Privacy policy

<main id="MainContent" class="content-for-layout focus-none" role="main" tabindex="-1">
<div class="shopify-policy__container">
<div class="shopify-policy__title">
<h1>Privacy Policy</h1>
</div>
<div class="shopify-policy__body">
<div class="rte">

<h2>Privacy Policy — Charmese</h2>
Last updated: June 28, 2026
Charmese operates charmese.com to provide a safe and personalized shopping experience to customers around the world. This Privacy Policy describes how we collect, use, store, share and protect your personal information when you use our services, regardless of the country you are in.
By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

<h3>1. Who We Are</h3>
Charmese is the controller of your personal information under applicable data protection laws. For the purposes of the EU/UK GDPR, we are the Data Controller; for Brazil's LGPD, we are the Controlador; in other countries, we assume the equivalent role under local law.
Email: <a href="mailto:support@charmese.com">support@charmese.com</a>
Phone/SMS: <a href="tel:+15055325860">+1 (505) 532-5860</a>
Address: 500 4th St NW, Ste 102, Albuquerque, NM 87102, United States

<h3>2. Personal Information We Collect</h3>
<ul>
<li>Identity and contact details: full name, shipping address, billing address, phone number and email address.</li>
<li>Payment information: credit or debit card details, payment account information and transaction details. Payment data is processed exclusively by certified providers (Shopify Payments, Stripe, PayPal, etc.) and is not stored on our servers.</li>
<li>Account information: username, encrypted password, preferences and settings.</li>
<li>Transaction information: order history and items viewed, added to cart, purchased, returned or canceled.</li>
<li>Communications: the content of emails, chats or messages exchanged with our support team.</li>
<li>Device and usage information: IP address, browser type and version, operating system, pages visited, time spent, referral source (links, ads, etc.) and unique device identifiers.</li>
<li>Location information: approximate location based on your IP address or shipping address.</li>
<li>Cookies and tracking data: information collected through cookies, tracking pixels and similar technologies (see Section 7).</li>
</ul>

<h3>3. How We Collect Your Information</h3>
<ul>
<li>Directly from you when you make a purchase, create an account, fill out forms or contact support.</li>
<li>Automatically, through cookies and tracking technologies when you browse our site.</li>
<li>From fulfillment and logistics partners that process and ship your orders.</li>
<li>From payment providers when processing transactions.</li>
<li>From marketing and advertising platforms (Meta, Google, TikTok, etc.) when displaying ads.</li>
<li>From analytics services (Google Analytics, etc.).</li>
</ul>

<h3>4. Why We Use Your Information</h3>
<ul>
<li>Order processing: processing payments, coordinating shipping with our global fulfillment partners, and handling returns and refunds. Legal basis: performance of a contract.</li>
<li>Communication: sending order confirmations, shipping updates and replies to your inquiries. Legal basis: performance of a contract and legitimate interests.</li>
<li>Marketing: sending promotional emails or SMS messages and showing personalized ads. Legal basis: consent (where required by law) or legitimate interests.</li>
<li>Service improvement: analyzing user behavior to improve the shopping experience. Legal basis: legitimate interests.</li>
<li>Fraud prevention: detecting and preventing suspicious activity. Legal basis: legitimate interests and compliance with legal obligations.</li>
<li>Legal compliance: meeting legal, tax and regulatory obligations in the countries where we operate. Legal basis: legal obligation.</li>
</ul>

<h3>5. Who We Share Your Information With</h3>
<ul>
<li>Shopify: the e-commerce platform that hosts our store and processes transactions. You can learn more about how Shopify uses personal information at <a href="https://www.shopify.com/legal/privacy" target="_blank">shopify.com/legal/privacy</a>.</li>
<li>Fulfillment and logistics partners: partners that process and ship your orders, who may be located in any country, including China, the United States, the European Union and others.</li>
<li>Payment processors: Shopify Payments, Stripe, PayPal and others, to process transactions securely.</li>
<li>Marketing platforms: Meta Platforms (Facebook/Instagram), Google LLC, TikTok, Pinterest and Snapchat, to display relevant ads.</li>
<li>Email and SMS marketing services: Klaviyo, Mailchimp or similar providers, to send communications.</li>
<li>Analytics services: Google Analytics and similar tools, for traffic analysis.</li>
<li>Legal and regulatory authorities: when required by law, court order or a competent authority in any country.</li>
</ul>
We do not sell, rent or trade your personal information to third parties for their own purposes. Under some U.S. state laws, sharing data with advertising partners for targeted advertising may be considered a "sale" or "sharing"; you can opt out as described in Section 11.

<h3>6. International Data Transfers</h3>
Because we operate globally, your personal information may be transferred to, stored and processed in countries other than your own, including the United States and Canada. We use the following safeguards:
<ul>
<li>European Union and EEA: Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914) or equivalent mechanisms.</li>
<li>United Kingdom: the International Data Transfer Agreement (IDTA) approved by the ICO, or SCCs with the UK Addendum.</li>
<li>Brazil: specific contractual clauses or other mechanisms provided for in Articles 33 to 36 of the LGPD.</li>
<li>Other countries: appropriate contractual or organizational measures under applicable local law.</li>
</ul>

<h3>7. Cookies and Tracking Technologies</h3>
We use first-party and third-party cookies for the following purposes:
<ul>
<li>Essential cookies: required for the site to work (session, shopping cart, security).</li>
<li>Preference cookies: remember your settings and your language, currency and location preferences.</li>
<li>Analytics cookies: Google Analytics and similar tools, to analyze traffic and user behavior.</li>
<li>Marketing cookies: Meta Pixel, TikTok Pixel, Google Ads and similar tools, to show personalized ads and measure campaigns.</li>
</ul>
Where required by law (EU, UK, Brazil and others), we ask for your consent before using non-essential cookies through a consent banner. You can manage or withdraw your preferences at any time through your browser settings or our cookie banner. Disabling essential cookies may affect how the site works.

