This Privacy Policy describes how cestrainbow.com (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Who we are

Our website address is: https://www.cestrainbow.com.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us through the email contact@cestrainbow.com.

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

Device information

• Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
• Source of collection: Collected automatically when you access our Site using cookies, log files, tags, or pixels.
• Disclosure for a business purpose: shared with our processor Woocommece and Google.
• Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.

Order information

• Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
• Source of collection: collected from you.
• Disclosure for a business purpose: shared with our processor Woo-commerce, GLS, and DHL.
• Personal Information collected: name, billing address, shipping address, payment information, email address, and phone number.

Customer support information

• Disclosure for a business purpose: The business of selling cestrainbow products.
• Personal Information collected: name, message of the inquiry, email.
• Purpose of collection: to provide customer support.
• Source of collection: collected from you
• Disclosure for a business purpose: to provide customer support.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

• We use Woo-commerce to power our online store. You can read more about how Woo-commerce uses your Personal Information here: https://woocommerce.com/documentation/woocommerce/get-help/privacy/
• We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
• We may share information with logistic service providers such as GLS and DHL to fulfil orders placed by you.

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
• We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).

You can opt out of targeted advertising by:

FACEBOOK – https://www.facebook.com/settings/?tab=ads
GOOGLE – https://www.google.com/settings/ads/anonymous

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/.

Using Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

Lawful basis

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

• Your consent;
• The performance of the contract between you and the Site;
• Compliance with our legal obligations;
• To protect your vital interests;
• To perform a task carried out in the public interest;
• For our legitimate interests, which do not override your fundamental rights and freedoms.

Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We DO NOT engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

• Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
• Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.

Your Rights

GDPR

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above.

Your Personal Information is stored and processed on servers provided by our hosting provider, Bigscoots, located in the United States. This means that when you use our website, your data may be transferred from your country of residence (including the European Union/European Economic Area) to the United States.

We rely on appropriate safeguards for such data transfers in accordance with the GDPR, including Standard Contractual Clauses (SCCs) approved by the European Commission, and the commitments of our hosting provider to data privacy and security.

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

Check here for more information: https://woocommerce.com/document/woocommerce-cookies/

Cookies set by WooCommerce

Cookies are used by WooCommerce in a variety of ways.

Cookies depend on specific features that are enabled on a store. The cookies are active when a user interacts with one of these features or to allow admin functions to be performed from within the store’s dashboard (/wp-admin).

Details are provided in tables below, listing various cookies that are set for users of stores with the WooCommerce plugin installed.

Store front end:

Cookie Name	Duration	Purpose
woocommerce_cart_hash	session	Helps WooCommerce determine when cart contents/data changes.
woocommerce_items_in_cart	session	Helps WooCommerce determine when cart contents/data changes.
wp_woocommerce_session_	2 days	Contains a unique code for each customer so that it knows where to find the cart data in the database for each customer.
woocommerce_recently_viewed	session	Powers the Recent Viewed Products widget.
store_notice[notice id]	session	Allows customers to dismiss the Store Notice.

No personal information is stored within these cookies.

Store dashboard (/wp-admin):

Cookie Name	Duration	Purpose
woocommerce_snooze_suggestions__[suggestion]	2 days	Allows dashboard users to dismiss Marketplace suggestions, if enabled.
woocommerce_dismissed_suggestions__[context]	1 month	Count of suggestion dismissals, if enabled.
tk_ai	session	Stores a randomly-generated anonymous ID. This is only used within the dashboard (/wp-admin) area and is used for usage tracking, if enabled.

Cookies Necessary for the Functioning of the Store

We use certain cookies that are essential for our store to function properly. These cookies enable basic features such as keeping track of your shopping cart, maintaining your session, and ensuring secure checkout. Without these cookies, the website cannot operate correctly.

Cookie Name	Purpose	Duration
woocommerce_cart_hash	Helps WooCommerce determine when cart contents/data change.	Session
woocommerce_items_in_cart	Helps WooCommerce determine when cart contents/data change.	Session
wp_woocommerce_session_*	Contains a unique code for each customer so WooCommerce knows where to find the cart data in the database.	2 days
store_notice[notice id]	Allows customers to dismiss the Store Notice.	Session

Reporting and Analytics

Cookie Name	Purpose	Duration	Provider
_ga	Used to distinguish users in Google Analytics.	2 years	Google
_gid	Used to distinguish users in Google Analytics.	24 hours	Google
_gat	Used to throttle request rate in Google Analytics.	1 minute	Google
_fbp	Used by Facebook to deliver advertising and measure website usage.	3 months	Meta (Facebook)
mailchimp_landing_site	Used by Mailchimp to track newsletter signups.	1 month	Mailchimp

Cookies Duration and Control

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you close your browser, while persistent cookies remain until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years after being placed on your device.

You can control and manage cookies through your browser settings. Please note that disabling or blocking cookies may affect the functionality of our website and some features may no longer be available. Most browsers automatically accept cookies, but you can usually find options to manage them in the “Tools” or “Preferences” menu.

Do Not Track

Some browsers offer a “Do Not Track” (DNT) setting that signals to websites that you do not wish to be tracked. Currently, there is no industry standard for how websites should respond to these signals. Therefore, our website does not alter its data collection and usage practices when we receive a DNT signal.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Visitor comments may be checked through an automated spam detection service.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Complaints

As noted above, if you would like to make a complaint, please contact us at contact@cestrainbow.com