Legal
Privacy Policy
Last updated: June 23, 2026
This Privacy Policy explains how [BUSINESS_LEGAL_NAME] (“Rosetza,” “we,” “us,” or “our”) collects, uses, and shares information about you when you visit our website, place an order, or otherwise interact with us.
This policy applies to customers in the United States. By using our website, you agree to the practices described here.
This is a draft template provided for development purposes only and is not legal advice. Please have a qualified attorney review and adapt this document before publishing it.
1. Information We Collect
We collect information you provide directly, information collected automatically as you browse, and information from the third-party services we use to run the store.
- Order information: your name, shipping and billing address, email address, phone number, and the items you purchase.
- Account information: if you create an optional account, the email and password associated with it.
- Newsletter information: the email address you submit to join our mailing list, managed through Klaviyo.
- Payment information: payment card and transaction details are collected and processed directly by our payment processors (Stripe and PayPal). We do not store full payment card numbers on our servers.
- Communications: the contents of messages you send us through our contact form or by email.
- Automatically collected data: device, browser, IP address, pages viewed, and similar usage data gathered through cookies and analytics (Google Analytics 4).
2. How We Use Your Information
- To process, fulfill, and ship your orders and send order-related communications such as confirmations and tracking updates.
- To respond to your questions, requests, and customer support inquiries.
- To send marketing emails and newsletters when you have opted in, and to let you unsubscribe at any time.
- To operate, maintain, secure, and improve our website and product offerings.
- To detect and prevent fraud, abuse, and other unauthorized activity.
- To comply with our legal obligations, including tax and recordkeeping requirements.
3. Cookies and Tracking Technologies
We use cookies and similar technologies to keep your shopping cart working, remember your preferences, understand how the site is used, and measure the performance of our marketing.
We use Google Analytics 4 to understand site traffic and usage. You can control cookies through your browser settings; disabling some cookies may affect how parts of the site function.
4. How We Share Your Information
We do not sell your personal information for money. We share information with service providers who help us operate the store, and only as needed for them to perform their services. These include:
- Stripe — payment processing and fraud prevention.
- PayPal — payment processing for customers who choose PayPal.
- Resend — sending transactional emails such as order and shipping confirmations.
- Klaviyo — managing newsletter subscriptions and marketing email.
- Google Analytics 4 — website analytics and performance measurement.
We may also disclose information to comply with applicable law, enforce our policies, protect our rights, or in connection with a merger, acquisition, or sale of assets.
5. Data Retention
We keep your information for as long as needed to provide our services, fulfill the purposes described in this policy, resolve disputes, and meet our legal, accounting, and tax obligations. Order records are typically retained to satisfy financial and tax recordkeeping requirements.
6. Marketing Choices and CAN-SPAM
If you have opted in to our newsletter, every marketing email includes an unsubscribe link. You can opt out at any time by clicking that link or by emailing us at [SUPPORT_EMAIL]. We will honor your request promptly, consistent with the CAN-SPAM Act. We may still send you non-marketing, transactional messages related to your orders.
7. Your California Privacy Rights
This section applies to California residents under the California Consumer Privacy Act (as amended) and the California Online Privacy Protection Act (CalOPPA).
Subject to applicable law and verification of your identity, you may have the right to:
- Know what personal information we collect about you and how we use and disclose it.
- Request access to a copy of the personal information we hold about you.
- Request deletion of personal information we have collected, subject to legal exceptions.
- Request correction of inaccurate personal information.
- Opt out of any “sale” or “sharing” of personal information as those terms are defined under California law.
- Not receive discriminatory treatment for exercising your privacy rights.
To exercise these rights, contact us at [SUPPORT_EMAIL]. We will respond consistent with applicable California law. As a CalOPPA disclosure, we do not currently respond to browser “Do Not Track” signals.
8. Children’s Privacy
Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at [SUPPORT_EMAIL] and we will take steps to delete it.
9. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes may be communicated through the website or by email where appropriate.
11. Contact Us
For privacy questions or to make a request, contact us at [SUPPORT_EMAIL] or by mail at [BUSINESS_LEGAL_NAME], [BUSINESS_ADDRESS].