Privacy Policy
1. General Provisions
1.1. This Privacy Policy defines the procedure for processing and protecting personal data of users of the website karie.site (hereinafter — the “Site”).
1.2. The Policy is developed in accordance with the EU General Data Protection Regulation (GDPR) and other applicable regulations.
1.3. By using the Site, the user confirms agreement with this Policy and the conditions of personal data processing.

2. Personal Data of Users
2.1. We may process:
— first and last name
— contact details (email, phone, messengers)
— information provided in the brief/forms (gift recipient, language, preferences, etc., at the user’s choice)
— data about the use of the Site: cookies, IP address, device/browser type, operating system, technical logs
— any other information voluntarily provided by the user
2.2. Purposes of processing:
— providing services and communication regarding applications/briefs
— issuing invoices and accounting
— improving the Site, analytics and security
— sending informational or marketing materials (with consent)

3. Legal Grounds for Processing
3.1. We process data based on grounds provided by GDPR:
— user consent (Art. 6(1)(a) GDPR)
— performance of a contract or pre-contractual actions at the user’s request (Art. 6(1)(b))
— legal obligations (Art. 6(1)(c))
— legitimate interests of Karie (Art. 6(1)(f)), such as ensuring security, protecting rights, developing the service — while maintaining a fair balance with user rights

4. Data Collection and Use
4.1. Data is collected through forms/briefs, correspondence, invoice payments, and automatically via cookies and similar technologies.
4.2. Cookies are used for Site operation, traffic analytics, and (with consent) marketing. Users can manage cookie preferences through browser settings and/or the Site’s cookie banner.
4.3. We may send service notifications (e.g., about application/order status). Marketing messages are sent only with consent and can be unsubscribed from at any time.

5. Data Sharing with Third Parties
5.1. Data is not shared with third parties without user consent, except when necessary:
— to fulfill the contract (postal and courier services, payment/accounting providers, hosting, forms/CRM, analytics)
— to comply with law/government requests
— to protect the rights and legitimate interests of Karie
5.2. We sign data processing agreements with such providers and require confidentiality and security measures.
5.3. For international transfers outside the EEA, GDPR-compliant mechanisms are used (EU Standard Contractual Clauses, etc.).

6. Personal Data Protection
6.1. We apply organizational and technical measures to protect data from unauthorized access, alteration, disclosure, or destruction (encrypted channels, access control, logging, backups).
6.2. Access to data is limited to authorized employees and contractors, following the necessity principle and confidentiality obligations.

7. User Rights
Under GDPR, the user has the following rights:
— access to their data and obtaining a copy
— rectification
— erasure (“right to be forgotten”) — where applicable
— restriction of processing
— data portability — for data processed on the basis of consent/contract
— objection to processing based on legitimate interest and to marketing
— withdrawal of consent at any time (without affecting the lawfulness of processing before withdrawal)
Requests may be sent to karie.boutiqueagency@gmail.com; we will respond without undue delay within GDPR deadlines.

8. Data Retention
8.1. Data is stored only as long as necessary for the purposes for which it was collected: fulfilling an application/contract, accounting, legal compliance, dispute resolution.
8.2. Marketing data is stored until consent is withdrawn/objection is raised; accounting data — for the period required by law. After the purposes are fulfilled, data is deleted or anonymized.

9. Changes to the Policy
9.1. We may update this Policy. The current version is published at karie.site and takes effect upon posting unless otherwise stated.
9.2. Significant changes may be announced on the Site or via email.

10. Contact Information
Karie Agency Ltd.
Address: C. DE LA INDÚSTRIA 263, BARCELONA, SPAIN
VAT Number: H76748714
Phone: +34 645 04 25 11
Email for data-related requests: karie.boutiqueagency@gmail.com