Privacy Policy

Rose and Dolce
Last Updated: October 8, 2026

1. Introduction

Welcome to Rose and Dolce.

Rose and Dolce (“Rose and Dolce,” “we,” “us,” or “our”) operates the website https://roseanddolce.com and its associated online store, products, customer support, and related services (collectively, the “Services”).

We are based in Sweden and offer our products to customers in Canada.

We are committed to protecting your privacy and handling your personal information responsibly, transparently, and in accordance with applicable data protection laws, including the European Union General Data Protection Regulation (“GDPR”), where applicable, and relevant Canadian federal and provincial privacy legislation.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, how long we retain it, and the rights and choices available to you.

Our online store is powered by Shopify, which provides the e-commerce infrastructure used to deliver our Services.

Please read this Privacy Policy carefully. If you have questions about how your personal information is handled, you may contact us using the details provided below.

2. Our Identity and Contact Information

Business name: Rose and Dolce
Privacy contact: Leonardo Lopez
Website: https://roseanddolce.com
Email: info@roseanddolce.com
Telephone: +46 70 303 53 89
Business address: Fågelsångsvägen 13, 117 68 Stockholm, Sweden

Leonardo Lopez is the designated contact for questions, requests, and complaints relating to the privacy practices of Rose and Dolce.

For GDPR purposes, the controller responsible for personal information collected through our business is the individual or legal entity operating Rose and Dolce, as identified in our business records.

3. Personal Information We Collect

Depending on how you interact with our Services, we may collect the following categories of personal information.

Information You Provide to Us

• Your first and last name

• Email address

• Telephone number

• Billing address

• Shipping address

• Order details and purchase history

• Customer account information, where applicable

• Information you provide in customer support inquiries

• Product reviews, survey responses, or feedback you voluntarily submit

• Marketing preferences and communication choices

We collect this information when you place an order, contact us, register an account, submit a form, subscribe to communications, or otherwise interact with our Services.

Payment and Transaction Information

Payments are processed using Shopify's checkout infrastructure and the payment service providers available at checkout.

These providers may collect payment card details, billing information, transaction identifiers, and information necessary to authorize and secure payments.

We generally receive transaction confirmations, payment status, limited payment method information, and other details necessary to administer orders, refunds, and disputes.

We do not intentionally store complete payment card numbers or card security codes in our own customer service systems.

Information Collected Automatically

When you visit our Website, we and our technology providers may collect:

• IP address

• Device and browser information

• Operating system

• Approximate geographic location

• Pages viewed and interactions with the Website

• Referring websites or advertising sources

• Shopping cart and checkout activity

• Cookies and similar online identifiers

• Technical, diagnostic, and website performance information

Some of this information is necessary to operate our Website. Other information may be collected for analytics or advertising purposes, subject to applicable privacy requirements and your choices.

Information From Service Providers and Other Sources

We may receive information from Shopify, payment processors, shipping partners, fraud prevention services, customer support providers, and other service providers used to operate our store.

Where advertising or analytics integrations are enabled, we may also receive campaign performance information and other relevant information from those providers.

4. Why We Use Your Personal Information

We use personal information for the following purposes:

Order Processing and Fulfillment

To accept and process orders, verify payments, prepare shipments, deliver products, communicate shipping updates, and administer refunds or returns.

Customer Service

To respond to inquiries, address product or delivery concerns, investigate complaints, and provide assistance.

Website Operation and Improvement

To maintain Website functionality, remember shopping cart contents, diagnose technical issues, measure performance, and improve our Services.

Security and Fraud Prevention

To identify potentially fraudulent transactions, protect customer accounts, maintain the security of our systems, and prevent unauthorized activity.

Marketing and Advertising

To send promotional communications where authorized and to measure or personalize advertising where permitted by applicable law and your privacy choices.

Legal and Business Administration

To maintain business records, meet tax and accounting obligations, respond to lawful requests, resolve disputes, and protect our legal rights.

We do not collect personal information for purposes unrelated to our business without providing appropriate notice and obtaining consent where required.

5. Legal Bases for Processing Under the GDPR

Where the GDPR applies, we process personal information on one or more of the following legal bases:

Performance of a contract: Where processing is necessary to process an order, deliver purchased products, administer a refund, or provide requested customer services.

Compliance with a legal obligation: Where processing is necessary to comply with applicable accounting, tax, consumer protection, or other legal requirements.

Legitimate interests: Where necessary for reasonable business purposes such as website security, fraud prevention, customer support administration, and service improvement, provided those interests are not overridden by your rights and freedoms.

