Privacy Policy

This Privacy Policy describes how COTTONMAX ARROW INC, doing business as Miss Rosier (“Miss Rosier”, “we”, “us” or “our”), collects, uses, discloses and otherwise processes personal information in connection with mrosier.com, our online store, customer accounts, customer service communications and related services (together, the “Services”).

For purposes of applicable privacy and data-protection laws, COTTONMAX ARROW INC is generally the business or controller responsible for deciding how personal information collected through the Services is used, except where another party acts as an independent controller for its own services.

Our online store operates on the SHOPLINE e-commerce platform. SHOPLINE and other service providers may process personal information for us in order to provide storefront, account, checkout, transaction, order-management, analytics, security and related functions.

This Policy applies to information we process through the Services. It does not replace the privacy policies of third parties that operate independently from us.

The personal information we collect depends on how you interact with us. It may include:

We do not intentionally request highly sensitive information such as health information, biometric identifiers, religious beliefs or government identification numbers as part of the ordinary shopping experience. Please do not send sensitive information to us unless it is reasonably necessary for a specific request.

We may collect personal information:

1. Directly from you, for example when you browse the Site, create an account, place an order, subscribe to marketing, contact Customer Care, request a return or exchange, or otherwise provide information to us.
2. Automatically, through cookies, pixels, local storage, logs and similar technologies when you use the Site.
3. From service providers, such as SHOPLINE, payment processors, fraud-prevention providers, delivery carriers, analytics providers, communications providers and other vendors that support our Services.
4. From your interactions with our communications, such as whether an email was delivered, opened or clicked, where such measurement is permitted.

We may use personal information to:

• operate, maintain and improve the Site and Services;
• create and manage customer accounts;
• process payments, orders, returns, exchanges, refunds, gift cards and other transactions;
• arrange shipping, delivery, tracking and customs-related processing;
• respond to questions, complaints, requests and customer-service communications;
• detect, investigate and prevent fraud, abuse, unauthorized transactions, security incidents and other harmful activity;
• remember language, currency and other preferences;
• measure Site performance, understand how customers use the Services and improve the customer experience;
• send service messages such as order confirmations, shipping updates, account messages and policy notices;
• send marketing by email, SMS or WhatsApp where you have opted in or where otherwise permitted by law;
• provide cart reminders or similar commerce communications where permitted;
• administer promotions, discounts, campaigns or other offers;
• comply with legal, tax, accounting, regulatory and law-enforcement obligations;
• establish, exercise or defend legal claims; and
• carry out other purposes that we explain at the time information is collected or that you authorize.

We and our service providers may use cookies, pixels, tags, local storage and similar technologies to operate the Site, remember preferences, understand Site usage, improve performance, prevent fraud and, where enabled and permitted, support advertising or marketing.

Where required by applicable law, non-essential cookies or similar technologies will be used in accordance with your consent choices. Essential technologies may still operate because they are required for the Site or transaction you request. You can also adjust browser settings to block or delete cookies, although some Site functions may not work properly.

We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this Policy:

• E-commerce and technology providers that host, operate or support our storefront, accounts, checkout, order management or customer-management functions;
• payment and transaction providers that process payments, payment authentication, refunds, chargebacks or fraud checks;
• delivery, logistics and customs providers that ship, track and deliver orders;
• communications and customer-service providers that support email, SMS, WhatsApp, customer support or transactional notifications;
• localization and commerce tools that support language, translation, currency or related storefront functions;
• analytics and advertising providers, where enabled and permitted, to measure usage, campaigns or advertising performance;
• professional advisers, such as lawyers, accountants, insurers, auditors and consultants;
• government authorities or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, security or prevent fraud; and
• parties to a business transaction in connection with a merger, financing, acquisition, restructuring, sale of assets, insolvency or similar transaction.

We require service providers to process information only for permitted purposes and subject to appropriate contractual or legal obligations, where required.

Our store is built and operated using SHOPLINE. In order to provide the Services, SHOPLINE may process shopper information on our behalf, including information associated with browsing, customer registration, checkout, orders, payments, delivery, customer management and Site operation.

Other service providers may also process personal information for us depending on the tools and features enabled on our store. Their processing may be subject to their own terms and privacy obligations where they act independently.

We may change service providers as our business, technology and operational needs evolve. When we do, we will continue to handle personal information in accordance with this Policy and applicable law.