<h3>8. Data Retention</h3>
We keep your personal information for as long as necessary to fulfill the purposes described in this policy or as required by law. Criteria include the life of your account, applicable statutes of limitation, tax and regulatory obligations, and the resolution of any disputes.

<h3>9. Data Security</h3>
We implement appropriate technical and organizational measures to protect your information, including encryption of data in transit (TLS/SSL), restricted access controls and security monitoring. However, no system is completely secure. We recommend that you do not share your login credentials.

<h3>10. Children</h3>
Our services are not directed to children. The minimum age to use our services varies by region:
<ul>
<li>United States: we do not knowingly collect personal information from children under 13 (COPPA); purchases must be made by adults.</li>
<li>European Union (GDPR): 16 years (may range from 13 to 16 depending on the Member State).</li>
<li>Brazil, Australia, Canada, the United Kingdom and most other countries: 18 years.</li>
</ul>
We do not knowingly collect data from minors. If you are the parent or guardian of a minor who has provided us with personal information, please contact us to request deletion.

<h3>11. Your Privacy Rights by Region</h3>

🇺🇸 United States — California (CCPA/CPRA) and other state privacy laws:
<ul>
<li>Depending on your state of residence, you may have the right to know what personal information we collect; to access, correct or delete it; to opt out of the "sale" or "sharing" of personal information for targeted advertising; and not to be discriminated against for exercising your rights. You may also exercise your opt-out right through the "Your privacy choices" link on our site or by using a Global Privacy Control (GPC) signal, which we honor where required. You may designate an authorized agent to submit a request on your behalf.</li>
</ul>

🇪🇺 European Union and EEA — GDPR (Regulation 2016/679):
<ul>
<li>Access, rectification, erasure ("right to be forgotten"), portability, objection to processing, restriction of processing, withdrawal of consent, and the right to lodge a complaint with the supervisory authority in your country.</li>
</ul>

🇬🇧 United Kingdom — UK GDPR + Data Protection Act 2018:
<ul>
<li>Rights equivalent to the EU GDPR. Complaints may be filed with the Information Commissioner's Office (ICO) at <a href="https://ico.org.uk" target="_blank">ico.org.uk</a>.</li>
</ul>

🇨🇦 Canada — PIPEDA + provincial laws:
<ul>
<li>Access to and correction of your data and withdrawal of consent. Complaints may be filed with the Office of the Privacy Commissioner of Canada at <a href="https://www.priv.gc.ca" target="_blank">priv.gc.ca</a>.</li>
</ul>

🇦🇺 Australia — Privacy Act 1988 + Australian Privacy Principles (APPs):
<ul>
<li>Access to and correction of your data. Complaints may be filed with the Office of the Australian Information Commissioner (OAIC) at <a href="https://www.oaic.gov.au" target="_blank">oaic.gov.au</a>.</li>
</ul>

🇧🇷 Brazil — LGPD (Law No. 13,709/2018):
<ul>
<li>Confirmation of processing; access; correction; anonymization, blocking or deletion; portability; deletion of data processed with consent; information about sharing; withdrawal of consent; and petition to the ANPD.</li>
</ul>

🇸🇬 Singapore — PDPA (Personal Data Protection Act 2012):
<ul>
<li>Access to and correction of personal data. Complaints may be filed with the Personal Data Protection Commission (PDPC).</li>
</ul>

🇯🇵 Japan — APPI (Act on the Protection of Personal Information):
<ul>
<li>Access, correction, suspension of use and deletion of data. Complaints may be filed with the Personal Information Protection Commission (PPC).</li>
</ul>

🌍 Other countries: If your local law grants you additional privacy rights, those rights will be honored. Contact us at <a href="mailto:support@charmese.com">support@charmese.com</a> to exercise any right.

<h3>12. Marketing and Opt-Out</h3>
We may send you promotional communications by email or SMS. You can unsubscribe at any time using the unsubscribe link in each email, by replying STOP to any SMS message, or by emailing <a href="mailto:support@charmese.com">support@charmese.com</a>. Opting out of marketing does not affect transactional messages (order confirmations, shipping updates, etc.). Message and data rates may apply to SMS.

<h3>13. Third-Party Links</h3>
Our site may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their privacy policies before providing any information.

<h3>14. Changes to This Policy</h3>
We may update this Privacy Policy from time to time. The latest version will always be available at charmese.com/policies/privacy-policy with its update date. For material changes, we will notify you by email or through a prominent notice on our site.

<h3>15. How to Exercise Your Rights</h3>
To exercise any right described in this policy, request access, correction or deletion of your data, or file a complaint, please contact us:
Email: <a href="mailto:support@charmese.com">support@charmese.com</a> (subject: "Privacy Request")
Phone/SMS: <a href="tel:+15055325860">+1 (505) 532-5860</a>
Address: 500 4th St NW, Ste 102, Albuquerque, NM 87102, United States
We may need to verify your identity before fulfilling your request. We will respond within the timeframe required by the law of your country (generally within 30 to 45 days).

</div>
</div>
</div>
</main>