Consent: Where we request your permission for optional activities, such as certain marketing communications, non-essential cookies, or personalized advertising technologies.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Where processing is necessary to fulfill an order or comply with law, declining to provide the necessary information may prevent us from completing the relevant service.

6. Cookies and Similar Technologies

Our Website uses cookies and similar technologies to support its operation and, where enabled, to provide analytics and advertising functions.

These technologies may include:

Strictly necessary technologies: Used for essential functions such as shopping carts, checkout, security, and session management.

Functional technologies: Used to remember preferences and support optional Website features.

Analytics technologies: Used to understand Website performance and visitor interactions.

Advertising technologies: Used to measure advertising performance and, where permitted, support personalized advertising.

We may use advertising technologies provided by Meta, including the Meta Pixel and related tools, if enabled in our store.

These tools may process information about your browser, device, Website activity, and purchase events, depending on their configuration.

Where applicable law requires consent for non-essential technologies, we will request the necessary consent before activating them.

You can manage your preferences through the privacy controls made available on our Website, where enabled, and through your browser settings.

Disabling certain technologies may affect Website functionality.

For more information about Shopify's use of cookies, please see:

https://www.shopify.com/legal/cookies

7. Marketing Communications

We may send promotional emails or text messages about our products, offers, and updates where we have the consent or other legal authorization required to do so.

For recipients in Canada, we comply with applicable requirements under Canada's Anti-Spam Legislation (“CASL”).

Commercial electronic messages will include appropriate sender identification and an accessible unsubscribe mechanism.

You may withdraw your consent to marketing at any time by using the unsubscribe link included in promotional emails, following the applicable SMS opt-out instructions, or contacting us at info@roseanddolce.com.

We will process unsubscribe requests without delay and within applicable legal deadlines.

Unsubscribing from promotional communications does not prevent us from sending necessary transactional messages, such as order confirmations, shipping notifications, or refund updates.

We maintain records of marketing consent where necessary to demonstrate compliance with applicable law.

8. Advertising and Meta Platforms

We may use Meta advertising services, including Facebook and Instagram advertising, to promote Rose and Dolce.

Where configured and permitted, Meta advertising tools may process information about interactions with our Website, including product views, cart activity, checkout events, and purchases.

This information may be used to measure advertising performance, improve campaign effectiveness, and support relevant advertising.

Any disclosure or processing of personal information for advertising purposes is subject to applicable legal requirements and the consent or other permissions required for the relevant activity.

You may also manage certain advertising preferences directly through your Facebook or Instagram account settings.

We encourage you to review Meta's privacy information to understand how Meta independently processes information.

9. When We Share Personal Information

We may share personal information with service providers and other recipients where reasonably necessary to operate our business.

These recipients may include:

Shopify: To host our Website and provide e-commerce, checkout, and order management services.

Payment service providers: To authorize and process transactions, prevent fraud, and administer refunds.

Shipping and fulfillment partners: To prepare, dispatch, track, and deliver customer orders.

Customer service providers: To assist with customer communications and support.

Analytics and advertising providers: To provide measurement and advertising services, where enabled and legally permitted.

Professional advisers: Including legal, accounting, and other advisers where reasonably necessary.

Public authorities: Where disclosure is required or permitted by applicable law.

We may also disclose information in connection with a legitimate business reorganization or sale, subject to applicable legal requirements.

We do not sell customer email lists to unrelated data brokers.

Where service providers process personal information on our behalf, we seek to apply appropriate contractual, organizational, and technical protections.

10. Shopify and Its Privacy Practices

Our Website is powered by Shopify.

Shopify processes personal information to provide the commerce infrastructure supporting our store, including hosting, checkout, transaction processing support, and related services.

Certain Shopify features may involve Shopify processing information for its own purposes, as described in Shopify's applicable privacy notices.

Information submitted through our store may be processed by Shopify and its service providers in countries outside your country of residence.

For more information, please review:

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users

Shopify Privacy Portal:
https://privacy.shopify.com/en

Requests concerning information processed independently by Shopify may also be addressed through Shopify's privacy resources.

11. International Transfers of Personal Information

Rose and Dolce operates from Sweden and serves customers in Canada.

Your personal information may therefore be transferred between Canada, Sweden, and other countries in which Shopify or our other service providers operate.

Privacy and data protection laws may differ between jurisdictions.

Where the GDPR applies to a transfer of personal information outside the European Economic Area, we will use an appropriate transfer mechanism where required, such as an applicable adequacy decision, approved standard contractual clauses, or another legally recognized safeguard.

