Privacy Policy

Privacy Policy & Data Protection – Caroline’s Bags

Last updated: 03-01-2022

1. What Information Do We Collect?

When you make a purchase from Caroline’s Bags, we collect personal details such as your name, address, and email address as part of the buying process. Additionally, as you browse our store, we automatically receive your computer’s IP address to help us understand your browser and operating system.

Email marketing: With your explicit permission, we may send you emails about our products, new collections, and exclusive updates.

2. Consent

How do you give consent?
By providing your personal information to place an order, verify payment, arrange a delivery, or process a return, you consent to our collecting and using it for that specific reason. If we need your data for another reason, like marketing, we’ll ask you directly or offer an opt-out.

How do you withdraw consent?
If you change your mind, you can withdraw your consent at any time by contacting us at: support@carolinesbags.com

3. Disclosure

We may disclose your personal data if we are legally required to do so, or if you breach our Terms of Service.

4. Shopify

Our store is hosted by Shopify Inc., which provides the e-commerce platform we use to sell our products.

Your data is securely stored via Shopify’s databases and protected servers.

Payment Details:
If you complete your order using a direct payment gateway, your credit card data is encrypted and processed according to PCI-DSS standards. This data is only stored long enough to complete your transaction, after which it is permanently deleted.

We also use Klarna for payments. Your contact and order details may be shared with Klarna to determine eligibility and personalize your payment options. All data is processed in line with Klarna’s privacy policies.

5. Third-Party Services

We only share your information with third parties to the extent necessary for them to perform their service (e.g., payment processing).

However, some services (e.g., payment gateways) have their own privacy policies. We recommend reviewing these providers’ policies to understand how they handle your data.

Be aware that third-party vendors may operate in jurisdictions different from yours. For example, if you're in the EU and your payment is processed in the U.S., your data could be subject to U.S. laws.

Once you leave our website or are redirected to a third-party site, this privacy policy no longer applies.

Analytics:
We use Google Analytics to understand visitor behavior on our website.

6. Security

We take industry-standard precautions to protect your personal data. Sensitive information (like credit card details) is encrypted using SSL and stored with AES-256 encryption.

While no method is 100% secure, we comply with all PCI-DSS requirements and regularly update our security practices.

7. Cookies

We use cookies to enhance your shopping experience. Below are some examples:

  • _session_id: stores session info.
  • _shopify_visit: tracks visits (expires after 30 minutes).
  • _shopify_uniq: tracks number of visits per customer (expires at midnight).
  • cart: stores your cart content (kept for 2 weeks).
  • _secure_session_id: unique session token.
  • storefront_digest: used for password-protected stores.
  • PREF: Google cookie to track visit origins (short-lived).

You can choose to disable cookies in your browser settings.

8. Age of Consent

By using our site, you confirm that you are at least 18 years old or the legal age of majority in your region, and that you consent to minors under your care using this site.

9. Changes to this Policy

We may update this policy at any time. Changes will be posted on this page and take effect immediately. If major updates are made, we’ll clearly state them here.

If Caroline’s Bags is acquired or merges with another company, your data may be transferred to the new owners to ensure continuity of service.

10. SMS Marketing Terms

By opting in to receive SMS alerts, you agree to receive messages regarding orders, abandoned carts, and promotional offers.

By entering your number during checkout or subscribing via a form or keyword, you consent to receive SMS messages from Caroline’s Bags. Consent is not required to complete a purchase.

We use SMSBump Inc., an EU-based service, to send messages. Your name, phone number, and purchase info may be shared with them to send personalized messages.

To opt out of SMS, reply STOP to any message or use the unsubscribe link. Standard text and data rates may apply. For help, reply HELP or contact us directly.

Other opt-out methods (e.g., using different words) are not guaranteed to work.

11. Questions or Requests

If you wish to access, correct, update, or delete any personal information we have about you—or simply want more details—please contact:

Data Protection Officer
📧 support@caroline-bags.com