Privacy Policy

1. Information We Collect

• Account information: name, email address, and phone number when you create an account.
• Order information: delivery address, items ordered, and payment details. We do not store card numbers — payments are processed securely by Xendit.
• Usage data: pages visited, browser type, and device information collected automatically via Vercel Analytics. No personally identifiable information is linked to this data.
• Communications: messages you send us via email or WhatsApp, and newsletter subscriptions if you opt in.

2. How We Use Your Information

• To process and fulfil your orders.
• To send order confirmations and shipping updates by email.
• To send promotional emails, only if you have subscribed to our newsletter. You can unsubscribe at any time.
• To improve our website and product offering.
• To comply with legal obligations.

3. Third Parties We Share Data With

• Xendit — payment processing. Your payment details are handled directly by Xendit and are subject to their privacy policy.
• Biteship — courier booking. Your name, phone number, and delivery address are shared to arrange delivery.
• Moka POS — point-of-sale system used to record sales and manage inventory.
• SendGrid — used to send transactional and marketing emails.
• Supabase — our database provider, where your account and order data is securely stored.
• We do not sell your personal data to any third party.

4. Data Retention

We retain your account and order data for as long as your account is active or as needed to fulfil orders and comply with legal obligations. You may request deletion of your account and associated data at any time by emailing support.karelab@gmail.com.

5. Cookies

We use essential cookies to keep you logged in and maintain your shopping cart. We do not use third-party tracking cookies or advertising cookies.

6. Your Rights

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent for marketing emails at any time.
• To exercise any of these rights, email us at support.karelab@gmail.com.

7. Security

We take reasonable measures to protect your personal information. All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Payment data is never stored on our servers.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the website after changes constitutes acceptance of the revised policy.

9. Contact

For any privacy-related questions, email us at support.karelab@gmail.com.