This Privacy Policy explains how Street Candy Legal processes personal data when you visit streetcandyadventure.surf or communicate with us in connection with our legal services for entrepreneurs.
Where the GDPR applies, we process personal data on a lawful basis such as consent, performance of a contract, compliance with legal obligations, or our legitimate interests, as appropriate. We apply data minimization, purpose limitation, and security measures intended to reduce unnecessary processing.
If the GDPR applies to your data, you may have rights to access, rectify, erase, restrict, or object to processing, and to request portability in certain cases. Where processing is based on consent, you may withdraw consent without affecting prior processing that was lawful before withdrawal.
We use personal data to operate and secure the site, respond to inquiries, provide requested information or services, manage client or prospect communications, maintain records, improve site performance, comply with legal obligations, and protect against misuse or unauthorized access. Where required, we also use data to manage consent choices and cookie preferences.
We may share personal data with trusted service providers that support hosting, security, analytics, communications, document handling, or other operational services. These parties act on our instructions or under their own independent role where applicable, and they are expected to use the data only for the agreed purpose and to maintain appropriate confidentiality and security.
We may disclose personal data when necessary to comply with legal obligations, respond to lawful requests, establish or defend legal claims, protect our rights, or prevent fraud, abuse, or security incidents. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
Data handling overview
We may process identification details, contact details, message content, service-related information, technical data such as device and browser information, and usage data showing how the site is accessed and used. In a legal services context, this may also include information you choose to provide about your business, matter, or request.
We receive personal data directly from you when you complete forms, send messages, or otherwise interact with the site. We also collect certain data automatically through logs, cookies, and similar technologies, and we may receive information from service providers that support hosting, security, analytics, or communications.
We may use essential cookies to support core site functions, preference cookies to remember settings, and analytics cookies to understand site performance and usage patterns. Cookies may be session-based or persistent, depending on their purpose and lifespan.
You may manage cookies through your browser settings and, where provided, through the site’s cookie controls. Blocking some cookies may affect site functionality, security features, or preference storage. Where consent is required, non-essential cookies are used only after the relevant choice is recorded.
Depending on your location and the applicable law, you may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or request restriction of processing. Some requests may be limited where we must retain information for legal, regulatory, or evidentiary reasons.
To exercise a privacy right, submit a clear request using the contact details in this policy and include enough information for us to verify your identity and understand your request. We may ask for additional details where needed to protect your data and respond appropriately.
We keep personal data only for as long as needed for the purpose for which it was collected, including to provide services, maintain records, meet legal or tax obligations, and handle claims or disputes. When data is no longer required, we delete it, anonymize it, or restrict it in accordance with applicable law and our internal retention practices.
When we make material changes, we will update the policy text and take reasonable steps to draw attention to the revision where appropriate. The date of the latest version should be reviewed periodically.
