Privacy Policy

This Privacy Policy describes how Candy.TV ("we," "us," or "our") collects, uses, and discloses personal information when you visit candy.tv (the "Site") or interact with the offer-submission services we provide. We are committed to protecting your privacy and handling your information transparently. This policy is designed to comply with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the EU General Data Protection Regulation (GDPR), and other applicable privacy laws.

1. Information We Collect

We collect personal information you provide directly to us when you submit an offer or otherwise communicate with us. This may include:

• Identifiers: name, email address, phone number, company name, IP address.
• Commercial information: the amount of any offer you submit, your intended use of the domain, and your timeline to close.
• Internet or other electronic activity: browser type, device information, referring URL, pages visited, and approximate geolocation derived from IP address.
• Other information you choose to provide in messages or correspondence.

We do not knowingly collect sensitive personal information categories such as government identifiers, financial account information, precise geolocation, biometric data, or information about minors under 16.

2. How We Use Information

We use personal information for the following purposes:

• To respond to and evaluate your offer or inquiry.
• To facilitate the negotiation and closing of any potential domain transaction.
• To communicate with you regarding the Site or services you've requested.
• To detect, prevent, and address fraud, security issues, or violations of our Terms.
• To comply with legal obligations and enforce legal rights.
• To analyze how our Site is used in aggregate, for purposes of improvement.

3. Legal Bases (GDPR)

Where the GDPR applies, we process personal information on the following legal bases:

• Performance of a contract or to take steps at your request before entering into a contract (e.g., evaluating your offer).
• Legitimate interests in operating, securing, and improving the Site.
• Consent, where required (e.g., certain non-essential cookies).
• Compliance with legal obligations.

4. How Information Is Shared

We do not sell or rent your personal information. We may share information with:

• Service providers who operate the Site or our submission infrastructure on our behalf, including form delivery (Web3Forms), hosting (Cloudflare Pages), and email providers — under contractual confidentiality obligations.
• Escrow service providers (such as Escrow.com) if a transaction proceeds, to facilitate the secure transfer of funds and the domain.
• Legal and regulatory authorities when required by law, court order, or to protect our rights.
• A successor entity in the event of a merger, sale, or restructuring of our business.

5. Cookies and Tracking

The Site uses minimal cookies. We may use essential cookies for security and form functionality. Where applicable laws require, you will be presented with controls to manage non-essential cookies. We do not use third-party advertising trackers on this Site.

6. Your Rights Under California Law (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and (if applicable) sell or share.
• Access or request a copy of the personal information we hold about you.
• Delete personal information we hold about you, subject to lawful exceptions.
• Correct inaccurate personal information.
• Opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
• Limit use of sensitive personal information. We do not collect sensitive personal information that would trigger this right.
• Non-discrimination for exercising any of these rights.

To exercise these rights, contact us at the email below. We will verify your identity and respond within the timelines required by law.

7. Your Rights Under EU/UK Law (GDPR)

If you are located in the EU, EEA, UK, or Switzerland, you have additional rights:

• Right of access, rectification, erasure, restriction of processing, and objection.
• Right to data portability.
• Right to withdraw consent where processing is based on consent.
• Right to lodge a complaint with your local supervisory authority.

8. International Data Transfers

The Site is hosted in the United States. If you access the Site from outside the United States, your information will be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.

9. Data Retention

We retain personal information for as long as needed to fulfill the purposes for which it was collected, including for the duration of any active offer evaluation, transaction, or legal record-keeping requirement. Inquiries that do not result in transactions are typically retained for up to 24 months unless deletion is requested.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. No method of internet transmission or electronic storage is 100% secure, however, and we cannot guarantee absolute security.

11. Children's Privacy

The Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it.

12. Updates to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top of this page will reflect any change. Material changes will be communicated via the Site.

13. How to Contact Us

For questions, requests, or to exercise your rights under this Privacy Policy, contact us via the offer form on the homepage or send an email to the address listed in the form acknowledgment. Please include "Privacy Request" in the subject line.