Privacy Policy

Effective date: 27 November 2025 (carried over from our previous store) — reissued for this website on 6 October 2026.

Carmela Group Limited ("the Company", "we") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you use carmelafashion.com (the "Website").

Scope

This policy applies to all business customers and their authorised users who register, place orders, browse or contact us through the Website. The Website is a B2B wholesale platform and is intended exclusively for professional buyers aged 18 or over.

Data we collect

Company information (name, registration number, registered address, VAT number where applicable)
Contact details (name, job title, telephone number, email address)
Account data (login email, encrypted password)
Order and transaction data (order numbers, products, invoice/delivery addresses, payment method)
Website behaviour (IP address, browser type, pages visited — analysed via Google Analytics)
Communication records (emails with our customer service)
Marketing preferences

Purposes of processing and legal basis

We process your data in order to:

Process and fulfil your orders — legal basis: performance of the contract
Provide customer support
Verify identity and prevent fraud — legal basis: legitimate interests
Send transactional emails and invoices
Analyse website usage (Google Analytics) — legal basis: legitimate interests
Send marketing emails through our email system only with your consent — legal basis: consent

Data sharing

We share data only with the following parties:

Airwallex (payment service provider) — the minimum data necessary to process your payment. Payments are completed on Airwallex's hosted pages; card numbers and CVV are never stored on this Website
SF Express International (carrier) — recipient name, address and telephone number
Google Analytics (anonymised)
Professional advisers, only where required by law

We never sell or rent your personal data.

Retention periods

Order/transaction data: 10 years from the last transaction
Account data: deleted 30 days after account closure
Marketing lists: deleted immediately upon unsubscribing

Your rights

Residents of France and the European Union in particular may at any time contact contact@carmelafashion.com to:

Access, rectify or delete their data
Restrict or object to processing
Obtain data portability
Withdraw marketing consent
Lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés)

Security measures

We use SSL encryption, firewalls and regular security audits. However, no internet transmission is 100% secure.

Cookies

We use necessary cookies, analytics cookies (Google Analytics — IP addresses anonymised) and marketing cookies. You may refuse these cookies in your browser settings.