.png?w=411&h=206)
Privacy Policy
Privacy Policy
Data Controller Carmela Group Limited Contact: contact@carmelafashion.com Address: [To be filled]
Data We Collect
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Name, company, address, phone | Order fulfillment, invoicing | Contract necessity (GDPR Art. 6.1.b) |
| Payment info | Process transactions | Contract necessity |
| IP, browsing behavior | Site analytics | Consent (Art. 6.1.a) |
| Newsletter, order updates | Consent / Contract |
Third-Party Tools
- Google Analytics: traffic analysis (IP anonymized)
- Meta Pixel: ad performance
- Shopline: hosting & order management
- Airwallex: payment processing
Storage and Transfer
- Primarily in EU (Shopline servers)
- Google/Meta data may transfer to USA under Standard Contractual Clauses (SCC)
Retention Periods
- Order data: 5 years post-relationship (tax)
- Analytics: 12 months
- Newsletter: until unsubscribed
Your Rights You may:
- Access your data
- Rectify inaccuracies
- Erase (except legal obligations)
- Restrict processing
- Data portability
- Object to marketing
How to Exercise: Email contact@carmelafashion.com with ID. Response within 30 days.
Cookies
- Essential, functional, analytical cookies used
- Consent banner on first visit
- Manage preferences in browser
Newsletter
- Opt-in required
- Unsubscribe link in every email
- Immediate cessation upon request
Security
- SSL/TLS encryption
- Strict access controls
- Regular backups and audits
Minors Site not intended for under 18. Data deleted if collected.
Complaints File with CNIL: www.cnil.fr or any EU DPA.
Updates Policy may be revised. Latest version published on site. Last updated: November 11, 2025