Privacy Policy

This Privacy Policy outlines how Rose Sanctuary collects, uses, and protects your personal information when you visit or make a purchase on our website. We respect your privacy and adhere to the EU General Data Protection Regulation (GDPR).

Data Collection

We collect data necessary to process your orders: your name, shipping address, email address and phone number. The courier needs the phone number to deliver your parcel. You enter your card details on Stripe’s payment page; they never reach us.

Data Use

Your information is used solely to fulfill and process your orders, provide customer support, and manage shipping. Details of a checkout that you did not complete are used as described under “Unfinished Checkouts” below.

Data Protection

Your data is stored securely and is only shared with third parties directly involved in completing your order, such as payment processors and shipping providers.

Who Processes Your Data

We use these services to run the shop. Each one receives only the data it needs for its task:

• Stripe processes your payment and receives your name, email address, shipping address, phone number and card details. See Stripe’s privacy policy.
• Supabase stores our order records, the details of unfinished checkouts and “Notify me.” email addresses, in a data centre in Ireland (EU).
• Resend delivers the emails this website sends, such as messages from the contact form. Resend is based in the United States. Transfers to the US are covered by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Resend keeps email data for 30 days.
• Cloudflare hosts this website and, like any web host, processes your IP address when you visit it.
• Cloudflare Web Analytics counts visits to this website: which pages are viewed, the site or search you came from, your browser and device type, your country, and how fast pages load. It sets no cookies and does not identify you or follow you across other websites. Your IP address is used only to work out your country and is not stored for analytics. See Cloudflare’s privacy policy.
• Cloudflare Turnstile checks that a “Notify me.” signup or a contact-form message comes from a person and not a bot. It loads only when you open the “Notify me.” dialog or start filling in the contact form. It processes your IP address and browser signals and may set cookies from challenges.cloudflare.com that are needed for this check. See Cloudflare’s Turnstile privacy policy.
• The postal or courier service that delivers your order receives your name, shipping address and phone number.

Your Rights

You have the right to access your stored data, request corrections, or demand its deletion. For inquiries or requests, please contact us at rosesanctuaryeu@gmail.com.

Restock Notifications

When you use “Notify me.” on a product, we store your email address together with that product. We use it only to email you when the product is available, and never for newsletters or marketing. To have your address removed, email us at rosesanctuaryeu@gmail.com.

Unfinished Checkouts

If you go to checkout but do not pay within one hour, the checkout expires. We then keep what you had in your bag and the details you had already entered on Stripe’s payment page, such as your email address, name, shipping address and phone number. We use them to help you if you contact us about a checkout that did not complete, and to understand why checkouts are not completed so we can improve the shop. We do not use them to email you or for marketing. They are deleted automatically after 90 days. To have them deleted sooner, email us at rosesanctuaryeu@gmail.com.

Cookies And Tracking

This website sets no cookies. It counts visits with Cloudflare Web Analytics (see “Who Processes Your Data” above), which uses no cookies and does not track you as a person. The contents of your bag, the shipping country you choose and a discount code you enter are kept only in your own browser (local storage), and reach us only when you go to checkout.

Changes

This Privacy Policy may be updated periodically to reflect changes in our practices, operations, legal requirements, or regulatory standards.

Complaints

If you have any concerns or wish to file a complaint, please reach out to us via email at rosesanctuaryeu@gmail.com.