Privacy Policy

We are Anafore Pte. Ltd., the company that runs the ReferralCandy service. We’re also known as ReferralCandy. Here’s a summary of how we protect your data and respect your privacy.

Who this policy is for

This policy applies to any user of our Site (located at referralcandy.com, refr.cc) or Services, including retailers, agents, and others who have an account with ReferralCandy ("Retailers") and customers of Retailers or people referred to Retailers ("Customers").

If you are a Customer of a Retailer who is running a referral program using ReferralCandy, you should also check the privacy policy of the Retailer that the referral program is for.

When we collect data

When you visit our website and use our service

Whenever you interact with ReferralCandy, we collect your data. Sometimes we request you provide us with data, sometimes data about you is collected automatically (we call this "log data").

When you voluntarily submit information to us

We collect data like your email address and name that you voluntarily submit to us (such as registering to use the ReferralCandy service or signing up for a webinar).

Information About Children

ReferralCandy is not intended for or targeted at persons under 16. By using this site, you represent that you are not under the age of 16. We do not knowingly collect information about children under 16. If you believe that we have collected information about a child under 16, please contact us at compliance@referralcandy.com, and we will delete such information.

Information we collect from third parties

We may receive personal data about you from Retailers providing it directly to us (such as after you have purchased from the Retailer), third parties including partners with which we offer joint marketing activities with or have integrations with, and from publicly available sources such as social media websites that you choose to connect with ReferralCandy

Type of data we collect

Contact details

Your name, email address, social media accounts (when you choose to connect with ReferralCandy), address, telephone number.

Log Data that identifies you

Log Data may include information such as your IP address, browser details, timezone, geolocation information, login details, operating system and version.

Data from Retailer's store

Details about and from the Retailer's store, orders Customers make and tracking data for those orders.

Data on how you interact with ReferralCandy

Usage information about how you interact with ReferralCandy which may include information on clicks, pages visited, actions taken, errors encountered.

How we use the data we collect

We do not sell personal information for commercial purposes

We do not sell your personal data to other organizations for commercial purposes. We only use your data for your referral program. If our service is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to provide our services to you.

We only use your data for reasons that we have a legal basis to do so.

Here’s how we use it:

To run your referral program

Managing different parts of your referral program like logging you into your ReferralCandy dashboard, storing settings and preferences, processing payments, tracking referrals and how Customers use your referral program, inviting Customers to take part, sending you updates about the referral program, hosting and
<span class="text-21-rich-text-13px">Legal basis: Legitimate interests, contract</span>

To improve ReferralCandy

Tracking the experience of using ReferralCandy, testing features, getting feedback, managing landing pages, research and analyzing data including profiling and in some instances using third parties to do this.
<span class="text-21-rich-text-13px">Legal basis: Legitimate interests, contract</span>

Support

Resolving issues via live chat, phone or email support, letting you know about changes to our service and how the referral program is doing
<span class="text-21-rich-text-13px">Legal basis: Contract</span>

Marketing

Sending emails and messages to you about updates to your referral program, changes to the service, new features, products and services and content
<span class="text-21-rich-text-13px">Legal basis: Legitimate interests, contract</span>

To comply with our legal or regulatory obligations; and

To establish, exercise or defend legal claims.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to any of our websites; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access. When possible, encryption is used, both in transit and storage. Access controls within the organization limit who may access information.

‍

Your privacy choices

You can choose not to provide us with personal data

In instances where you are presented the option of providing us with personal data, you can decline to do so. If you decline to do so, you can still browse our website page, but we will not be able to run a referral program for you.

You are able to turn off cookies in your browser

You can change the settings in your browser to turn off cookies. You can also delete cookies in your browser settings. Note that certain features of our service may not function properly without the aid of cookies.

Opt out of Emails

Merchants and Customers can always opt out of receiving emails from ReferralCandy by following unsubscribe instructions in emails sent by ReferralCandy or by emailing us at support@referralcandy.com.

Your rights

You have the following data protection rights:

Right to access information that we have on you

If you request it, we will provide you this information within one month of the request, unless doing so would adversely affect the rights and freedoms of others. We will let you know if we are unable to do so because of that reason.

Right to correct inaccurate personal data

You are able to change personal data (like name, contact information) in your ReferralCandy dashboard. If you want us to correct any other personal data that you aren't able to correct yourself, you can email us at support@referralcandy.com with a request to do so.

Right to object the use of your data for profiling or making automated decisions about you

We use your data to figure out what information is relevant to you to give you a better experience (like using your usage information to determine content of emails sent to you or determining what to show you on your dashboard). We will only do this to provide and improve the ReferralCandy service.

Right to port your data to another service

If you request it, we will hand you a copy of your data in CSV format so you can provide it to another service. We will not do so if the request adversely affects any rights and freedoms of others.

Right to be forgotten by us

You can ask us to delete any personal data that we have about you, provided that it is no longer needed for us to use that data for purposes of your use of ReferralCandy.

