Privacy Policy

Information we collect

When you place an order: We receive information necessary to process and fulfill your purchase, which may include your name, email address, shipping and billing addresses, phone number (if provided), items ordered, and order details.

When you contact us: We receive the information you choose to include in your message, such as your email address, order number, and question.

When you use our website: Our website and analytics or advertising services may collect technical and usage information such as IP address, browser and device information, pages visited, referring sites, and interactions with our site, using cookies and similar technologies.

How we use information

• Process payments, fulfill and ship orders, and provide order-related updates.
• Answer inquiries and handle returns, refunds, or customer-support requests.
• Operate, secure, maintain, and improve the website and shopping experience.
• Understand site traffic and assess the performance of marketing campaigns.
• Comply with applicable legal, tax, accounting, and fraud-prevention obligations.

We do not use your order email address to send a marketing newsletter unless you have opted in or another lawful basis applies.

Services we use

We use Squarespace to host our website and storefront and support order management. Payment information is handled by the payment providers available at checkout; we do not receive or store your full payment-card number directly.

We may share relevant order information with shipping and fulfillment providers to deliver your purchase. We use Google Analytics to understand site activity and Meta advertising tools to measure ads and, where configured, support audience-based advertising. These services may process website interaction or device information under their own terms and privacy policies.

We may also disclose information when required by law, to protect rights or security, or in connection with a legitimate business transfer.

Cookies, analytics & advertising

Squarespace uses necessary cookies and similar technologies for functions such as security, shopping cart, and checkout. Other cookies or technologies may help us measure traffic and campaign effectiveness.

Google Analytics and Meta tools may collect information about visits and actions taken on this website. Depending on your location and our settings, advertising-related processing may be considered targeted advertising or “sharing” under applicable privacy laws.

You can manage or block cookies through your browser controls. Where offered on our site, use the cookie banner or privacy controls to manage non-essential technologies. Blocking some cookies may affect functionality or measurement.

For more information, see Squarespace's cookie explanation, Google's Privacy Policy, and Meta's Privacy Policy.

Your choices & privacy rights

Depending on where you live, you may have rights to request access to, correction of, or deletion of certain personal information, and to opt out of particular uses of your information, including some targeted advertising. Some exceptions may apply, including information we must retain for legal or transactional reasons.

To submit a privacy request, email support@getcaroma.com with “Privacy Request” in the subject line. We may need to verify your identity before responding. We will handle requests as required by applicable law.

You can also adjust advertising preferences directly through Google and Meta and control cookies through your browser or any consent tools made available on this site.

Data retention & security

We retain information for as long as reasonably needed to complete orders, provide support, maintain business records, comply with legal requirements, resolve disputes, and protect our business. Retention periods vary by the type of information and its purpose.

We and our service providers use reasonable measures to protect information, but no online service or transmission can be guaranteed completely secure.

Children's privacy

Caroma is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us personal information, please contact us.

Changes to this policy

We may update this Privacy Policy as our practices, services, or legal obligations change. We will post the revised version here with an updated effective date.