Privacy Policy
Caramell Baby operates this website and online store (“Services”). The Services are powered by Odoo, which provides the ecommerce infrastructure.
This Privacy Policy explains how we collect, use, store, and share your personal data in compliance with applicable laws including:
-
The EU General Data Protection Regulation (GDPR)
https://eur-lex.europa.eu/eli/reg/2016/679/oj -
The Jordan Personal Data Protection Law No. 24 of 2023
(Jordan Official Gazette / legal framework overview: https://www.dlapiper.com/en/insights/publications/2023/08/jordan-enacts-personal-data-protection-law) -
Meta Business Tools (including Meta Pixel) requirements
https://www.facebook.com/privacy/policy/
1. Data Controller
Caramell Baby is the Data Controller for personal data collected through this website.
Contact:
- Email: support@caramellbaby.com
- Address: King Abdallah Ben Al Hussein Ath Thani, Dabouq Gate Building, First Floor, Amman, Jordan
2. Personal Data We Collect
We collect the following categories of personal data:
a) Identity & Contact Data
- Name, phone number, email address
- Billing and shipping addresses
b) Transaction Data
- Orders, purchases, returns, refunds
- Payment method (processed securely via third-party providers)
c) Account Data
- Login credentials, preferences, order history
d) Technical Data
- IP address, device type, browser information
- Cookies and tracking identifiers (including Meta Pixel)
e) Usage Data
- Pages viewed, interactions, time spent, cart activity
f) Marketing Data
- Ad interaction data (Meta Pixel, cookies, campaign tracking)
3. Legal Basis for Processing (GDPR)
We process personal data under the following lawful bases:
- Contract performance (order processing, delivery)
- Legal obligation (tax, accounting, compliance)
- Consent (marketing emails, cookies, Meta Pixel tracking where required)
- Legitimate interest (fraud prevention, service improvement, analytics)
Source: GDPR Article 6
https://eur-lex.europa.eu/eli/reg/2016/679/oj
4. How We Use Your Data
We use your personal data to:
- Process and deliver orders
- Manage customer accounts
- Provide customer support
- Improve website functionality and user experience
- Send transactional and (with consent) marketing communications
- Run advertising campaigns (including Meta Ads)
- Analyze website performance and customer behavior
5. Cookies & Meta Pixel (Important Notice)
We use:
a) Cookies
Cookies are used for:
- Website functionality
- Analytics
- Personalization
- Cart saving
b) Meta Pixel (Facebook/Instagram)
We use Meta Pixel to:
- Measure ad performance
- Track conversions
- Build custom audiences
- Retarget visitors with ads
Meta may also process data independently under its own privacy policy:
https://www.facebook.com/privacy/policy/
Consent Requirement (GDPR & ePrivacy)
Where required (EU/EEA users), Meta Pixel and non-essential cookies only activate after explicit consent via cookie banner.
Users can:
- Accept or reject tracking cookies
- Withdraw consent at any time
6. Sharing of Personal Data
We may share data with:
- Odoo (platform provider) for hosting and system operations
- Payment processors (secure transactions)
- Delivery and logistics providers
- Marketing platforms (Meta, email providers)
- Analytics providers
- Legal authorities when required by law
We do not sell personal data.
7. International Data Transfers
Your data may be transferred outside Jordan or the EU.
Where applicable, we apply safeguards such as:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions (EU-approved countries)
- Contractual data protection commitments
GDPR reference:
https://eur-lex.europa.eu/eli/reg/2016/679/oj
8. Data Retention
We retain personal data only as long as necessary for:
- Order fulfillment
- Legal and tax obligations
- Customer support
- Business and security purposes
9. Your Rights
Depending on your location (EU GDPR or Jordan PDPL), you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict processing
- Object to processing (including marketing)
- Data portability
- Withdraw consent at any time
Requests can be made at:
10. Marketing & Opt-Out Rights
You may:
- Unsubscribe from emails at any time
- Opt out of targeted advertising
- Disable cookies in browser settings
-
Adjust Meta ad preferences:
https://www.facebook.com/adpreferences/ad_settings
11. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Secure servers and encryption where applicable
- Access control restrictions
- Secure payment processing via third parties
No system is 100% secure, but we take reasonable steps to protect your data.
12. Children’s Privacy
We do not knowingly collect data from children under the age of legal majority in Jordan unless provided by a parent or guardian.
13. Third-Party Websites
We are not responsible for privacy practices of external websites linked from our Services.
14. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted on this page with a revised date.
15. Contact Us
For privacy-related inquiries:
📍 Amman, Jordan