1. INTRODUCTION

Your privacy is important to us, Celeste D’or Curve (“Celeste D’or Curve”, “we” or “us”). This Privacy Policy (Privacy Policy or Policy) outlines how your information is collected, used and disclosed when you access or use our Services. This information is collected, used and disclosed in accordance with applicable privacy and data protection laws.

For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By accessing or using our Services, you agree to the collection and use of information in accordance with this Policy.

2. WHAT INFORMATION DO WE COLLECT AND HOW IS IT COLLECTED?

We collect Personal Information when you access or use our Services. The types of personal information we obtain depends on how you interact with our Site and use our Services. When we use the term “personal information”, we refer to information that identifies, relates to, describes or can be associated with you.

2.1 Information provided by you

We collect information that you directly submit to us through our Services as well as through any other means used to contact us.

The kinds of personal information we collect include:

  • Contact details including your name, address, phone number, and email address

  • Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number

  • Account information including your username, password, security questions and other information used for account security purposes

  • Customer support information including the information you choose to include in communications with us

Some features of the Services may require you to directly provide us with certain information. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

2.2 Automatically collected Personal Information

We automatically record certain information from your device and its software when you access our Services (“Usage Data”). To do this, we may use cookies, pixels and similar technologies. Usage Data may include:

  • Device and browser information, including IP address, operating system, and browser type

  • Network connection information and internet service provider

  • Pages visited, features used, and navigation patterns on our Site

  • Date and time stamps of your visits

  • Geographical location data (country and city area) derived from your IP address


2.3 Personal Information collected via cookies

Our Services use cookies — small text files stored on your device — to recognise your device, remember your preferences, compile usage statistics, and personalise content. Cookies do not usually contain information that directly identifies you.

Most browsers automatically accept cookies by default, but you can choose to set your browser to remove or reject cookies through your browser controls. Please be aware that removing or blocking cookies may negatively impact your user experience and may cause some features of the Services to work incorrectly or no longer be available.

Please note that while your browser may allow you to transmit a “do not track” signal, our Site is not currently designed to respond to such signals. To learn more, visit http://www.allaboutdnt.com/.

2.4 Information obtained from third parties

We may obtain information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

  • Companies who support our Site and Services, such as Shopify

  • Payment processors who collect payment information (e.g., bank account, credit or debit card information, billing address) to process payments and fulfill orders

  • Analytics providers, including Google Analytics, Facebook Pixels, TikTok Pixels, and Pinterest Pixels

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. Also see the section below, Third Party Websites and Links.

3. FOR WHAT PURPOSES DO WE COLLECT AND USE PERSONAL INFORMATION?

We collect your personal information for the following purposes:

  • To provide the Services, including processing payments, fulfilling orders, and managing your account

  • To send notifications related to your account, purchases, returns, exchanges, or other transactions

  • To arrange for shipping and facilitate returns and exchanges

  • To send marketing, advertising and promotional communications by email, text message or postal mail

  • To better tailor the Services and advertising on our Site and other websites

  • To detect, investigate or take action regarding possible fraudulent, illegal or malicious activity

  • To provide customer support and improve our Services

  • To comply with applicable legal obligations and enforce our Terms of Service

  • To protect or defend the Services, our rights, and the rights of our users or others

We may also enhance your shopping experience by enabling Shopify to match your account with other Shopify services you choose to use. In this case, Shopify will process your information as set forth in its Privacy Policy and Consumer Privacy Policy.

4. HOW DO WE STORE AND PROTECT YOUR INFORMATION?

4.1 Storage of Personal Information

Your personal information is transferred and stored electronically via a secured SSL connection in secured, password-protected servers. We take reasonable technical and organisational steps to protect your personal information against unauthorised access, loss, misuse, or disclosure.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security. Any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

4.2 Retention of Personal Information

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce applicable contracts and policies. We will not retain your personal information for longer than is necessary for the purposes outlined in this Policy.

5. TO WHOM IS YOUR PERSONAL INFORMATION DISCLOSED?

In certain circumstances, we may disclose your personal information to third parties. Such circumstances may include:

5.1 Service providers

We may disclose your personal information to vendors and third parties who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping providers.

