cunsubscribe\u201d link in every e-mail.<\/p>\n\n\n\n

        SECTION 5 \u2013 WHAT PERSONAL DATA WE PROCESS WHEN YOU CONTACT CUSTOMER SERVICE OR SEEK SCIENTIFIC VERIFICATION<\/strong><\/h3>\n\n\n\n

        When you contact us by webform, e-mail or phone, or when you upload documentation to prove you are a qualified researcher, we may process:<\/p>\n\n\n\n

        \n
        • Name, e-mail address and phone number<\/li>\n\n\n\n
        • Order number or research-institution details<\/li>\n\n\n\n
        • Government-issued ID or professional credentials (when required to confirm eligibility to purchase research-only compounds)<\/li>\n\n\n\n
        • IP address and any other information you choose to share<\/li>\n<\/ul>\n\n\n\n

          Processing is necessary to answer your enquiry and\u2014where applicable\u2014to meet our legal and regulatory obligations regarding controlled or research-only materials.<\/p>\n\n\n\n

          SECTION 6 \u2013 CATEGORIES OF DATA WE ALWAYS PROCESS<\/strong><\/h3>\n\n\n\n

          Category Examples Legal basis (Art 6 GDPR)<\/p>\n\n\n\n

          Identification & Contact Name, address, e-mail, phone (b) Contract, (c) Legal obligation<\/p>\n\n\n\n

          Researcher-Qualification Academic or professional proof, ID (c) Legal obligation, (f) Legitimate interest<\/p>\n\n\n\n

          Financial & Transaction Payment method, amount, fraud-prevention tokens (card data handled only by PCI-compliant providers) (b) Contract<\/p>\n\n\n\n

          Technical & Usage IP, device, cookies, logs (f) Legitimate interest<\/p>\n\n\n\n

          Marketing & Communication Opt-in status, preferences (a) Consent<\/p>\n\n\n\n

          SECTION 7 \u2013 WHY WE PROCESS YOUR DATA<\/strong><\/h3>\n\n\n\n

          \n
          • Fulfil and ship your orders<\/li>\n\n\n\n
          • Provide secure account access<\/li>\n\n\n\n
          • Verify you are legally permitted to purchase research-only substances<\/li>\n\n\n\n
          • Process payments and prevent fraud<\/li>\n\n\n\n
          • Send transactional messages (order confirmations, shipping updates)<\/li>\n\n\n\n
          • Send marketing you have requested<\/li>\n\n\n\n
          • Improve our website, products and customer experience<\/li>\n\n\n\n
          • Comply with bookkeeping, product-safety and export-control laws<\/li>\n<\/ul>\n\n\n\n

            SECTION 8 \u2013 SHARING PERSONAL DATA<\/strong><\/h3>\n\n\n\n

            We never sell personal data. We share it only with:<\/strong><\/p>\n\n\n\n

            \n
            • Payment processors, e-commerce platforms and warehousing partners<\/li>\n\n\n\n
            • IT-security, cloud-hosting and analytics vendors<\/li>\n\n\n\n
            • Professional advisers (legal, tax, accounting)<\/li>\n\n\n\n
            • Regulators, customs or law-enforcement where legally required<\/li>\n\n\n\n
            • Successors in the case of a merger or asset transfer<\/li>\n<\/ul>\n\n\n\n

              All third parties are bound by confidentiality and may process data only on our instructions.<\/p>\n\n\n\n

              SECTION 9 \u2013 INTERNATIONAL TRANSFERS<\/strong><\/h3>\n\n\n\n

              If we transfer personal data outside the European Economic Area, we rely on:<\/strong><\/p>\n\n\n\n

              \n
              • an adequacy decision of the European Commission; or<\/li>\n\n\n\n
              • Standard Contractual Clauses plus supplementary measures.<\/li>\n<\/ul>\n\n\n\n

                SECTION 10 \u2013 COOKIES & TRACKING TECHNOLOGIES<\/strong><\/h3>\n\n\n\n

                We use first- and third-party cookies classified as Strictly Necessary, Performance, Functionality and Targeting. You can adjust cookie preferences at any time via our Cookie Settings banner. Details are provided in our separate Cookie Policy.<\/p>\n\n\n\n

