Privacy Policy

Effective date: September 28, 2026

This Privacy Policy explains how Charbie Chloe collects and uses personal information when you visit charbiechloe.com, place an order, contact us or submit a review. Charbie Chloe is established in the Netherlands and is the controller of the personal information we process for our store. Our contact details are provided at the end of this policy.

1. Information we collect

• Contact and order information: Your name, email address, telephone number, billing and delivery addresses, items ordered, payment status and transaction records. Payment providers process payment credentials through checkout.
• Messages and submissions: Information you send through email, telephone or our contact form, including order queries, return requests, photographs you provide and reviews you choose to submit.
• Website and device information: IP address, browser and device details, pages and products viewed, shopping-cart activity, approximate location derived from your connection and cookie or similar identifiers. The collection of optional tracking information depends on your privacy choices.
• Preferences: Your language, marketing subscriptions, consent choices and privacy requests.

We receive information directly from you, automatically through our store and from providers that help us process payments, fulfill orders, prevent fraud and operate the website. You do not have to subscribe to marketing to place an order or contact us. Without the information needed to take payment, deliver a purchase or handle your request, we may not be able to provide that service.

2. How we use information

We use the information needed to process and deliver orders, provide customer service, handle returns and refunds, and communicate about purchases. These activities support our contract with you or the steps you request before a purchase.

We also keep records required by law, including accounting and transaction records. We rely on our legitimate interests to protect the store against fraud and misuse, resolve disputes and maintain reliable services, while considering your rights and interests.

Where consent is required, we ask for it before using optional cookies, sending marketing or processing information for the relevant advertising purposes. You can withdraw consent without affecting processing that was lawful before withdrawal. Simply browsing the website, accepting our terms or buying a product is not consent to all marketing or tracking.

3. Who receives information

We share information needed for the relevant service with Shopify, payment providers, order-fulfillment and delivery providers, and providers supporting customer communications and product reviews. For example, delivery providers need the recipient's details, while a payment provider needs information to authorize and process a payment. Our order-tracking service uses CWILL (Parcel Panel), and our review service is provided through Judge.me. Reviews submitted for publication can be visible to other visitors, so do not include private information you do not want published.

We may disclose information when required by law, to respond to valid legal requests, protect rights and prevent fraud, or in connection with a business transfer subject to applicable safeguards. Order records, device identifiers and contact information can identify or relate to you, including when collected automatically.

4. Shopify and advertising-related data sharing

Shopify hosts this store and processes information about visits, interactions and purchases. Shopify Network Intelligence is enabled. It allows Shopify to use interactions with this store together with interactions with other merchants and Shopify to provide enhanced services, including improved shopping experiences and advertising-related services, subject to applicable consent and privacy choices.

Some advertising-related uses can count as a “sale,” “sharing” or “targeted advertising” under US state privacy laws, even when information is not exchanged for money. You can use our data sharing opt-out page where the regional control is available, and contact us through the details below for help exercising your rights.

For Shopify's own processing and choices, read the Shopify Consumer Privacy Policy and visit Shopify's privacy portal.

5. Cookies, tracking and browser signals

Essential cookies support functions such as the cart, checkout, security and saved privacy choices. Optional technologies support analytics, personalization or advertising. Use the cookie banner and its preferences to accept or reject optional categories and change your choice. You can reopen these controls through “Cookie preferences” in the footer. You can also control cookies through your browser, although blocking essential cookies may affect shopping functions.

Service providers may collect information about activity over time and across websites through the technologies described above, according to your choices and the services enabled. We do not treat the older browser “Do Not Track” setting as a cookie-consent choice. It is different from Global Privacy Control (GPC).

Shopify's data sharing controls recognize GPC as an opt-out signal in the regions where those controls apply. You can also use the opt-out page or contact us. A choice made in one browser or device may need to be repeated on another browser or device.

6. Marketing choices

You can unsubscribe from marketing emails using the unsubscribe link in an email or by contacting us. We will continue to send necessary order, payment, delivery and customer-service messages. Withdrawing from marketing does not cancel an order.

7. How long we keep information

We keep information for the time needed for its purpose and applicable legal requirements. Order and accounting records are retained for the required statutory period; core business records under Dutch rules generally need to be retained for at least seven years. Customer-service records are kept as needed to resolve the matter, handle related claims and meet legal obligations.

Marketing preferences are retained while needed to manage your subscription and respect an unsubscribe request. Published reviews remain associated with the review service and product while used for that purpose, subject to applicable deletion rights. Cookie lifetimes depend on the cookie and are separate from the retention of order records. When information is no longer needed, we delete or anonymize it, subject to legal retention requirements and backup cycles.

8. International processing and security

We are based in the Netherlands, and providers may process information in other countries, including the United States. Where European data protection law requires safeguards for an international transfer, the applicable transfer must use a recognized legal mechanism, such as an adequacy decision or appropriate contractual safeguards. Shopify describes its transfer safeguards in its Data Processing Addendum. Contact us for information about safeguards relevant to your data.

We use administrative and technical measures intended to protect personal information. No website, transmission or storage system can be guaranteed completely secure. Please do not send full payment-card details or unnecessary sensitive information through the contact form or ordinary email.

9. Your privacy rights

Depending on the law applying to your information, you may request access to a copy of your information, correction, deletion, restriction of processing or portability. You may also object to processing based on legitimate interests, withdraw consent, or opt out of certain data sharing, profiling or targeted advertising. Some information must be retained to meet legal obligations or handle an outstanding transaction or claim.

To make a request, email info@charbiechloe.com with “Privacy request” in the subject, or use our contact form. Tell us the request and the contact details associated with your order or interaction. We may ask for reasonable information to verify your identity; do not send identity documents unless we explain why they are necessary. An authorized representative may submit a request where permitted, subject to appropriate authorization and verification.

We respond to privacy requests within the applicable legal deadline and explain any permitted extension. Our commitment to reply within one business day is an initial customer-service response, not a promise to complete every privacy request within that time. Where applicable, you can appeal a decision by contacting us with the original request and asking for a review. We do not unlawfully discriminate against you for exercising privacy rights.

You can also complain to a competent data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens. US residents may contact the relevant state authority where applicable.

10. Children

The store is intended for a general adult shopping audience and is not directed to children under 13. We do not knowingly collect children's personal information for our services. If you believe a child has provided information, contact us so we can review and address it.

11. Changes to this policy

We may update this policy to reflect changes to our services, practices or legal requirements. The effective date appears at the top. Where a material change requires additional notice or consent, we will provide it as required rather than treating the update itself as consent.