Privacy Policy – Carrérouge

‌Effective Date: October 26, 2026‌

This Privacy Policy is issued by Carrérouge SARL, located at 119 Rue de Hollerich, L-1741 Luxembourg, Luxembourg. This document governs the collection, use, storage, disclosure and protection of your personal information when you use our e-commerce shopping website available at www.carrerougesarl.com, and all related services, features, platforms and customer support offerings we provide through the site. We are fully committed to safeguarding the privacy rights of every user who interacts with our platform, and we have designed this policy to be transparent, comprehensive and aligned with applicable data protection regulations in Luxembourg, the European Union and other relevant jurisdictions where our services are accessed. If you have any questions, concerns or requests related to your personal data processing, you can reach out to our data management team at any time via our dedicated contact email: [email protected], or call our customer support line at +352 2619 6708 during our business hours of 9:00 to 18:00 CET, Monday through Friday.

By accessing, browsing, registering an account, placing an order, or using any of the functionalities on www.carrerougesarl.com, you acknowledge that you have read, understood and agreed to all terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our e-commerce platform and any associated services.

1. Categories of Personal Information We Collect

We only collect information that is necessary to deliver a secure, smooth and personalized e-commerce shopping experience to you. The information we gather falls into the following categories:

‌Account Registration and Profile Information‌: When you create a user account on our website, we collect your full name, valid email address, contact phone number, and a securely hashed password for your account access. You may also voluntarily add additional information to your profile such as your date of birth, preferred payment methods, style preferences, and wish list details to enhance your personalized shopping experience.
‌Transaction and Order Fulfillment Information‌: When you place an order on our platform, we collect your billing address, shipping address, payment card details or other payment method information, order history, purchase records, order notes, product customization requests, and delivery preference data. This information is used exclusively to process your payment, arrange for accurate order fulfillment, coordinate logistics and ensure your purchased goods are delivered to the correct location in a timely manner.
‌Technical and Usage Data‌: When you browse our website, our systems automatically collect certain technical information including your device IP address, browser type and version, operating system details, unique device identifiers, time zone settings, language preference, website access timestamps, pages you viewed, links you clicked, search queries you entered on our platform, page load performance data, and the referring website or source that directed you to www.carrerougesarl.com. We also use first-party and necessary third-party cookies to maintain your active session, remember your saved shopping cart items, and optimize the stability and performance of our e-commerce website.
‌Customer Support and Communication Data‌: When you contact our customer service team via email, online chat, phone or other channels, we collect the content of your messages, call recordings (with your prior explicit consent), and any additional information you voluntarily provide to us to resolve your inquiries, process returns or exchanges, address complaints, and improve our overall customer service quality.
‌Voluntarily Submitted Information‌: We may collect additional information that you choose to submit when participating in our customer surveys, promotional event sign-ups, loyalty program registration, product review submissions, social media sharing activities, or other interactive features available on our website.

2. Purposes of Processing Your Personal Information

Carrérouge SARL processes your personal data only for legitimate, clearly defined purposes that are directly related to the operation of our e-commerce business, including but not limited to:

‌Service Delivery and Order Execution‌: To process your submitted orders, complete payment verification and processing, arrange product packaging, coordinate with third-party logistics and courier partners for delivery, send you order status updates, shipping tracking information, and process returns, refunds or exchanges in accordance with our store policies. Without the necessary transaction and contact information, we will not be able to successfully complete your order fulfillment and deliver the products you purchase.
‌Platform Optimization and User Experience Improvement‌: To analyze website usage trends, resolve technical bugs and system errors, optimize page load speed, test new e-commerce functionalities, personalize product recommendations that align with your browsing and purchase preferences, save your shopping cart contents across different sessions, and adjust our website interface to better match the common usage habits of our users, so as to provide a more intuitive, convenient and tailored shopping experience.
‌Security and Fraud Prevention‌: To protect the security of your user account, verify your identity when you request account password reset or sensitive information modification, detect and prevent unauthorized access, fraudulent payment activities, data breach risks, malicious attacks and other harmful behaviors that may threaten the safety of our platform, other users, or our business operations. This processing ensures that our e-commerce environment remains safe and trustworthy for every shopper.
‌Legal Compliance and Policy Enforcement‌: To comply with our legal obligations under applicable tax laws, commercial regulations, consumer protection rules, and data protection legislations. We may also process your information to enforce our website Terms of Service, protect our legal rights, intellectual property, and the legitimate safety interests of our staff, users and the general public.
‌Non-Marketing Operational Communications‌: To send you important service announcements, system maintenance notifications, updates to our Terms of Service or Privacy Policy, product recall alerts (if any), and other non-promotional messages that are necessary for the normal operation of your user account and your use of our shopping services. You cannot opt out of these critical operational communications as they are essential to ensure the stability and security of your account and transactions.
‌Marketing Communications (With Your Explicit Consent)‌: Only when you have given your separate, explicit opt-in consent, we may send you email, SMS or in-app notifications about new product launches, exclusive promotional offers, seasonal sale events, loyalty program rewards, and other marketing content that may be of interest to you. You retain the full right to opt out of these marketing communications at any time, by clicking the “unsubscribe” link included in every marketing email, or sending an opt-out request to our contact email [email protected]. After you submit your opt-out request, we will stop sending you marketing messages within 3 working days, and this will not affect the normal processing of your existing orders or the delivery of our non-promotional operational communications.