Right to lodge a complaint regarding our use of your data

You can address any complaints to the supervisory authority in the Member State of your residence or place of work. Before you do so, please bring it up with us so we can address your concerns.

To exercise any of these rights, please contact us as compliance@referralcandy.com.

How we protect your data

We take data protection seriously. We have a variety of administrative and electronic measures that are designed to protect your personal data against unauthorized access, use or disclosure.

Third parties who process your data

We use third parties to help us to offer and run the referral program for you. When we do this, sometimes we need to share your data with them for their services to work well. The sharing only happens when it is strictly necessary and done so with the safeguards and practices detailed in this privacy policy.

There are also instances where you voluntarily connect third party services to your ReferralCandy account. When you do so, we may need to share your data with them in order to provide you a seamless experience running your referral program.

Customer Information provided to ReferralCandy is also subject to the Retailer's Privacy Policy.

We recommend that you read the privacy policies of the Retailer and third party service providers so you can understand the manner in which your personal information will be handled by them.

Here are the details of our main third-party service providers:

• Analytics: Google Analytics, Fullstory, Optimizely, Segment, LinkedIn, Facebook, FitSmallBusiness, AdRoll, Twitter, RetargetLinks, Unbounce, Microsoft, Quora
• Feedback and support: Intercom.io, Desk.com, Delighted.com, FreshDesk
• Communication: Mailchimp, Customer.io, Vero, Sumo, Slack
• Hosting and infrastructure: Amazon Web Services, Sendgrid, VictorOps, Rollbar, Errorception
• Payment: Stripe, PayPal
• Integrations: Shopify, BigCommerce, Mailchimp, ReCharge, Woocommerce, Fomo
• Audit and Finance: Xero, PromptAudit PAC

We conscientiously select and review authorized third parties when possible and review their privacy and security policies. These authorized third parties may be engaged in, among other things, technology support, outreach campaigns, or research projects carried out in connection with our mission. Limited members of Anafore Pte. Ltd.’s staff or the staff working for these third parties may also access and otherwise process your personal data in connection with their job responsibilities or contractual obligations.

We rely on data minimisation, and as much as possible, the selection of trusted companies with privacy policies and auditable processes which we have reviewed, and seek to ensure that there are adequate safeguards in place for protecting transferred data

Social Media

We use social media and social networking services to advance our work. These applications require the use of third party service providers. Notably, we have a Facebook page, Instagram account, Twitter feed:

The Facebook page is administered by Facebook, in accordance with Facebook's Data Policy available here, and is accessible by Facebook users who have already consented to Facebook's Data Policy. The Group page is managed by Privacy International staff members. We do not export information on our followers from the Facebook platform.

The Instagram account we use is administered by Instagram, in accordance with their privacy policy available here.

The Twitter account we use is administered by Twitter, in accordance with their privacy policy available here

We use direct messaging over social media on occasion, when individuals and organizations contact us directly on these social media platforms. We aim to delete these messages as soon as we have responded to the queries.

We will continue to push social media companies for stronger privacy protections for all their users.

‍

How long do we store your data

We keep your data as long as you're using ReferralCandy, and in backups after you've stopped using ReferralCandy for up to 6 months.

Where do we store your data

Your data is stored through Amazon's databases on a secure server behind a firewall. We might transfer and store the data we collect from you somewhere outside the European Economic Area (‘EEA’). People who work for us or our suppliers outside the EEA might also process your data.

How we respond to Do Not Track (DNT)

Because there is no legal or industry standard at this time, we do not respond to "DNT" signals. We are closely monitoring the work of the privacy community to determine when such a response is appropriate and what form it should take.

Cookies

We use cookies when you interact with ReferralCandy. You can always choose to block cookies using your browser settings. ReferralCandy and third parties that we use set cookies whenever you interact with ReferralCandy. These cookies may be session cookies which are deleted when you leave ReferralCandy, or persistent cookies which do not delete themselves and enable us to recognize you when you return so we can provide a better experience for you.

Here’s our full cookie policy:

• Retailer Cookie Policy

On the friend landing page and widget in particular, the cookie policy is determined by the Retailer and is not covered by the cookie policy linked above.

Changes to this Privacy Policy

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

Data Security Vulnerability Acknowledgment SLA:

We understand the significance of identifying and addressing data security vulnerabilities swiftly to protect your information. To uphold this commitment, we have established a Service Level Agreement (SLA) requiring us to acknowledge any discovered data security vulnerabilities within 24 hours of their identification. This SLA is an integral part of our ongoing efforts to ensure the integrity and confidentiality of your data.

Thank you for entrusting us with your data security. For more detailed information on our data security practices please reach out to our dedicated security team at security@referralcandy.com.

How to contact us

If you have any questions regarding this Privacy Policy, please contact us by emailing support@referralcandy.com.

<p class="text-21-rich-text-13px">Effective as of August 18, 2023</p>