Privacy policy
This Privacy Policy applies to caribis.us, our online store, and related customer communications. It explains what information we collect, why we use it, who may receive it, and the choices and rights available to you. Separate consent may be requested for optional uses such as marketing or publication of customer photographs.
1. Overview and Scope
Caribis ("Caribis," "we," "us," or "our") operates the website https://caribis.us (the "Site") and provides bridal, corsetry, made-to-order, made-to-measure, and related services. This Privacy Policy applies when you visit the Site, create an account, place an order, contact us, submit measurements or design information, leave a review, or otherwise interact with Caribis.
By using the Site, you acknowledge the practices described in this Policy. This Policy does not replace any rights provided by applicable data protection or consumer privacy law.
2. Data Controller and Contact
For personal information collected through the Site and direct customer communications, Caribis is the controller or business responsible for deciding how and why the information is used, except where a service provider acts as an independent controller under its own policy.
Privacy requests and questions: support@caribis.us
Postal address: Molodi Ave. 10, Lutsk, Volyn Region, 43024, Ukraine
3. Personal Information We Collect
The information we collect depends on how you interact with us and may include:
• Identity and contact information: name, email address, telephone number, billing address, shipping address, and account details.
• Order and transaction information: products ordered, size, color, price, discounts, payment status, order history, invoices, shipping method, tracking details, returns, exchanges, and customer service records.
• Custom-order and fitting information: body measurements, fit preferences, event date, design requests, sketches, fabric and embellishment selections, alteration notes, and photographs or videos you choose to provide for fitting or order coordination.
• Payment-related information: payment method, transaction identifier, billing details, and limited information supplied by payment providers. Full card numbers are processed by secure payment providers and are not stored by Caribis on our own servers.
• Device and usage information: IP address, browser and device type, operating system, time zone, cookie identifiers, pages or products viewed, searches, referring pages, interactions with the Site, and approximate location derived from IP address.
• Communications and user content: emails, messages, customer support requests, reviews, survey responses, feedback, and any photographs or videos you submit.
• Marketing preferences: newsletter subscription status, cookie choices, and preferences relating to promotional communications or personalized advertising.
4. How We Collect Information
We collect personal information:
Directly from you when you place an order, create an account, complete a measurement form, contact us, submit content, request a return, or subscribe to marketing.
• Automatically through cookies, pixels, log files, and similar technologies when you use the Site.
• From service providers and business partners, such as Shopify, payment processors, fraud-prevention providers, shipping carriers, analytics providers, advertising platforms, and customer-support tools.
• From publicly available sources or social media only where permitted by law and relevant to an interaction you initiate with Caribis.
5. How We Use Personal Information
We may use personal information to:
• Provide, personalize, and improve the Site, products, and services.
• Accept and process orders, deposits, final balances, refunds, and exchanges.
• Create and fit made-to-order or made-to-measure garments and coordinate design approvals, production updates, alterations, and delivery.
• Verify orders, prevent fraud, manage payment risk, and protect the security of our Site and customers.
• Arrange shipping through carriers such as DHL Express or Nova Post and communicate delivery or customs information.
• Respond to questions, resolve complaints, and provide customer support.
• Maintain business, accounting, tax, warranty, and legal records.
• Send transactional messages and, where permitted, marketing communications about products, services, and offers.
• Measure Site performance, understand customer interests, and improve marketing, subject to cookie and consent requirements.
• Establish, exercise, or defend legal claims and comply with applicable law, court orders, and lawful government requests.
6. Legal Bases for Processing
Where the GDPR, UK GDPR, or similar law applies, we rely on one or more of the following legal bases:
• Contract: to process an order, produce a garment, receive payment, deliver products, and provide customer service.
• Legal obligation: to maintain tax and accounting records, respond to lawful requests, and comply with applicable consumer and business laws.
• Legitimate interests: to operate and secure the Site, prevent fraud, improve services, communicate with customers, and protect our legal rights, where those interests are not overridden by your rights.
• Consent: for optional marketing, non-essential cookies, or publication of customer photographs where consent is required. You may withdraw consent at any time for future processing.
• Other lawful bases: where necessary to protect vital interests or perform a task in the public interest, if applicable.
7. Custom Measurements, Photographs, and Design Materials
Measurements, fitting photographs, videos, sketches, and design preferences are used to prepare, produce, fit, and support your order. Please submit only information that is necessary for the order and that you are authorized to provide.
We will not use a customer’s private fitting or wedding photographs for public marketing, social media, advertising, or portfolio purposes without separate permission. Consent to future public use may be withdrawn by contacting us, subject to materials already lawfully published or produced before withdrawal.
