Privacy Policy

01 Information We Collect

We may collect information that you provide directly to us, as well as certain information generated automatically when you browse or interact with our website.

Personal Information You Provide

Depending on how you use our website, you may provide information including:

• Your full name
• Billing and shipping addresses
• Email address
• Telephone number
• Account login information
• Order and transaction information
• Customer service communications
• Information submitted through forms or account fields

Information Collected Automatically

When you access our website, certain technical information may be collected automatically, including:

• Internet Protocol address
• Browser type and version
• Device type and operating system
• Pages viewed and time spent on the website
• Referring website or URL
• Approximate geographic location
• Website interactions and navigation activity
• Cookie and similar tracking information

02 How We Use Your Information

We may use the information we collect to operate our website, provide our services, process transactions, and support our business activities.

These purposes may include:

• Processing, confirming, and fulfilling orders
• Providing order and shipping updates
• Managing customer accounts
• Responding to questions and customer service requests
• Processing payments and preventing transaction fraud
• Maintaining and improving our website
• Understanding how visitors use our website
• Protecting the security of our systems and customers
• Complying with legal and regulatory obligations
• Enforcing our policies and Terms of Service
• Sending service-related communications

Where permitted, we may also use your information to send promotional communications. You may unsubscribe from promotional emails by using the unsubscribe option included in the message.

03 Cookies and Tracking Technologies

Our website may use cookies, pixels, analytics services, and similar technologies to support website functionality, remember preferences, understand visitor behavior, and improve the customer experience.

Types of Cookies We May Use

• Essential cookies: Necessary for website operation, account access, checkout, security, and shopping cart functionality.
• Preference cookies: Help remember selections, settings, and other choices you make.
• Analytics cookies: Help us understand website traffic, page activity, and how visitors interact with the website.
• Marketing cookies: May be used to measure advertising performance and provide more relevant promotional content where applicable.

You can adjust your browser settings to block or delete cookies. Disabling certain cookies may prevent portions of the website, including account or checkout functions, from operating correctly.

04 How We Share Your Information

We do not sell your personal information in exchange for money. We may share information with trusted service providers when reasonably necessary to operate our website, process orders, and conduct our business.

These providers may include:

• Website hosting and technology providers
• Payment processors and fraud-prevention providers
• Shipping and delivery service providers
• Email and customer communication platforms
• Analytics and website performance providers
• Professional advisers such as attorneys and accountants

We may also disclose information when required by law, legal process, court order, government request, or when reasonably necessary to protect the rights, property, security, or safety of Carna Rose, our customers, or others.

Information may also be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, or other business transaction.

05 Payment Information

Payments made through our website may be processed by independent third-party payment processors. Carna Rose generally does not directly store complete payment card numbers or card security codes on its own servers.

Payment processors may collect and use your payment details in accordance with their own privacy policies, security standards, and contractual obligations.

06 Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, misuse, disclosure, alteration, or destruction.

These safeguards may include:

• Encrypted website connections
• Secure payment-processing technologies
• Restricted access to customer information
• Website monitoring and security controls
• Administrative and account-level access protections

No internet transmission or electronic storage method is completely secure. Although we work to protect personal information, we cannot guarantee absolute security.

07 Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this policy, including:

• Processing and documenting transactions
• Providing customer service
• Maintaining business and financial records
• Meeting tax, accounting, and legal obligations
• Resolving disputes and enforcing agreements
• Preventing fraud and protecting website security

Retention periods may vary based on the type of information, the purpose for which it was collected, and applicable legal requirements.

08 Your Privacy Rights and Choices

Depending on your location and applicable law, you may have the right to:

• Request access to personal information we maintain about you
• Request correction of inaccurate personal information
• Request deletion of certain personal information
• Request a copy of certain information in a portable format
• Object to or restrict certain uses of your information
• Withdraw consent where processing is based on consent
• Opt out of promotional email communications

Some requests may be subject to identity verification, legal exceptions, record-retention requirements, or other limitations permitted by law.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

09 California Privacy Rights

California residents may have additional rights regarding their personal information under applicable California privacy laws. Subject to legal requirements and exceptions, these rights may include:

• The right to know the categories of personal information collected
• The right to know the categories of sources from which information was collected
• The right to know the business or commercial purposes for collecting information
• The right to know the categories of third parties with whom information is shared
• The right to access, correct, or request deletion of eligible information
• The right to opt out of certain sales or sharing of personal information when applicable
• The right to limit certain uses of sensitive personal information when applicable

Carna Rose does not sell personal information for monetary compensation. Certain analytics or advertising technologies may be considered “sharing” under some state privacy laws depending on how they are configured and used.

California residents may submit a privacy request using the contact information provided at the bottom of this policy.

10 Children’s Privacy

Our website and products are intended only for adults who are at least 21 years of age. Our services are not directed to children, and we do not knowingly collect personal information from anyone under 18 years old.

If we learn that personal information belonging to a child has been submitted to us, we will take reasonable steps to delete it as required by applicable law.

11 Third-Party Links

Our website may contain links to third-party websites, services, applications, or platforms that are not operated or controlled by Carna Rose.

We are not responsible for the privacy practices, security, availability, or content of third-party services. We encourage you to review the privacy policies of any external website before providing personal information.

12 International Users

Carna Rose is operated from the United States. If you access our website from another country, your information may be transferred to, processed in, and stored in the United States.

Privacy and data-protection laws in the United States may differ from those in your location. By submitting information through our website, you acknowledge that your information may be processed in the United States, subject to applicable law.

13 Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our website, business practices, technology, services, or legal obligations.

When changes are made, the revised policy will be posted on this page with an updated “Last Updated” date. Continued use of the website after an updated policy is posted constitutes acknowledgment of the revised policy.

14 Contact Us

Questions, concerns, or privacy requests regarding this Privacy Policy may be submitted through the Carna Rose contact page.

Please include enough information for us to understand and respond to your request. We may ask you to verify your identity before completing certain privacy-related requests.