Privacy policy

Who uses your data?

Brenda Tambirana, Candeur Malagasy, Nosy Be, Madagascar, is responsible for the information you entrust to her for her activities. For questions or requests: candeurmalgache@gmail.com. Find the address and opening hours on The shop.

Messages and order enquiries

The contact form asks for your name, a subject and a message. Your name and message are required. Your email address is optional: provide it if you would like a reply by email. This information is used to handle your enquiry and, where applicable, prepare an order. The website has no customer accounts or online payment.

The contact form prepares your message on your device; you choose whether to send it through WhatsApp or copy it. Pre-registrations are submitted and stored through Netlify Forms. An email is sent when you send it from your email service.

Correspondence is kept while your request is handled and the resulting relationship is followed up. You may ask Brenda to delete it. Records needed for an order or a legal obligation may have to be retained beyond the last exchange.

Project pre-registrations

Your email address and selected project are used only to notify you if that project comes to fruition. Lists are kept separately for each project. Pre-registration is optional, free and non-binding. Your address is kept until you are informed of the launch, the project is abandoned or you ask to withdraw; it is not added to another advertising list.

Internal statistics, with your consent

If you accept this option, the website counts page views; clicks to WhatsApp, telephone, email and directions; internal and external links; search openings; and submitted forms. It stores the page, event date and time, a source category, a screen category, the link category or click location, and a transformed visit identifier that changes daily. When available, the country is supplied by the host from the connection.

The dashboard is private and password-protected on the server. Statistical events contain no IP address, name, email address, message, entered search, full referring address or URL parameters. Network providers may process technical data to route and secure requests. Reports cover up to 90 days. Older data is removed by cleanup triggered by service activity.

The visit identifier stays in tab storage and is renewed after 30 minutes of inactivity. Tracking is disabled if your browser sends a “Do Not Track” or “Global Privacy Control” signal. Refusing statistics does not prevent you from browsing the website or ordering.

Maps and external services

Google Maps maps appear automatically on pages presenting the shop. To display the map, technical data, including your IP address and the website origin, are transmitted to this provider. Directions links also open Google Maps.

Links to WhatsApp, Google Maps or other websites open separate services with their own privacy policies: WhatsApp, Google.

Storage on your device

• Preferences: your statistics choice remains valid for 180 days. You can change it at any time.
• Private access: a login cookie reserved for the administrator expires after eight hours. It cannot be accessed by the page’s JavaScript.

Change my preferences

Recipients and hosting

Brenda can access pre-registrations. Statistics are accessible to the authorised administrator. The site is hosted by OpenAI Sites on Cloudflare infrastructure; Netlify processes pre-registrations and Cloudflare stores statistics. These providers may process data outside Madagascar. Maps and messages sent through an external service are also subject to that provider. Netlify privacy policy.

Your requests

You may request access to, correction or deletion of information you have entrusted to Candeur Malagasy, object to its use or withdraw consent for optional uses. Write to candeurmalgache@gmail.com and specify your request and the address used. Withdrawal stops new statistical events; events already transformed cannot be used to identify you by name.

Last updated: 7 October 2026.