caroline's.
legal

privacy policy.

Last updated: May 2026

What we collect.

When you place an order, we collect your name, email, shipping address, and payment info (processed by Stripe — we never see or store your card number). If you join the email list, we store your email address. That is the full list.

How we use it.

Your order information is used to fulfill your order, send shipping confirmations, and handle any issues. Your email is used to send order updates and, if you opted in, occasional dispatches about new products and restocks. We do not use your data to train AI models or sell it to third parties.

Email list.

If you joined our list, you can unsubscribe at any time via the link at the bottom of any email. We use a third-party email service provider to send mail. Your email is stored there under their privacy policy.

Cookies.

We use cookies to keep you logged into your account and to process your cart. We do not use advertising or tracking cookies. We do not run ad retargeting.

Payments.

All payment processing is handled by Stripe. We do not store payment card details on our servers. Stripe is PCI-compliant. Their privacy policy is at stripe.com/privacy.

Data retention.

We keep order records for accounting and tax purposes. If you close your account and request deletion, we will delete your personal data from our systems within 30 days, except where retention is required by law.

Your rights.

You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Email us at hello@carolinescheesestraws.com. We will respond within 10 business days.

Changes to this policy.

If we make material changes to this policy, we will update the date below and, where appropriate, notify you by email. Continued use of the site after a change means you accept the updated policy.