8. How We Share Personal Information
We may disclose personal information only as reasonably necessary for the purposes described in this Policy, including to:
• Shopify and e-commerce service providers that host and operate the Site.
• Payment processors, banks, PayPal, and fraud-prevention providers that authorize or process transactions. • Shipping, logistics, customs, and delivery providers, including DHL Express and Nova Post, to deliver orders and resolve delivery issues.
• Cloud hosting, email, customer support, analytics, advertising, and information-security providers. • Professional advisers such as accountants, auditors, insurers, and legal counsel.
• Government authorities, courts, regulators, or law enforcement where disclosure is required or permitted by law.
• A buyer, successor, or adviser in connection with a merger, sale, restructuring, financing, or transfer of all or part of our business, subject to appropriate safeguards.
Service providers may use information only for the services they provide to us or as otherwise permitted under their own legally applicable terms and privacy notices.
9. Shopify and Payment Providers
Our online store is hosted by Shopify. Shopify processes certain information to provide checkout, storefront, fraud prevention, account, analytics, and related services. Shopify may act as our processor or service provider and, for some features, as an independent controller under its own privacy policy.
Payments may be processed through Shopify-supported card processors, PayPal, or, when arranged directly with Caribis, a bank transfer provider. Payment providers receive the information required to authorize and complete the transaction. Caribis does not store full payment-card numbers on its own servers.
10. Cookies, Analytics, and Advertising
The Site uses cookies and similar technologies that may be necessary for checkout, security, account functions, language or region settings, analytics, and advertising. Some cookies are essential; others are used only where permitted by your settings or consent.
Depending on the tools enabled on the Site, analytics or advertising partners may receive device, cookie, browsing, and transaction-related information to measure performance, prevent fraud, or show relevant advertising. You can manage non-essential cookies through the Site’s cookie or privacy settings and through your browser settings. Blocking some cookies may affect Site functionality.
Where required by applicable law and supported by our technology, we also recognize valid opt-out preference signals, such as Global Privacy Control. A browser “Do Not Track” signal may not be interpreted consistently unless applicable law requires a response.
11. Marketing Communications
We may send marketing emails or messages when you have subscribed, consented, or where another lawful basis permits. You can unsubscribe using the link in a marketing email or by contacting support@caribis.us. Transactional communications about an order, payment, production, delivery, or policy update are not marketing and may still be sent when necessary.
12. International Data Transfers
Caribis serves customers internationally and uses service providers located in multiple countries. Your personal information may therefore be processed outside your country of residence, including in Ukraine, the European Economic Area, Canada, and the United States. Privacy laws in those countries may differ from those in your country.
Where required, we and our service providers use recognized safeguards for international transfers, such as adequacy decisions, binding corporate rules, standard contractual clauses, or other lawful transfer mechanisms.
13. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to complete and support orders, maintain design and production records, comply with accounting and tax requirements, resolve disputes, prevent fraud, and enforce agreements.
Retention periods vary by the type of information and applicable law. Marketing information is retained until you unsubscribe or withdraw consent, subject to a limited suppression record so we can respect your choice. When information is no longer required, we delete, anonymize, or securely isolate it where appropriate.
14. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including secure service providers, access controls, and encrypted transmission for payment information. No method of Internet transmission or electronic storage is completely secure, so absolute security cannot be guaranteed.
Please protect your account credentials and contact us promptly if you believe your account, payment, or personal information has been misused.
15. Automated Decision-Making and Fraud Prevention
Caribis does not use customer information to make solely automated decisions that produce legal or similarly significant effects. Shopify, payment providers, and fraud-prevention services may use automated signals to identify suspicious transactions, temporarily block repeated failed attempts, or request additional verification. Where applicable law provides rights regarding such processing, you may contact us to request information or human review.
16. Your Privacy Rights
Depending on where you live and subject to legal exceptions, you may have the right to:
• Request access to or a copy of personal information we hold about you. • Request correction of inaccurate or incomplete information.
• Request deletion of personal information.
• Request restriction of or object to certain processing.
• Receive certain information in a portable format.
• Withdraw consent for future processing where consent is the legal basis.
• Opt out of marketing, targeted advertising, or certain disclosures where the law provides that right. • Appeal a decision concerning a privacy request where applicable.
To exercise a right, email support@caribis.us and describe your request. We may need to verify your identity and may ask for information reasonably necessary to locate your records. You may also use an authorized agent where permitted by law. We will not discriminate against you for exercising a privacy right.
Residents of the EEA, UK, or Switzerland may also complain to their local data protection authority. We encourage you to contact us first so we can try to resolve the concern.