Privacy policy

Last updated 25 October 2026

This privacy policy explains how House of Kandy (houseofkandy.com) collects and uses information when you visit this website. If you have any questions, email hello@houseofkandy.com.

Information I collect

  • Contact form: if you send me a message, I receive your name, email address and message. I use them only to reply to you and keep them for no longer than needed. Form submissions are processed by my hosting provider, Netlify.
  • Newsletter: if you join my monthly newsletter, I receive your email address. I use it only to send you that email, and you can unsubscribe any time by replying or emailing me. Sign-ups are collected by Netlify.
  • Analytics: I may use Google Analytics to understand how many people visit and which posts are popular. It collects anonymous usage data such as pages visited, device type and approximate location. You can opt out with the Google Analytics opt-out add-on.
  • Server logs: like most websites, my hosting provider records basic technical data (such as IP address and browser type) for security and performance.

Cookies

This site itself does not set advertising cookies. Analytics and the shops you visit through my links may use cookies. Affiliate shops use cookies to know a purchase came from House of Kandy; this is how I earn a commission. My affiliate links are tracked by the affiliate network Involve Asia and the shop you visit, which record that you clicked a link here and whether you bought something. This site does not show interest-based (personalised) ads. To opt out of affiliate and other tracking cookies, block or delete cookies in your browser settings, or use your browser’s private mode.

Third-party websites

This site links to shops and other websites, including through affiliate links. Their privacy policies apply once you leave House of Kandy.

Your rights

You can ask me what personal data I hold about you, ask me to correct it or ask me to delete it by emailing hello@houseofkandy.com. I handle personal data in line with applicable laws, including Malaysia’s Personal Data Protection Act 2010 (PDPA).

Children

This website is not intended for children under 13, and I do not knowingly collect their personal data.

Changes

I may update this policy from time to time. The date at the top shows when it last changed.