Privacy Policy

Privacy Policy Review:

✅ GOOD - GDPR Compliant Structure:

  • Legal basis for processing ✅
  • EU resident rights ✅
  • Cookie consent ✅
  • Data retention ✅
  • Third-party processors listed ✅

🚨 MUST FIX:

1. Email Error - Section 7:

contact us at [support@email.com]

Change to: "support@carispray.com"

2. Add VAT Number - Section 11: For transparency, add VAT number to contact section

3. Minor formatting - Section 11: "Zadarska ul .1" → "Zadarska ul.1"

Here's the corrected Privacy Policy - ready to copy and paste:

Privacy Policy

Last updated: 19.01.2026.

This Privacy Policy describes how OralAdvance Labs d.o.o., Zadarska ul.1, Varazdin, 42000, Croatia ("we", "us", "our") collects, uses, and discloses your personal information when you visit or make a purchase from carispray.eu (the "Site").

1. Personal Information We Collect

When you visit the Site, we automatically collect certain information about your device, including:

  • IP address
  • Browser type
  • Time zone
  • Cookies and similar tracking technologies

When you make a purchase or attempt to make a purchase, we collect:

  • Name and surname
  • Billing and shipping address
  • Email address
  • Phone number
  • Payment information (processed securely by third-party payment providers)

2. How We Use Your Personal Information

We use your personal information to:

  • Process and fulfill orders (including pre-orders)
  • Communicate with you about your order
  • Provide customer support
  • Screen orders for potential risk or fraud
  • Improve and optimize our website
  • Send marketing communications only if you have given explicit consent

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Performance of a contract (processing orders)
  • Legal obligations (tax, accounting, OSS VAT reporting)
  • Your consent (marketing emails, cookies)
  • Legitimate interest (fraud prevention, website improvement)

4. Sharing Your Personal Information

We share your personal information only with trusted third parties necessary to operate our business, such as:

  • Shopify (e-commerce platform)
  • Payment processors (e.g. Stripe, PayPal)
  • Shipping and fulfillment providers
  • Accounting and tax service providers
  • Marketing and analytics services (only with consent)

These providers process your data in accordance with GDPR and applicable data protection laws.

5. Cookies & Tracking Technologies

We use cookies to:

  • Enable core website functionality
  • Analyze website usage
  • Support marketing activities (only with consent)

You can manage your cookie preferences at any time via the cookie consent banner.

6. Data Retention

We retain personal information only as long as necessary to:

  • Fulfill orders
  • Comply with legal and tax obligations
  • Resolve disputes
  • Enforce our agreements

7. Your Rights (EU Residents)

If you are a resident of the European Union, you have the right to:

  • Access your personal data
  • Request correction or deletion
  • Object to processing
  • Request data portability
  • Withdraw consent at any time

To exercise your rights, contact us at support@carispray.com.

8. Data Transfers Outside the EU

Some of our service providers may process data outside the EU. In such cases, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

9. Security

We take reasonable technical and organizational measures to protect your personal information. However, no system is completely secure.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes.

11. Contact Information

For questions or requests regarding this Privacy Policy, please contact:

OralAdvance Labs d.o.o.
VAT: HR47603608104
Zadarska ul.1, Varazdin
42000, Croatia
Email: support@carispray.com