CarryRise Ltd ("CarryRise", "we", "us", "our") operates this storefront and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described below.
Information we collect
When we use the term "personal information," we mean information that identifies or can reasonably be linked to you. It does not include information that has been anonymised or de-identified. Depending on how you interact with the Services, where you live, and as permitted or required by law, we may collect or process the following:
- — Contact details. Your name, billing and shipping addresses, phone number and email.
- — Order & payment information. Items you view, add to cart, purchase, return or cancel; your past transactions; payment confirmation. Card numbers themselves are handled by our payment processor — we never see or store them.
- — Account information. Username, password (hashed), preferences and settings.
- — Communications. Anything you include when you contact us — for example, customer support emails.
- — Device information. Your device, browser, network connection, IP address and other unique identifiers.
- — Usage information. How and when you interact with the Services.
Where it comes from
We may collect personal information from the following sources:
- — Directly from you. When you create an account, place an order, contact us, or otherwise share information.
- — Automatically through the Services. From your device when you visit our website, including via cookies and similar technologies.
- — From our service providers. When we engage them to provide payment, fulfilment, analytics or support, and they collect or process information on our behalf.
- — From partners or other third parties. Such as marketing platforms or advertising networks, where you have consented.
How we use your information
Depending on how you interact with us, we may use personal information for the following purposes:
- — Provide and improve the Services. Process your payments, fulfil your orders, manage your account, arrange shipping, handle returns and exchanges, remember your preferences, and tailor recommendations.
- — Marketing and advertising. Send marketing emails (only if you've opted in) and show relevant ads. You can unsubscribe at any time using the link in any marketing email.
- — Security and fraud prevention. Authenticate accounts, secure payments, detect and prevent fraud, abuse or unsafe activity.
- — Communicating with you. Provide customer support and respond to your questions.
- — Legal reasons. Comply with applicable law, respond to lawful requests from authorities, enforce our terms, or defend our rights and the rights of others.
How we disclose information
In certain circumstances, we may share your personal information with third parties for legitimate purposes, including:
- — Vendors and service providers who work on our behalf — payment processing, fulfilment and shipping, IT and cloud hosting, analytics, customer support and email delivery.
- — Marketing partners, where you have consented to receive personalised advertising. Each partner uses your information in accordance with their own privacy notice.
- — Other parties when you direct us to share certain information — for example, to ship you a product or to use a social-login integration.
- — Affiliates within our corporate group.
- — Legal authorities, in connection with a business transaction (such as a merger), to comply with legal obligations (subpoenas, search warrants and similar requests), or to enforce our terms and protect our rights and the rights of our users.
We do not sell your personal information.
Our platform & service providers
Our storefront is built on Solidus (an open-source Ruby on Rails commerce platform) and runs on infrastructure we operate ourselves. We work with a small set of trusted service providers to deliver the Services:
- — Payments. Card and wallet payments are processed by our payment provider (Stripe). We never see or store full card numbers.
- — Shipping. Order details are shared with our shipping carriers and fulfilment partners to deliver your order.
- — Email. Transactional emails (order confirmations, shipping updates) and any marketing emails you opt into are sent by our email service provider.
- — Analytics. We use privacy-respecting analytics to understand how the website is used and improve it.
Each provider is contractually required to handle your information in line with this Policy and applicable data-protection law.
Third-party websites & links
The Services may include links to websites operated by third parties. If you follow a link to a site we don't control, you should review its privacy and security policies before sharing any information. Our inclusion of a link does not imply endorsement.
Children's data
The Services are not intended for children, and we do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you are a parent or guardian and believe a child has provided us with their personal information, please contact us at privacy@carryrise.com and we will delete it.
Security & retention
We use technical and organisational measures to protect your information, including encryption in transit (HTTPS), hashed passwords, and access controls. No system is perfectly secure, however — please don't send sensitive information over unsecure channels.
How long we keep your personal information depends on the purpose: account data is kept while your account is active; order records are retained for as long as needed to fulfil legal, tax and accounting obligations; marketing data is kept until you unsubscribe.
Your rights & choices
Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances.
- — Right to access. Request a copy of the personal information we hold about you.
- — Right to delete. Request that we delete personal information we hold about you.
- — Right to correct. Request that we correct inaccurate information.
- — Right to portability. Receive a copy of your personal information in a portable format and request that we transfer it to a third party.
- — Right to opt out of marketing. Unsubscribe from marketing emails at any time using the link at the bottom of any marketing email.
If you are in the UK or European Economic Area (and subject to local-law exceptions), you also have the right to object to or restrict processing for certain purposes, and the right to withdraw consent where we rely on it (without affecting the lawfulness of processing carried out before withdrawal).
To exercise any of these rights, email privacy@carryrise.com. We may need to verify your identity before responding, and we will reply within the timeframes required by applicable law.
Complaints
If you have a complaint about how we process your personal information, please contact us first using the details below — we'd like the chance to put it right. If you live in the UK, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO). EEA residents can contact their local data-protection authority.
International transfers
We may transfer, store and process your personal information outside the country you live in. Where we transfer information out of the UK or EEA, we rely on recognised transfer mechanisms — such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses — unless the destination has been determined to provide an adequate level of protection.
Changes to this policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons. When we do, we'll post the revised policy here, update the "Last updated" date, and provide notice as required by applicable law.
Contact us
Questions about our privacy practices, this Policy, or your rights? Get in touch:
20 Wenlock Road, London N1 7GU, United Kingdom
For the purpose of UK and EU data-protection law, CarryRise Ltd is the data controller of your personal information.