Privacy policy

Last updated: 28 December 2024

This privacy policy describes how Caprienne (we, us or our) collects, uses and shares your personal data when you visit, use our services or purchase from Caprienne, or otherwise communicate with us regarding the website (collectively referred to as the Services). The use of you/your in this privacy policy refers to you as a user of the Services, whether you are a customer, website visitor or any other person about whom we have collected data in accordance with this privacy policy.

We recommend that you read this privacy policy carefully.

Changes to This Privacy Policy

We may update this privacy policy from time to time, for example to ensure it reflects new practices or for other operational, legal or regulatory reasons. The revised privacy policy will be published on the website, as indicated by the date shown next to "Last updated", and we will take any other steps required under applicable law.

How We Collect and Use Personal Data

To provide the Services, we collect your personal data from a variety of sources as described below. The data we collect and use varies depending on how you interact with us.

In addition to the specific purposes set out below, we may use the data we have collected about you to communicate with you, provide or improve the Services, comply with any applicable legal requirements, enforce any applicable terms of service, and to protect the Services, our rights, and the rights of our users and others.

What Personal Data We Collect

The types of personal data we collect about you depend on how you interact with our website and use our Services. When we use the term personal data, we mean information that identifies you, relates to you, describes you or can in any way be linked to you. The sections below describe the categories and specific types of personal data we collect.

Data We Collect Directly from You

Data that you yourself submit to us via our Services may include:

Contact details such as your name, address, phone number and email address.
Order information such as name, billing address, delivery address, payment confirmation, email address and phone number.
Account information such as username, password, security questions and other information used to protect your account.
Customer support information such as information you choose to share when communicating with us, for example when you send a message via the Services.

Certain features of the Services may require you to provide us directly with certain information about yourself. You may choose not to share such information, but in that case it may not be possible for you to use or access these features.

Information We Collect About Your Use

We may also automatically collect certain information about your interaction with the Services ("Usage Data"). For this purpose, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our website and your account, including details about your device, browser, network connection, IP address and other information about your interaction with the Services.

Information We Receive from Third Parties

Finally, we may also obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

Companies that support our website and Services, such as Shopify.
Our payment processors who collect payment information (e.g. bank account, credit or debit card details, billing address) for the purpose of processing your payment in order to fulfil your orders and deliver the products or services you have requested, in order to fulfil our contract with you.
When you visit our website, open or click on emails we send to you, or interact with our Services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, SDKs, third-party libraries and cookies.

All information we receive from third parties will be processed in accordance with this privacy policy. Please also read the section below, Third-Party Websites and Links.

How We Use Your Personal Data

Providing products and services. We use your personal data to provide you with the Services in order to fulfil our contract with you, including to process your payments, fulfil your orders, to send you messages related to your account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange shipping, facilitate any returns and exchanges and other features and functions related to your account. We may also improve your shopping experience by enabling Shopify to match your account with other Shopify services that you may choose to use. In that case, Shopify will process your data in accordance with its privacy policy and consumer protection policy.

Marketing and advertising. We may use your personal data for marketing and advertising purposes, for example to send marketing, advertisements and promotional communications by email, SMS or post, and to show you advertisements for products or services. This may include using your personal data to better tailor the Services and advertising on our website and other websites. If you are resident in the EEA, the legal basis for this processing of personal data is our legitimate interest in selling our products, pursuant to Article 6(1)(f) GDPR.

Security and fraud prevention. We use your personal data to identify, investigate or take action regarding any fraudulent, unlawful or harmful activity. If you choose to use the Services and register an account, you are responsible for keeping your login credentials secure. We strongly recommend that you do not share your username, password or other access information with anyone else. If you believe your account has been compromised, please contact us immediately. If you are resident in the EEA, the legal basis for this processing of personal data is our legitimate interest in keeping our website safe for you and other customers, pursuant to Article 6(1)(f) GDPR.

Communicating with you and improving the service. We use your personal data to offer you customer support and to improve our Services. This is a legitimate interest for us in order to be responsive to you, to provide you with effective services and to maintain our business relationship with you pursuant to Article 6(1)(f) GDPR.

Cookies

Like many others, we use cookies on our website. For more information about the cookies we use to operate our store with Shopify, please visit https://www.shopify.com/legal/cookies. We use cookies to operate and improve our website and Services (including to save information about your activity and preferences), to carry out analysis and gain a better understanding of how users interact with the Services (which relates to our legitimate interest in administering, improving and optimising the Services). We may also allow third parties and service providers to use cookies on our website in order to better tailor the Services, products and advertising on our website and other websites.

Accepting cookies automatically is the default setting in most browsers, but you can change your browser settings to remove or reject cookies. Please note that your experience may be negatively affected if you remove or block cookies, and certain services, such as certain features and general functionality, may stop working in whole or in part. Blocking cookies may also not completely prevent our sharing of information with third parties, such as our advertising partners.