3. Information Sharing and Disclosure

Carrérouge SARL will never sell, rent or trade your personal information to any third parties for their own commercial marketing purposes without your explicit prior consent. We may only share your limited necessary personal data under the following strictly limited circumstances:

‌Authorized Service Providers‌: We share necessary information with trusted third-party service providers that we partner with to support our e-commerce operations, including payment processors that handle your transaction payments, logistics and courier companies responsible for delivering your orders, cloud hosting service providers that store our website data securely, IT maintenance vendors that support our system operation, and professional third-party auditors or legal consultants that provide us with compliance and business consulting services. All of these service providers are bound by strict data protection agreements that require them to protect the confidentiality of your personal information, prohibit them from using your data for any purposes other than the tasks they are contracted to perform for us, and impose appropriate technical and organizational security measures to safeguard your data.
‌Legal Requirement Protection‌: We may disclose your personal information if we are required to do so by valid legal request, court order, government regulatory investigation, or to comply with our legal obligations. We may also disclose your information when we believe in good faith that disclosure is necessary to protect our legal rights, respond to an emergency that threatens the physical safety of any person, or prevent harm to our property, users or the general public.
‌Business Transition‌: In the event of a merger, acquisition, asset sale, financing, or transfer of all or part of our e-commerce business assets, your personal information held by Carrérouge SARL may be transferred to the relevant successor entity. We will require the new entity to continue to abide by the terms of this Privacy Policy to protect your personal data rights, and we will notify you via prominent notice on our website or via email before any such transfer of your personal information takes place, if the transfer involves any material change to how your data is processed.

4. Data Storage and Security Measures

All personal information we collect from our users is stored on encrypted, secure cloud servers located within the territory of the European Union, in full compliance with the data localization and security requirements set out in relevant EU data protection regulations. We implement a comprehensive set of industry-leading technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, destruction, accidental loss or misuse:

All sensitive personal information including your payment card details and account passwords are encrypted using advanced AES-256 encryption technology during both data transmission and static storage. All data transmitted between your browser and our website is protected via TLS 1.3 secure connection protocols to prevent interception by unauthorized third parties during transmission.
Our internal data access control system ensures that only a very limited number of authorized staff who need to access your data to perform their specific job duties (such as order fulfillment staff, customer service representatives, and data security administrators) have permission to access your personal information, and all access behaviors are fully logged and audited on a regular basis.
We conduct regular security vulnerability scanning, penetration testing, and staff data protection training at least quarterly. We also have a documented data breach response plan in place, which requires us to notify all affected users and the relevant national data protection authority within 72 hours of discovering a personal data breach that poses a high risk to your rights and freedoms, as required by applicable regulations.
We will only retain your personal information for as long as it is strictly necessary to fulfill the specific purposes for which the information was collected. For order transaction data, we retain it for the full duration required by Luxembourg commercial and tax laws, typically 10 years after the completion of your order, for the purpose of fulfilling legal accounting and record-keeping obligations. For user account profile data, we retain it until you submit a formal request to delete your account, after which we will permanently erase all your personal information from our active systems, in accordance with applicable data protection rules.

5. Your Data Rights and How to Exercise Them

As a user located in the European Economic Area, or whose personal data processing is governed by applicable EU data protection laws, you have a comprehensive set of legally protected rights regarding your personal information:

