Last updated:
At CandorPick, the privacy of our readers matters to us. This policy explains what information we collect when you read our articles, leave a comment or contact us, how we use it, who we share it with, and the choices and rights you have.
1.Who we are
CandorPick (www.candorpick.com) is an online publication of style articles, outfit ideas and product reviews, operated by CandorPick (“we”, “us”, “our”). We are the controller of the personal data described in this policy.
If you have any questions about this policy or how we handle your data, email manushad.official@gmail.com or use our contact form.
2.Consent and scope
This policy applies to information collected through this website. It does not apply to information collected offline or through other websites, including retailer sites and social networks we link to. By using the site you acknowledge this policy; where the law requires your consent (for example, for non-essential cookies or for posting a comment), we ask for it separately.
3.Information we collect
You can read everything on CandorPick without an account. We collect:
- When you comment: the name you enter, your email address, your comment, the date, a salted one-way hash of your IP address, and your browser’s user-agent string.
- When you use the contact form: your name, email address, the topic and subject you choose, your message, and a salted hash of your IP address.
- Automatically, when you visit: standard technical information our hosting provider logs for every request — IP address, browser type, device, pages requested, referring page and time of visit.
- Analytics: aggregated usage information collected by Google Analytics (see “Analytics” below).
We do not ask for, and ask you not to submit, sensitive information such as health data, financial details or government identifiers in comments or messages.
4.How we use your information
We use the information above to:
- publish your comment (name and comment only) once it has been approved;
- moderate comments and keep spam and abuse off the site;
- reply to your messages and handle corrections or data requests;
- operate, secure and maintain the website, and diagnose technical problems;
- understand, in aggregate, which articles are read so we can improve them;
- comply with our legal obligations.
We do not sell your personal information, and we never publish your email address.
5.Legal bases for processing (EEA & UK visitors)
If you are in the European Economic Area or the United Kingdom, we rely on:
- Consent — for publishing your comment, for handling your contact message, and for non-essential cookies. You can withdraw consent at any time.
- Legitimate interests — for keeping the site secure, preventing spam and abuse, and understanding how the site is used, where those interests are not overridden by your rights.
- Legal obligation — where we must keep or disclose information by law.
7.Contact form
Messages sent through the contact form are stored in our database so the team can read and reply to them. We use your details only to respond to you and to keep a record of the conversation, and we do not add you to any mailing list.
8.Log files
Like most websites, CandorPick is served by a hosting provider that automatically keeps log files of visits. These logs include IP addresses, browser type, internet service provider, date and time, referring and exit pages, and are used to administer the site, detect abuse and analyse trends. They are not linked to anything that identifies you by name.
10.Analytics
We use Google Analytics 4, a web analytics service provided by Google LLC, to understand how visitors use the site — for example, which articles are read and how people arrive. Google processes this data on our behalf. You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites and opt out with the Google Analytics opt-out browser add-on.
11.Advertising partners and the DoubleClick cookie
CandorPick may display advertising served by Google AdSense and other ad networks. Where it does:
- Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.
- Google’s use of advertising cookies (including the DoubleClick cookie) enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
- You may opt out of personalised advertising by visiting Google Ads Settings, or opt out of a third-party vendor’s use of cookies for personalised advertising at www.aboutads.info (US) or www.youronlinechoices.eu (EU).
Each advertising partner has its own privacy policy, and we have no access to or control over the cookies they use. If we add other ad networks, we will list them here with links to their policies.
12.Affiliate links
Some links to retailers are affiliate links. If you click one, the retailer or affiliate network may set a cookie so that a purchase can be credited to us. That processing is carried out by the retailer under its own privacy policy. See our Affiliate Disclosure for how these links work.
14.Service providers and international transfers
We share personal data only with providers that help us run the site, under contract, for these purposes:
- Vercel Inc. — website hosting and request logs.
- Supabase Inc. — the database that stores comments and contact messages.
- Google LLC — analytics, and advertising where enabled.
These providers may process data in the United States and other countries. Where data leaves the EEA or UK, we rely on the safeguards the provider offers, such as the European Commission’s Standard Contractual Clauses. We may also disclose information if required by law or to protect the rights and safety of our readers or the site.
15.How long we keep data
- Approved comments stay published, with the details you submitted, for as long as the article is online or until you ask us to remove them.
- Comments we don’t publish (spam or off-topic) are deleted when we clear the moderation queue.
- Contact messages are kept for as long as needed to handle your enquiry and any follow-up, then deleted.
- Hosting logs are kept for the short period set by our hosting provider.
16.Your data protection rights (GDPR)
Depending on where you live, you are entitled to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct information you believe is inaccurate or complete information that is incomplete.
- Erasure — ask us to delete your personal data, under certain conditions.
- Restriction — ask us to restrict how we process your data, under certain conditions.
- Objection — object to our processing of your data, under certain conditions.
- Portability — ask us to transfer the data we collected to another organisation, or to you, under certain conditions.
- Withdraw consent — at any time, without affecting processing already carried out.
To exercise any of these rights, email manushad.official@gmail.com or use our contact form. We respond within one month. You also have the right to complain to your local data protection authority.
17.Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- know what categories and specific pieces of personal information we have collected about you;
- request deletion or correction of personal information we hold about you;
- opt out of the “sale” or “sharing” of your personal information;
- not be discriminated against for exercising these rights.
We do not sell personal information for money. If advertising cookies are active, some of that activity may count as “sharing” for cross-context behavioural advertising under California law — you can opt out through Google Ads Settings, and we honour Global Privacy Control signals where our partners support them. To make a request, email manushad.official@gmail.com or use our contact form. We respond within the timeframes the law requires.
18.Children's information
CandorPick is intended for adults and is not directed at children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA and UK). If you believe a child has submitted personal information through a comment or the contact form, please contact us and we will remove it promptly. We encourage parents and guardians to take part in their children’s online activity.
19.Security
The site is served only over HTTPS. Comment and contact data is stored in a database that the public cannot read directly, and only our editorial team can access it through a password-protected admin area. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
20.Changes to this policy
We may update this policy from time to time — for example, when we add an advertising or affiliate partner. The “Last updated” date at the top shows when it last changed. Significant changes will be highlighted on this page.
21.Contact us
For any question about this policy or your personal data, email manushad.official@gmail.com or use our contact form.
6.Comments
Every comment is held for moderation and only appears after a member of our team approves it. When a comment is published, your name, your comment and its date are public. Your email address is never shown; we use it only to contact you about your comment if we need to.
We store a salted hash of your IP address rather than the address itself. It lets us limit how many comments can be sent in a short time and recognise repeat spam, without keeping an address we have no other use for.
If you tick “Save my name and email in this browser”, those two fields are saved in your own browser’s local storage so the form is pre-filled next time. They are not sent anywhere until you post, and you can clear them by unticking the box on your next comment or clearing your browser storage.
You can ask us to edit or delete any comment you have posted — tell us the article and the name you used.