5.2 Business and marketing partners

We may share your personal information with business and marketing partners to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.

5.3 Corporate transactions

We may disclose your personal information in connection with a business transaction such as a merger, sale of assets, reorganisation, financing, or acquisition of all or a portion of our business by another company or third party, or in the event of bankruptcy or dissolution.

5.4 Legal requirements

We may disclose your personal information to comply with any applicable legal obligations, including to respond to subpoenas, search warrants and similar requests, to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

5.5 With your consent

When you direct, request, or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.

We have in the past 12 months disclosed the following categories of personal information: identifiers, contact details, order and account information, commercial information, internet or network activity, and geolocation data.

We do not use or disclose sensitive personal information without your consent or for the purposes of inferring characteristics about you.

6. SMS MARKETING PROGRAM

6.1 SMS Program Description

By consenting to Celeste D’or Curve’s SMS marketing, you agree to receive recurring automated promotional and transactional text messages (e.g., order confirmations, shipping updates, cart reminders, and marketing offers) at the phone number you have provided. Consent is not a condition of any purchase. Message and data rates may apply. Message frequency varies.

6.2 Data Collection & Use

When you opt in to our SMS program, we collect and use the following information:

  • Your mobile phone number

  • Your SMS consent status and opt-in date

  • Information related to your interactions with our text messages (e.g., delivery status, responses)

  • Browsing and shopping activity on our website, including items added to your cart (see Abandoned Cart section below)


6.3 Third-party data sharing

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your personal data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

6.4 Abandoned Cart SMS

This website uses cookies and similar tracking technologies to help keep track of items you place into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send you cart reminder messages via SMS. You may opt out of abandoned cart reminders at any time by replying STOP to any message you receive.

6.5 Opt-Out & Help

You can opt out of receiving SMS messages at any time by replying STOP to any message or by clicking the unsubscribe link included in our text messages. After opting out, you will receive a one-time confirmation message and will no longer receive SMS messages from us unless you re-subscribe. For assistance, reply HELP to any message.

7. THIRD PARTY WEBSITES AND LINKS

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

8. CHILDREN’S DATA

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

9. YOUR RIGHTS

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

9.1 Summary of rights

  • Right to Access / Know: You may request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.

  • Right to Delete: You may request that we delete personal information we maintain about you.

  • Right to Correct: You may request that we correct inaccurate personal information we maintain about you.

  • Right of Portability: You may request a copy of the personal information we hold about you and request that we transfer it to a third party, in certain circumstances and with certain exceptions.

  • Right to Restrict Processing: You may ask us to stop or restrict our processing of personal information.

  • Right to Withdraw Consent: Where we rely on consent to process your personal information, you may withdraw this consent at any time.

  • Right to Appeal: You may have a right to appeal our decision if we decline to process your request by replying directly to our denial.

  • Right to Opt Out of Marketing: You may opt out of receiving promotional emails at any time by using the unsubscribe option in our emails. If you opt out, we may still send you non-promotional emails about your account or orders.

9.2 Exercising your rights

You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below. We will respond to your request within 45 days as required under applicable law (with a possible extension of an additional 45 days when reasonably necessary).

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before providing a substantive response. You may also designate an authorised agent to make requests on your behalf, provided that agent supplies proof of your authorisation.

10. INTERNATIONAL USERS

Please note that we may transfer, store and process your personal information outside the country you live in. Your personal information is also processed by staff and third party service providers and partners in these countries.

If we transfer your personal information out of Europe, we will rely on recognised transfer mechanisms like the European Commission’s Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

11. AMENDMENTS

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date and take any other steps required by applicable law. We encourage you to review this Policy periodically to stay informed about how we protect your information.

12. COMPLAINTS

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision or lodge your complaint with your local data protection authority.

For EEA residents, you can find a list of the responsible data protection supervisory authorities at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

13. CONTACT US

All requests for access or corrections to your personal information and complaints should be directed to our Privacy Officer. If submitting a complaint, please provide full details and any supporting documentation:

  • By email at: support@us.celeste-dor.com

  • By contact form at: us.celeste-dor.com

For the purpose of applicable data protection laws and if not explicitly stated otherwise, we are the data controller of your personal information.