Privacy Policy

Last updated: 11 March 2026

1. Data Controller

CartePro (hereinafter "we", "our site")
CartePro Ltd
12 King Street, London, EC2V 8EA, United Kingdom
Email: [email protected]
VAT number: GB 482 953 074

2. Data Collected

When placing an order on our site, we collect the following information:

• First and last name
• Email address
• Phone number
• Postal address (street, city, postcode, country)

We also automatically collect browsing data via cookies and similar technologies (see section 5 below): IP address, browser type, pages visited, duration of visit, traffic source.

3. Purpose of Processing

Your personal data is used for the following purposes:

• Order processing and tracking - execution of the sales contract
• Customer service - responding to your queries and complaints
• Service improvement - analysis of browsing behaviour (anonymised or pseudonymised data)
• Targeted advertising - measuring the performance of our advertising campaigns via tracking pixels (Meta/Facebook) based on your consent or our legitimate interest
• Legal obligations - retention of data required by law (e.g. invoices)

4. Legal Basis

• Contract performance (Art. 6.1.b GDPR) - order processing
• Consent (Art. 6.1.a GDPR) - non-essential cookies and targeted advertising
• Legitimate interest (Art. 6.1.f GDPR) - security, fraud prevention, service improvement
• Legal obligation (Art. 6.1.c GDPR) - accounting and fiscal retention

5. Cookies and Tracking Technologies

Our site uses the following types of cookies:

Essential cookies
Necessary for the proper functioning of the site (payment session, security). They do not require consent.

Analytical cookies
We use Google Analytics (Google LLC) to measure our site's audience. These cookies collect anonymised data about your browsing. Google may transfer this data to the United States under the EU-US Data Privacy Framework. Learn more: policies.google.com/privacy

Meta (Facebook) Pixel
Our site integrates the advertising pixel of Meta Platforms Ireland Ltd (4 Grand Canal Square, Dublin 2, Ireland). This pixel allows us to:

• Measure the effectiveness of our Facebook and Instagram advertisements
• Attribute conversions (orders) to the corresponding advertising campaigns
• Create custom audiences for retargeting purposes

The pixel may collect your IP address, browser information and your actions on our site (pages viewed, orders). This data may be transferred to and processed in the United States by Meta Platforms Inc.
Learn more about Meta's use of data: facebook.com/privacy/policy
To opt out of Meta targeted advertising: Facebook ad settings

6. Data Sharing

We do not sell your personal data. It may be shared with:

• Technical service providers - hosting, analytics, advertising (Google, Meta) as part of their services
• Competent authorities - if required by law or court order

Any transfer of data outside the European Economic Area is carried out with appropriate safeguards (standard contractual clauses, Data Privacy Framework).

7. Retention Period

• Order data: 5 years (accounting and legal obligation)
• Browsing data / analytical cookies: maximum 13 months
• Advertising data (Pixel): according to Meta's policies (generally 180 days)

8. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR - EU 2016/679), you have the following rights:

• Right of access - obtain a copy of your data
• Right of rectification - correct inaccurate data
• Right to erasure - request deletion of your data
• Right to restriction - restrict the processing of your data
• Right to object - object to processing based on legitimate interest
• Right to data portability - receive your data in a structured format
• Right to withdraw consent - at any time, without retroactive effect

To exercise these rights, contact us at: [email protected]
We will respond within a maximum of 30 days.
You also have the right to lodge a complaint with the ICO (Information Commissioner's Office): ico.org.uk

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction: HTTPS/TLS encryption, restricted data access, secure hosting.

10. Changes

We may update this policy at any time. The date of last update is shown at the top of this page. In the event of a significant change, we will notify you by email or via a notification on the site.

11. Contact

For any questions regarding this privacy policy or the exercise of your rights:
CartePro
Email: [email protected]