Privacy Policy.

Carnatique ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use carnatique.com and our services.

1.Information We Collect

(a) Information you provide directly:

  • Email address (for service delivery and communication)
  • Name (optional, used for personalization of your dossier)
  • Diagnostic responses (your answers to the 13-question color analysis)
  • Climate selection
  • Payment information (processed by Stripe; we do not store your payment card details)
  • Optional marketing preferences

(b) Information collected automatically:

  • IP address (for analytics and security)
  • Browser type, operating system, device information
  • Pages visited and time spent on our site
  • Referrer information

We use Cloudflare Web Analytics to collect this technical data in a privacy-respecting manner without cookies.

2.How We Use Your Information

We use your information to:

(a) Process your diagnostic and generate your personalized dossier.

(b) Deliver your dossier and related communications via email.

(c) Process your payment through Stripe.

(d) Respond to your inquiries and provide customer support.

(e) Send you marketing communications about Carnatique (only if you opt in).

(f) Improve our services through analytics and feedback.

(g) Comply with legal obligations.

3.Legal Basis for Processing (EU Customers)

For customers in the European Union, we process your personal data on the following legal bases:

(a) Performance of a contract (delivering the service you purchased).

(b) Your consent (for marketing communications, which you can withdraw at any time).

(c) Our legitimate interests (improving services, security, fraud prevention).

(d) Compliance with legal obligations.

4.Sharing Your Information

We do not sell your personal information. We share data only with:

(a) Stripe – for payment processing.

(b) Resend – for transactional email delivery.

(c) Google Workspace – for email correspondence.

(d) Cloudflare – for website hosting and analytics.

(e) Service providers strictly necessary to operate the service.

We require these providers to maintain confidentiality and use your data only for the purposes we authorize.

We may also disclose information if required by law or to protect our rights, property, or safety.

5.Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Policy or as required by law.

Specifically:

  • Diagnostic responses and dossier data: retained while you have an active record.
  • Payment records: retained for the period required by law for accounting and tax purposes.
  • Marketing preferences: retained until you withdraw consent.

You may request deletion of your personal data at any time (see Section 7).

6.Security

We take reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

7.Your Rights

You have the right to:

(a) Access – request a copy of the personal data we hold about you.

(b) Correction – request that we correct inaccurate information.

(c) Deletion – request that we delete your personal data.

(d) Restriction – request that we limit processing of your data.

(e) Portability – receive your data in a structured, machine-readable format.

(f) Objection – object to certain types of processing, including marketing.

(g) Withdraw consent – withdraw consent for marketing at any time.

To exercise these rights, contact us at bonjour@carnatique.com. We will respond within 30 days.

8.Cookies and Tracking

We use minimal cookies and tracking technologies. Our analytics platform (Cloudflare Web Analytics) is privacy-respecting and does not use cookies for tracking.

Stripe uses cookies for payment processing and fraud prevention as part of its service.

9.Children's Privacy

Our service is not directed to children under 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

10.International Data Transfers

Carnatique operates from Singapore. If you are located outside Singapore, your data may be transferred to and processed in Singapore or other jurisdictions where our service providers operate. By using our service, you consent to such transfers.

For EU customers, we ensure appropriate safeguards are in place when transferring data outside the EU/EEA.

11.Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be posted on this page.

12.Contact

For questions about this Privacy Policy or to exercise your rights, please contact us at bonjour@carnatique.com.

– Carnatique