Privacy

Privacy Policy

This page explains what information we collect when you visit waxcandy.co, why we collect it, and the rights you have over it. We try to keep this short and honest.

Last updated: May 11, 2026 Controller: Nubbee Wax Candy Astronauts Contact: trading@waxcandy.co

1. Who we are

This site is operated by Nubbee Wax Candy Astronauts ("we", "us"). We are the data controller for any personal data you submit through this site. For privacy-related questions, write to trading@waxcandy.co.

2. What we collect and why

2.1 Distributor inquiry form

When you submit the contact form on this site, we collect:

Lawful basis (GDPR Article 6): our legitimate interest in responding to commercial inquiries about wholesale and distribution. You initiate the contact, so we treat the request itself as your indication that you want a reply.

Retention: we keep inquiry emails for up to 24 months to follow up on the conversation and our commercial relationship, after which they are deleted from our inbox and CRM. Closed inquiries with no reply are deleted after 12 months.

2.2 Server logs

Our hosting provider (Vercel) records standard request logs for the site — IP address, user agent, requested URL, timestamp — to operate the service and detect abuse. We do not use these logs for marketing. They are retained according to Vercel's own policy.

2.3 Cookies and embedded content

We do not set our own analytics or marketing cookies. The only cookie-style storage we use is a single localStorage entry to remember your choice in our consent banner.

We embed videos from TikTok in the social proof section. These embeds are loaded only after you click Accept in our consent banner. Once loaded, TikTok will receive your IP address and may set its own cookies under its own privacy policy. You can revoke that choice at any time using the Cookie preferences button in the footer.

3. Who we share data with

We rely on a small set of third-party processors. We share with them only what is needed to run the service.

Processor Purpose Data shared Region
Vercel Inc. Static site & serverless hosting IP address, request metadata, form payload in transit USA (with EU edge network)
Resend Sending the inquiry email to our inbox All form fields (name, company, country, email, buyer type, message) USA
TikTok (only after consent) Video player embeds in the social section IP address, user agent, TikTok cookies Global, including non-EU regions

Transfers to the United States are made under the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses, depending on each processor's certification.

4. Your rights

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, you have the right to:

To exercise any of these rights, email trading@waxcandy.co. We will respond within 30 days. We do not charge for these requests.

5. Security

Form submissions are sent over HTTPS. Our serverless function validates required fields, escapes HTML before composing the email, and uses an authenticated API to deliver it via Resend. Submissions can be subject to rate limiting to prevent abuse.

6. Children

This site is aimed at distributors, wholesalers, and retail buyers. It is not intended for children, and we do not knowingly collect data from anyone under 16.

7. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent change. For material changes, we will update the version and, where appropriate, prompt you to review your consent choices again.

8. Contact

Questions, requests, or complaints? Email trading@waxcandy.co.