                SECTION 11 \u2013 AGE & RESEARCHER QUALIFICATION<\/strong><\/h3>\n\n\n\n

                By using this site you confirm that you:<\/strong><\/p>\n\n\n\n

                \n
                1. are at least 18 years old (or the age of majority in your jurisdiction), and<\/li>\n\n\n\n
                2. are a qualified researcher purchasing for laboratory use only\u2014not for human or veterinary consumption.<\/li>\n<\/ol>\n\n\n\n

                   We may request proof and will cancel orders that fail verification.<\/p>\n\n\n\n

                   SECTION 12 \u2013 SECURITY<\/strong><\/h3>\n\n\n\n

                   We apply appropriate technical and organisational measures, including:<\/strong><\/p>\n\n\n\n

                   \n
                   • TLS (SSL) encryption of data in transit and AES-256 encryption at rest<\/li>\n\n\n\n
                   • Access controls and staff training.<\/li>\n\n\n\n
                   • Regular penetration testing and security audits.<\/li>\n\n\n\n
                   • 3-D Secure and Strong Customer Authentication (SCA) for online card payments.<\/li>\n<\/ul>\n\n\n\n

                     No internet transmission is 100 % secure, but we follow PCI-DSS and industry best practices.<\/p>\n\n\n\n

                     SECTION 13 \u2013 DATA RETENTION<\/strong><\/h3>\n\n\n\n

                     We retain personal data only as long as necessary:<\/strong><\/p>\n\n\n\n

                     \n
                     • Orders and invoicing \u2014 10 years (statutory)<\/li>\n\n\n\n
                     • Marketing consents \u2014 until you withdraw consent<\/li>\n\n\n\n
                     • Researcher-qualification files \u2014 5 years after last purchase or as required by law<\/li>\n\n\n\n
                     • Server logs \u2014 12 months<\/li>\n<\/ul>\n\n\n\n

                       After expiry we securely erase or anonymise data.<\/p>\n\n\n\n

                       SECTION 14 \u2013 YOUR RIGHTS<\/strong><\/h3>\n\n\n\n

                       You may at any time:<\/strong><\/p>\n\n\n\n

                       \n
                       • Access the personal data we hold about you<\/li>\n\n\n\n
                       • Rectify inaccurate data<\/li>\n\n\n\n
                       • Erase data (\u201cright to be forgotten\u201d)<\/li>\n\n\n\n
                       • Restrict or object to processing<\/li>\n\n\n\n
                       • Receive your data in a portable format<\/li>\n\n\n\n
                       • Withdraw consent (for marketing)<\/li>\n<\/ul>\n\n\n\n

                         To exercise these rights, e-mail us at [ info@candygym.fitness ]. We will respond within one month. You also have the right to lodge a complaint with the Dubai Data Protection Authority or your local supervisory authority.<\/p>\n\n\n\n

                         SECTION 15 \u2013 CHANGES TO THIS PRIVACY POLICY<\/strong><\/h3>\n\n\n\n

                         We may update this notice to reflect legal, technical or business developments. Material changes will be announced prominently on the website and, where appropriate, by e-mail. The date at the top indicates the latest revision.<\/p>","protected":false},"excerpt":{"rendered":"

                         SECTION 1 \u2013 GENERAL INFORMATION Who we are The website candygym.fitness is operated by CandyGym FZ-LLC., a private company incorporated under the laws of UAE, CandyGym FZ-LLC, Bay Square Building 12, office 305, Business Bay. Dubai. P.O.BOX : 88 777. This Privacy Policy explains how we collect and process your personal data when you: All […]<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/candygym.fitness\/de\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/candygym.fitness\/de\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/candygym.fitness\/de\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/candygym.fitness\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/candygym.fitness\/de\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":9,"href":"https:\/\/candygym.fitness\/de\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":2966,"href":"https:\/\/candygym.fitness\/de\/wp-json\/wp\/v2\/pages\/3\/revisions\/2966"}],"wp:attachment":[{"href":"https:\/\/candygym.fitness\/de\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}