Who we are
Carmela is the brand of Carmela Scents LLC (“we”, “us”). We sell coastal home fragrance and the SERRA cold-air diffuser at carmelascents.com. This policy explains what personal information we collect through this website and our online store, why we collect it, who we share it with, and the choices and rights you have.
What we collect
- Visit information. We use Statcounter, a web analytics service, to count visits. It receives your IP address (from which it estimates your general location), browser and device type, the pages you view, the page that referred you and the time of your visit, and may set cookies to tell visitors apart.
- Order information. When you check out, our store on Shopify collects your name, e-mail address, delivery and billing address, phone number (if you give one) and order details. Your card details are entered on Shopify’s secure checkout and processed by Shopify and its payment partners. We never see or store your full card number.
- Your bag. The items in your bag are kept in your own browser (local storage) so they are still there when you return. We do not receive this until you check out.
- Messages. If you contact us, we receive what you choose to share, such as your name, handle or e-mail address and your message.
How we use it and our legal bases
- To take, deliver and support your orders, and to meet tax and accounting duties. (Performance of a contract and legal obligation.)
- To understand how many people visit and which pages are useful, so we can improve the site. (Your consent where the law requires it, otherwise our legitimate interest in running a good website.)
- To reply to your messages. (Legitimate interest and, where relevant, performance of a contract.)
- To send marketing e-mail only if you opt in, and you can unsubscribe at any time.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Who we share it with
We share information only with the companies that help us run the site and the store: Shopify (our store, checkout, payments and order management), Netlify (our web host), Statcounter (analytics) and the carriers that deliver your order. Each handles the data under its own privacy policy and our agreements with them. We may also disclose information when the law requires it.
Cookies and your choice
Statcounter may use cookies to measure visits. If you visit from Europe or the United Kingdom, we ask you before the analytics load, and nothing is sent to Statcounter unless you accept. Elsewhere, analytics load by default and you can block them in your browser or with a privacy extension. This site does not use advertising cookies.
International transfers
Our providers are based in or operate from the United States and other countries. If you are in the European Economic Area or the United Kingdom, your information may be transferred outside it, and we rely on the safeguards our providers use for such transfers, such as standard contractual clauses.
How long we keep it
We keep order records for as long as tax and accounting law requires. Analytics data is kept by Statcounter for the period set in our account. Messages are kept for as long as needed to deal with your request. Your bag stays on your device until you remove the items or clear your browser data.
Your rights
California residents (CCPA/CPRA) have the right to know what personal information we collect, use and disclose, to request deletion or correction, to opt out of the sale or sharing of personal information (we do neither), and to be free from discrimination for using these rights.
People in the European Economic Area, the United Kingdom and Portugal (GDPR) have the right to access, correct, delete or restrict the use of their data, to object to processing, to data portability, to withdraw consent at any time, and to complain to their data protection authority (in Portugal, the CNPD).
To use any of these rights, contact us as described below. We may need to verify your identity first.
Security
This site is served over HTTPS and uses security headers to limit what other sites can do with it. Payments are handled on Shopify’s PCI compliant checkout. No system is completely secure, so we cannot guarantee absolute security.
Children
This website is not directed at children under 16, and we do not knowingly collect their information.
Contact
Carmela Scents LLC operates this website and the Carmela store. You can reach us by e-mail at info@carmelascents.com, or by direct message on Instagram (@carmelascents).
Changes to this policy
We may update this policy as the site and store change. The date below shows the latest version.
Last updated: October 15, 2026