If you subscribe to marketing, we may use your email address or telephone number to send information about products, launches, promotions, restocks, cart reminders or other Miss Rosier news, including by email, SMS or WhatsApp where available.

Marketing consent is not a condition of purchase. You can unsubscribe from email by using the unsubscribe link in a marketing message. For SMS, you may use the opt-out instructions included with the message, such as replying STOP where supported. You may also contact us at hello@missrosier.com.

After you opt out, we may still send non-marketing communications that are necessary for your account, orders, transactions, security or customer-service requests.

We do not sell personal information in exchange for money.

Some privacy laws use broad definitions of “sale”, “sharing” or “targeted advertising” that may include certain disclosures of identifiers, device information or online activity to analytics or advertising partners. If we use technologies that fall within those definitions and applicable law gives you an opt-out right, we will provide a method for exercising that right through available privacy controls or by contacting us.

We do not knowingly sell or share personal information of children in a manner prohibited by applicable law.

Miss Rosier serves customers internationally. We and our service providers may process personal information in the United States and in other countries or regions where our technology, payment, delivery, customer-service or other providers operate.

Those countries may have privacy laws that differ from the laws in your place of residence. Where required, we use appropriate legal mechanisms or safeguards for international transfers of personal information.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain business and transaction records, comply with legal, tax and accounting requirements, prevent fraud, resolve disputes and enforce agreements.

The appropriate retention period depends on factors such as the type of information, the reason it was collected, the relationship with you, applicable limitation periods, legal obligations and security requirements. When information is no longer reasonably needed, we may delete, anonymize or otherwise securely dispose of it, subject to applicable law.

We use reasonable administrative, technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. We also rely on service providers that maintain security measures appropriate to the services they provide.

No website, transmission, storage system or security measure can be guaranteed to be completely secure. You are responsible for keeping account credentials confidential and for notifying us if you believe your account or information has been compromised.

Depending on where you live and the law that applies, you may have some or all of the following rights:

• request access to personal information we hold about you;
• request correction of inaccurate personal information;
• request deletion of personal information, subject to legal exceptions;
• request a portable copy of certain personal information;
• request restriction of, or object to, certain processing;
• withdraw consent where processing is based on consent;
• opt out of certain targeted advertising, sale or sharing where applicable;
• appeal a decision we make on a privacy request where applicable; and
• exercise privacy rights without unlawful discrimination.

To make a privacy request, email hello@missrosier.com with the subject line Privacy Request. Please describe the request and provide enough information for us to reasonably verify your identity and locate the relevant records. We may ask for additional information where permitted by law.

You may use an authorized agent where applicable. We may request proof of the agent's authority and may need to verify your identity directly.

If a U.S. state privacy law applies to our processing of your information, you may have additional rights.

If we deny a request and applicable law gives you a right to appeal, you may email hello@missrosier.com with the subject line Privacy Appeal.

If you are in the European Economic Area, United Kingdom or Switzerland, our legal bases for processing personal information may include:

• Performance of a contract, such as processing an order, payment, account, return or delivery;
• legitimate interests, such as operating and improving the Services, preventing fraud, protecting security, responding to customers and understanding business performance, where those interests are not overridden by your rights;
• consent, such as for certain marketing or non-essential cookies where required; and
• legal obligations, such as tax, accounting, consumer-protection, regulatory and law-enforcement requirements.

You may have rights to access, rectify, erase, restrict or object to processing, receive certain personal information in portable form, withdraw consent, and lodge a complaint with a competent data-protection authority. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

The Services are intended for a general adult retail audience and are not directed to children under 13. We do not knowingly collect personal information online from children under 13 in a manner that would require parental consent under applicable U.S. children's privacy law.

If you are under the age of majority where you live, please use the Services only with the involvement of a parent or legal guardian where required. If you believe a child has provided personal information to us inappropriately, please contact us so we can review the situation and take appropriate action.

The Site may contain links to websites, social platforms, payment services or other services operated by third parties. We do not control those third parties and this Policy does not govern their independent privacy practices. We encourage you to review the privacy information provided by a third party before submitting personal information to it.

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, service providers, business practices or legal requirements. The “Last updated” date at the top of this page identifies the current version.

If a change is material, we may provide additional notice where appropriate or required by law. We encourage you to review this page periodically.