‌Right of Access‌: You have the right to request a copy of all the personal information we hold about you, and to obtain confirmation on how your data is being processed. You can submit an access request by contacting us via our provided email or phone number.
‌Right to Rectification‌: If you find that any of the personal information we hold about you is inaccurate, incomplete or outdated, you can log into your user account on www.carrerougesarl.com to modify and update the relevant information directly, or submit a rectification request to our team. We will verify and update the relevant information without undue delay.
‌Right to Erasure (“Right to be Forgotten”)‌: Under circumstances where your personal information is no longer necessary for the original purposes for which it was collected, you withdraw your consent to the processing, or the processing of your data violates applicable laws, you have the right to request us to delete all your personal information we hold, and we will fulfill this request without undue delay, subject to the exceptions permitted by law (such as situations where we are required to retain certain data to comply with our legal obligations).
‌Right to Restriction of Processing‌: You have the right to request that we restrict the processing of your personal information under specific conditions, such as when you contest the accuracy of your data, the processing is unlawful, or we no longer need your data but you require it for the establishment, exercise or defense of legal claims.
‌Right to Data Portability‌: You have the right to request us to provide your personal information that you have submitted to us, in a structured, commonly used and machine-readable format, or to transmit this data directly to another data controller, where technically feasible.
‌Right to Object‌: You have the right to object to the processing of your personal data at any time, for reasons related to your particular situation, when the processing is based on our legitimate interests. We will stop processing your personal information unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims. You also have the absolute right to object to direct marketing processing at any time, as outlined in the marketing communications section of this policy.
‌Right to Lodge a Complaint‌: If you believe that our processing of your personal information has violated applicable data protection regulations and we have not provided a satisfactory response to your concerns, you have the right to lodge a complaint with the competent data protection authority in Luxembourg, or in the member state of your usual residence, place of work or the place where the alleged infringement occurred.

To exercise any of the above rights, you can send a detailed request to us via our contact email [email protected], or contact us via phone at +352 2619 6708. We will respond to your formal data rights request within one month of receiving it, free of charge. In the case of complex, large-volume or repeated requests, we may extend the response period for up to two more months, and we will notify you of this extension within one month of receiving your request. Before processing your request, we may need to verify your identity to ensure that the request is submitted by the legitimate account holder, to protect your account security and prevent fraudulent data access requests.

6. Children’s Privacy Protection

Our e-commerce shopping website and all related services are not directed to individuals under the age of 16. We do not knowingly collect any personal information from children under the age of 16, and we do not permit users in this age group to register for a user account on our platform. If we become aware that we have accidentally collected personal information from a child under 16 without verifiable parental consent, we will take immediate steps to permanently delete all relevant information from our servers and systems. If you are a parent or guardian and believe that your child has provided us with their personal information, please contact us immediately via our email, so that we can take prompt action to resolve the issue.

7. Cookies and Similar Tracking Technologies

Our website uses necessary, functional, and analytical cookies to deliver a better shopping experience to you. Necessary cookies are essential for the basic operation of our website, they allow you to maintain your logged-in status, keep your shopping cart items saved, and navigate between different pages on our site smoothly, and they cannot be disabled in our system. Functional cookies help us remember your preferences such as your selected language, default shipping location, and customized site settings, to avoid you having to reset these preferences every time you visit our website. Analytical cookies help us collect anonymous usage statistics to understand how users interact with our website, so that we can identify and fix performance issues to optimize our service quality. You can adjust the settings in your web browser to refuse or disable cookies, but please note that disabling necessary cookies may result in some core functionalities of www.carrerougesarl.com not working properly, and you may not be able to complete the order placement process smoothly. We do not use cookies to collect your personal information for cross-site targeted advertising purposes without your separate explicit consent.

8. Third-Party Links

Our e-commerce website may contain hyperlinks to external third-party websites, such as links to our official social media pages, recommended brand partner pages, or payment method introduction pages. When you click on these external links and leave our website, please note that this Privacy Policy no longer applies to those third-party platforms. We do not have control over the data collection, processing and privacy protection practices of those external websites, and we are not responsible for their privacy policies or terms of service. We strongly recommend that you carefully review the privacy policy of every website you visit after leaving www.carrerougesarl.com, before submitting any of your personal information to those platforms.

9. Updates to This Privacy Policy

Carrérouge SARL reserves the right to modify and update this Privacy Policy from time to time, to reflect changes in our business operations, new service features, updates to legal regulatory requirements, or adjustments to our data processing practices. When we make material changes to this Privacy Policy, we will update the “Effective Date” at the top of this document, and post a prominent notification on the homepage of www.carrerougesarl.com for at least 7 consecutive days to inform all users of the upcoming changes. For material changes that will fundamentally alter the way we process your personal information, we will also send a notification email to all registered account users. Your continued use of our website and shopping services after the effective date of the updated Privacy Policy will be deemed as your acceptance of the revised terms. If you do not agree with the updated version of the policy, you may choose to stop using our services, or submit a request to close your user account.

10. Contact Information

If you have any questions, comments, concerns or requests related to this Privacy Policy, our data processing practices, or wish to exercise your data protection rights, you can contact us at any time through the following official channels:

Company Name: Carrérouge SARL
Registered Address: 119 Rue de Hollerich, L-1741 Luxembourg, Luxembourg
Official Website: www.carrerougesarl.com
Contact Email: [email protected]
Contact Phone Number: +352 2619 6708

Our data protection team will review and respond to all your inquiries in a timely manner, and we are committed to resolving any privacy-related issues in a fair and transparent way, to fully protect the personal data rights of every user of our e-commerce platform.