Where Canadian privacy law applies, we will provide appropriate information about cross-border processing and take reasonable measures to protect personal information handled by service providers.

Information processed in another country may be accessible to authorities in that jurisdiction in accordance with applicable law.

12. How Long We Retain Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to applicable legal requirements.

For example, we may retain:

• Order and transaction records for accounting, tax, and legal compliance

• Customer correspondence for support and dispute resolution

• Information relevant to returns, refunds, and payment disputes

• Marketing consent records for compliance and accountability

• Technical and security records for legitimate security purposes

Retention periods depend on the type of information, applicable legal requirements, and the reason it was collected.

When information is no longer required, we take reasonable steps to delete, anonymize, or securely dispose of it, unless further retention is legally required or permitted.

13. Information Security

We take reasonable technical, administrative, and organizational measures intended to protect personal information from unauthorized access, disclosure, alteration, loss, or misuse.

These measures may include access restrictions, authentication controls, secure payment-processing infrastructure, security features provided by Shopify, and appropriate service-provider arrangements.

However, no electronic system or method of transmitting information over the internet is completely secure.

If a personal information breach occurs, we will assess the incident, take appropriate remedial action, and provide notifications to affected individuals or regulators where required by applicable law.

14. Your Privacy Rights

Depending on the laws applicable to your personal information, you may have rights to:

• Request access to personal information we hold about you

• Request correction of inaccurate information

• Withdraw consent for certain processing activities

• Request deletion of information in applicable circumstances

• Object to or restrict certain processing activities

• Request a portable copy of certain personal information

• Obtain information about relevant processing and disclosures

• Make a complaint to an appropriate privacy regulator

These rights are subject to applicable legal conditions and exceptions.

To exercise a privacy right, contact info@roseanddolce.com.

We may request information reasonably necessary to verify your identity before responding.

We will respond within the time limits required by applicable law.

Additional Rights Under the GDPR

Where the GDPR applies, you may have additional rights concerning access, rectification, erasure, restriction, portability, objection, and certain automated decisions.

You may also lodge a complaint with a competent European data protection supervisory authority, including the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Additional Rights for Canadian Residents

Canadian residents may have rights under applicable federal or provincial privacy laws, including rights relating to access, correction, consent, and privacy complaints.

Residents of Québec may have additional rights under Québec's legislation concerning the protection of personal information in the private sector, including certain rights relating to cessation of dissemination, de-indexing, portability, and automated decision-making where the relevant legal conditions are met.

To request assistance, please contact our privacy representative.

15. Children's Privacy

Our Website and products are intended for adults.

We do not knowingly collect personal information from children for marketing purposes.

Where applicable law requires authorization from a parent or legal guardian, we will seek the appropriate authorization.

If you believe that a child has provided personal information without the necessary authorization, please contact us so that we can review the matter.

16. Sensitive Personal Information

Our products are consumer wellness products.

We do not require customers to provide diagnoses, medical histories, or other sensitive health information to purchase from our store.

If you voluntarily share health-related information when contacting customer support, we will use it only as reasonably necessary to respond to your inquiry or for another lawful purpose.

Please do not send medical records, full payment card numbers, or other highly sensitive information through ordinary email.

17. Third-Party Websites

Our Website may contain links to websites or services operated by third parties.

We are not responsible for the independent privacy practices of those third parties.

We encourage you to review their privacy policies before submitting personal information to them.

18. Privacy Complaints

If you have a concern about how Rose and Dolce collects, uses, discloses, or protects your personal information, please contact us.

Privacy Contact: Leonardo Lopez
Email: info@roseanddolce.com

We will review your concern and respond in accordance with applicable legal requirements.

If you remain dissatisfied, you may have the right to contact an appropriate data protection authority, including the Office of the Privacy Commissioner of Canada, a relevant provincial privacy authority, or the Swedish Authority for Privacy Protection, depending on the circumstances.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business, technology, service providers, privacy practices, or legal obligations.

When changes are made, we will update the “Last Updated” date.

Where required by law, we will provide additional notice or request renewed consent for material changes.

The latest version of this Privacy Policy will be available on our Website.

20. Contact Information

For questions, privacy requests, or complaints, contact:

Rose and Dolce
Attention: Leonardo Lopez — Privacy Contact
Fågelsångsvägen 13
117 68 Stockholm
Sweden

Email: info@roseanddolce.com
Telephone: +46 70 303 53 89
Website: https://roseanddolce.com

We are committed to handling personal information responsibly and responding to privacy concerns in a fair and timely manner.