1. Home
  2. Privacy & Cookie Policy

Legal

Privacy & Cookie Policy

This page explains what information Marigold & Cane collects when you visit our site or send an order inquiry, why we collect it, how long we keep it, and how you can ask us to remove it.

Last updated: 2 November 2026 · Applies to www.marigoldandcane.com

In short: we collect the details you type into our forms, we keep a small set of functional cookies, and we only run analytics cookies if you press “Accept all cookies”. We do not sell personal data.

1. Who we are

Marigold & Cane is a small-batch confectionery based in Asheville, North Carolina. For the purposes of the EU General Data Protection Regulation and similar laws, we are the data controller for the information described on this page.

Marigold & Cane Confectionery
418 Cedar Hollow Road, Unit 3, Asheville, NC 28801, United States
Email: hello.marigoldandcane@gmail.com
Phone: +1 (828) 555-0147

2. Data we collect

We try to collect as little as possible. There is no account system on this site, and no payment is taken here.

Information you give us

  • Order inquiries: first name, last name, email address, chosen flavor, quantity, and any notes you write (for example an event date or an allergen to avoid).
  • Consent record: whether you accepted all cookies or necessary cookies only, plus the date and time of that choice.
  • Correspondence: anything you send us by email, including attachments such as event or label artwork.

Information collected automatically

  • Technical data: IP address, browser type and version, device type, referring page, and pages viewed. Our hosting provider processes this to deliver the site and defend against abuse.
  • Local storage: your cookie preference is stored in your browser, not on our servers.

What we do not collect

We do not collect payment card numbers on this site, we do not ask for government identifiers, and we do not use web forms to collect health information. Please do not send sensitive details through the order form.

3. How we use your data

Purpose Data used Legal basis
Answering an order inquiry and preparing a quote Name, email, flavor, quantity, notes Steps taken at your request before entering a contract
Fulfilling and supporting an order Name, email, order notes, delivery correspondence Performance of a contract
Remembering your cookie choice Consent record, stored locally Legal obligation; strictly necessary
Understanding which pages and flavors are popular Aggregated page views, device type Consent — analytics cookies run only after you accept
Keeping records for tax and accounting Order and invoice records Legal obligation

We do not make automated decisions about you, we do not build advertising profiles, and we do not use your order notes for marketing.

4. Cookies & consent

A cookie is a small text file that a site can store in your browser. This site uses as few as possible, and nothing that is not listed below.

Name Type Purpose Duration
mc_cookie_consent Strictly necessary (local storage) Stores whether you chose “Accept all cookies” or “Necessary only”, so the banner does not reappear. Until you clear your browser data
mc_consent_time Strictly necessary (local storage) Records when the choice was made, so we can show it if you ask. Until you clear your browser data
mc_analytics Analytics (optional) Set only after you accept all cookies. Used to measure page views in aggregate; it does not identify you. 12 months

Your choices

  • The banner appears the first time you visit and asks before any optional cookie is set. “Necessary only” is a real choice: the site works fully without analytics.
  • You can change your mind at any time using the “Cookie settings” link in the footer of any page. That reopens the banner and clears any optional cookie already stored.
  • You can also block or delete cookies in your browser settings. Blocking the strictly necessary entry means the consent banner will ask again on each visit.

If you decline optional cookies, you will not receive fewer products or a worse service — the only difference is that we learn less about which flavors people browse.

5. Sharing & processors

We do not sell, rent, or trade personal data. We share it only with service providers who help us run the shop, and only as far as they need it:

  • Website hosting: stores the site and server logs, including IP addresses.
  • Email provider: transmits and stores order inquiries and newsletter correspondence.
  • Shipping carriers: receive the name and delivery address needed to send a parcel. These details are collected only after an order is confirmed by email.
  • Professional advisers and authorities: where the law requires it, or to establish or defend a legal claim.

Some providers process data outside the United States or the European Economic Area. Where that happens, transfers are covered by standard contractual clauses or an equivalent safeguard.

6. How long we keep it

  • Inquiries that do not become orders: deleted 12 months after our last message.
  • Order and invoice records: kept for 7 years, as required by tax rules.
  • Newsletter subscriptions: kept until you unsubscribe, plus 30 days to suppress your address.
  • Cookie consent record: stored in your browser until you clear it, and in our records for 24 months.
  • Server logs: rotated within 90 days.

7. Your rights

Depending on where you live, you may have the right to:

  • ask what personal data we hold about you and receive a copy;
  • have incorrect data corrected;
  • ask us to delete your data;
  • restrict or object to certain processing;
  • withdraw consent at any time, without affecting past processing;
  • receive your data in a portable format;
  • lodge a complaint with your local data protection authority.

To exercise any of these, email hello.marigoldandcane@gmail.com with the subject line “Privacy request”. We reply within 30 days and will ask for enough information to verify that the request is yours. Exercising your rights is free, and we will not treat you differently for doing so.

8. Security

The site is served over HTTPS. Access to inquiry records is limited to the two people who run the shop, protected by multi-factor authentication. Paper order slips are shredded after the corresponding digital record is filed. No system is perfectly secure, but we keep the amount of data we hold small on purpose — it is the simplest safeguard there is.

9. Children

Our site and order form are intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us information, write to us and we will delete it promptly.

10. Shipping, returns & food items

We ship Monday to Wednesday within the continental United States. Flat-rate shipping is $9, and orders over $60 ship free. Delivery addresses are shared with the carrier only after you confirm an order by email.

Because candy is a perishable food product, opened boxes cannot be returned. If a parcel arrives damaged, send a photograph within 48 hours of delivery and we will replace the affected pieces or refund them. Unopened boxes may be returned within 14 days at your cost, provided the seal is intact.

11. Changes to this policy

If we change how we handle personal data, we will update this page and move the “last updated” date. Material changes affecting existing inquiries will also be sent by email to anyone with an open order.