Privacy Policy

DS CARO ("we", "us", or "our") operates www.dscaro.com. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you visit our website or engage with our products and services.

By using our website, you agree to the collection and use of information in accordance with this policy. This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Fill out our contact or inquiry forms
• Request a product quote or business proposal
• Subscribe to our newsletter or updates
• Place an order or register for an account
• Communicate with us via email or phone

This may include your name, email address, phone number, company name, shipping address, and any messages you send to us.

1.2 Information Collected Automatically

When you visit our website, certain information is collected automatically, including:

• IP address and browser type
• Pages visited and time spent on each page
• Referring website or search terms
• Device type and operating system
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and fulfill orders
• To provide customer support and after-sales service
• To send transactional emails (order confirmations, shipping updates)
• To send marketing communications (with your consent)
• To improve our website, products, and services
• To comply with legal obligations
• To detect and prevent fraud

3. Legal Basis for Processing (GDPR)

Under the UK GDPR and EU GDPR, we process your personal data on the following legal bases:

• Contractual necessity — to process orders and provide our services
• Legitimate interests — to improve our products and prevent fraud
• Consent — for marketing communications (you can withdraw at any time)
• Legal obligation — to comply with applicable laws and regulations

4. Cookies

We use cookies and similar technologies to enhance your browsing experience. These include:

• Essential cookies — required for the website to function properly
• Analytics cookies — to understand how visitors use our site (e.g., Google Analytics)
• Preference cookies — to remember your language and other settings

You can control cookie settings through your browser settings. Disabling certain cookies may affect website functionality.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information with:

• Service providers — e.g., email platforms, logistics partners, payment processors — who act under our instructions and only process data as necessary
• Legal authorities — when required by law, court order, or governmental authority
• Business transfers — in the event of a merger, acquisition, or sale of assets

All third-party service providers are required to maintain the confidentiality and security of your personal data.

6. International Data Transfers

DS CARO is based in the United Kingdom. If you are located in the European Union or elsewhere, your information may be transferred to and processed in the UK. We ensure appropriate safeguards are in place, including standard contractual clauses where required.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typically:

• Customer order data: 7 years (UK tax and accounting requirements)
• Marketing consent records: until consent is withdrawn + 3 years
• Website analytics: 26 months

8. Your Rights Under GDPR

If you are located in the UK or EU, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at dscaro88@gmail.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data in transit
• Access controls limiting data to authorized personnel only
• Regular security reviews and updates

However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., our online shop, Amazon, social media platforms). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact:

• Data Controller: DS CARO
• Contact Person: CARO CHEN
• Email: dscaro88@gmail.com
• Phone: +86 135 1694 6001
• Address: Manchester, United Kingdom

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), if you believe your data rights have been violated.