How We Disclose Personal Data

Under certain circumstances, we may disclose your personal data to third parties in order to fulfil contracts, for legitimate purposes and other reasons covered by this privacy policy. Some examples of such circumstances:

Data may be shared with vendors or other third parties who perform services on our behalf (e.g. IT management, payment processing, data analysis, customer support, cloud storage, distribution and delivery).
Data may be shared with business and marketing partners in order to deliver services and advertising to you. Our business and marketing partners will use your data in accordance with their privacy notices.
When you yourself request or otherwise consent to us sharing certain data with third parties, for example to deliver products to you or when you use social media widgets or login-based integrations, we may also share your data.
Data may be shared with our affiliates or within our group as part of our legitimate interests in running a successful business.
Data may be shared in connection with a business event, such as a merger or bankruptcy, in order to comply with applicable legal obligations (for example in response to subpoenas, search warrants), enforce applicable terms of service and protect and defend the Services, our rights and the rights of our users and others.

We disclose personal data from the following categories and sensitive data about users for the purposes described above in How We Collect and Use Your Personal Data and How We Disclose Personal Data:

Category	Categories of Recipients
Identifiers such as basic contact details and certain order and account information	Vendors and third parties who perform services on our behalf (e.g. internet service providers, payment processors, distribution partners, customer support partners and data analytics providers)
Commercial information such as order, shopping and customer support information	Business and marketing partners
Internet or other similar network activity, e.g. usage data	Affiliate partners
Geolocation data, e.g. locations determined via an IP address or other technical methods

We neither use nor disclose sensitive personal data without your consent or for the purpose of drawing inferences about you.

With your consent, we share personal data for the purpose of carrying out advertising and marketing activities as described below.

Third-Party Websites and Links

Our website may provide links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with or controlled by us, you should read their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such websites, including whether the information on those websites is accurate, complete and reliable. Information that you yourself provide in fully or partially publicly accessible locations, including information you share on third-party social networking platforms, may also be viewed by others who use the Services and/or those who use these third-party platforms without any restriction on how it may be used by us or third parties. The mere fact that we include such links does not mean that we endorse the content of such platforms, nor their owners or operations, beyond what is expressly stated in the Services.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect personal data about children. If a child for whom you are a guardian has submitted their personal data to us, you may contact us using the contact details below to request that it be deleted.

As of the date this privacy policy came into effect, we are not aware of having "shared" or "sold" (as defined in applicable legislation) personal data relating to persons under the age of 16.

Security and Storage of Your Data

Please note that no security measures are perfect or impossible to circumvent, and we cannot guarantee perfect security. Any information you send to us may also lack protection during transmission. We recommend that you do not use insecure methods to send sensitive or confidential information to us.

How long we retain your personal data depends on various factors, such as whether we need it to manage your account, provide the Services, fulfil legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your Rights

Depending on where you live, you may have some or all of the rights below regarding your personal data. However, these rights are not absolute, and it is possible that they only apply under certain circumstances, and the law permits us to refuse your request in those cases.

Right of access/knowledge: You may have the right to request access to the personal data we hold about you, including information about how we use and share your information.
Right to erasure: You may have the right to request that we delete the personal data we hold.
Right to rectification: You may have the right to request that we correct the personal data we hold if it is inaccurate.
Right to portability: You may, under certain circumstances and with certain exceptions, have the right to obtain a copy of the personal data we hold about you and to request that we transfer it to a third party.
Right to opt out of sale, sharing or targeted advertising: You may have the right to instruct us not to "sell" or "share" your personal data, or to specify that your personal data may not be used for purposes considered to be "targeted advertising", as defined in applicable privacy laws. If you visit our website with the GPC signal enabled (depending on where you are located), we will automatically interpret this as a request to deny the "sale" or "sharing" of data for the device and browser you are using to visit the website.
Restrict processing: You may have the right to request that we no longer process your personal data or that we restrict our processing of it.
Withdraw consent: Where we rely on consent to process your personal data, you may have the right to withdraw your consent.
Appeal: If we refuse your request, you may have the right to appeal our decision. You can do so by responding to our refusal notice.
Manage communication preferences: We may send you promotional emails, and you can choose to stop receiving such emails by using the unsubscribe function included in all our messages to you. If you choose to stop receiving such emails, we may still send you messages that do not contain promotional content, such as information about your account or your orders.

You may exercise these rights where indicated on our website or by contacting us using the contact details below.

Your status with us will not be affected by exercising your rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to your request. Under applicable law, you may appoint a representative who can make requests on your behalf to exercise your rights. Before we accept such a request from a representative, that representative must provide proof that you have authorised them to act on your behalf, and you may also need to personally verify your identity with us. We will respond to your request within the time specified by applicable law.

Complaints

If you have complaints about how we process your personal data, please contact us using the contact details below. If you are not satisfied with how we have handled your complaint, you may, depending on where you live, have the right to appeal our decision by contacting us using the contact details below. You may also choose to submit your complaint to the Swedish Authority for Privacy Protection (IMY). Within the EEA, you can find a list of responsible data protection supervisory authorities here.

International Users

Please note that we may transfer, store and process your personal data outside the country in which you reside. Your personal data is also processed by staff and external service providers (third parties) and partners in these countries.

If we transfer your personal data out of Europe, we will rely on recognised transfer mechanisms, such as the European Commission's standard contractual clauses, or equivalent agreements from the relevant competent authority in the United Kingdom (as applicable), unless the data transfer is to a country that has been assessed as ensuring an adequate level of protection.

Contact

If you have questions about our privacy practices or this privacy policy, or if you wish to exercise any of your rights, please call or email us at Capriennestore@gmail.com

With regard to applicable data protection law, and unless expressly stated otherwise, we are the data controller for your personal data.