Privacy Policy

Effective date: October 31, 2026

CaaMoo Store respects the privacy of people who visit this website and contact us about curtains, custom window coverings or wholesale enquiries. This Policy explains the information we collect, why we use it, how it may be shared and the choices available to you.

1. Who is responsible for your information?

This website is operated under the CaaMoo Store name. Before this Policy is published as final, the operator must add its full legal business name, business mailing address and a monitored privacy contact email or telephone number to the Contact page. Until those details are completed, you can submit a privacy question through the Contact Us page. The operator should identify the person responsible for privacy compliance and keep that contact information current.

2. Information we collect

• Contact information: your name, email address, phone number and company name when you choose to provide them.
• Project and enquiry information: curtain type, measurements, fabric and colour preferences, quantities, room or installation notes, messages and reference images you upload.
• Order-request information: selected products and SKU options, quantities, quoted or requested prices, currency, delivery address and postal code, payment-status communications and customer-service history.
• Technical and security information: IP address, browser and device details, timestamps, session identifiers, server logs and security events generated by hosting and website systems.
• Privacy choices: the optional cookie categories you select and the time/version of that choice, stored in your browser's local storage.

Please do not submit payment-card numbers, bank passwords, government identification numbers or other highly sensitive information through website forms or ordinary email. This website version does not collect card details or process online card payments.

3. Why we use information

We use the information you submit to answer questions, prepare quotations, assess custom-curtain and wholesale requests, create and manage order requests, communicate about specifications and delivery, provide customer service, maintain records, secure the website, prevent fraud or spam, troubleshoot technical problems and meet legal obligations.

We do not treat a request for a quote or customer support as permission to send unrelated promotional messages. If we send commercial electronic messages, we will first obtain the form of consent required by applicable anti-spam law, identify the sender and provide a working unsubscribe mechanism where required. You can unsubscribe from marketing messages at any time; operational order and service messages may still be sent when needed to fulfil your request.

4. Consent and your choices

When you submit a form, you are asking us to use the information you provide to respond to and administer that request. We will seek additional consent when required for a new or materially different purpose, or before a disclosure where consent is required. You may withdraw consent subject to legal, contractual and practical restrictions. Withdrawal does not invalidate processing that was lawfully completed before the withdrawal.

Optional analytics and marketing cookies or similar technologies are off by default on this website release. You can accept all optional categories, reject them or choose categories individually. You can reopen the preference panel using the Cookie settings link in the footer.

5. How information may be shared

When a page loads a resource hosted by another provider (for example, a remotely hosted editorial image or the rich-text editor library used in the administration area), your browser may connect directly to that provider. The provider may receive technical request information such as your IP address, browser details and the requested resource. Where practical, the operator can replace remote resources with locally hosted files. These resource requests are distinct from optional analytics or advertising cookies.

We may share relevant information with service providers who help operate the website and business, such as website hosting, database infrastructure, email delivery, security, technical maintenance and, if later engaged, fulfilment or delivery providers. Providers should receive only the information reasonably necessary for their service and be subject to appropriate confidentiality and security arrangements. The operator must maintain a current record of the actual providers used and update this Policy if material providers or purposes change.

We may also disclose information when required or permitted by law, to respond to lawful requests, protect customers and the website, investigate suspected misuse, or support a business transaction subject to applicable privacy rules. We do not sell personal information as a business practice.

6. Hosting and processing outside your province or Canada

Depending on the hosting, email and other providers selected by the operator, personal information may be stored or processed in another Canadian province or outside Canada and may be subject to the laws of that location. The operator must confirm the actual data locations and provider terms before launch. If Québec private-sector privacy law applies, additional transparency, privacy-impact assessment, governance and cross-border communication requirements may apply. The operator should complete those steps before a transfer where required.

7. Retention and deletion

We retain information only for as long as reasonably needed for the purpose for which it was collected, to manage the customer relationship, preserve accounting or business records, resolve disputes, maintain security and meet legal requirements. Retention depends on the record type and applicable law. The operator should maintain an internal retention schedule and securely delete or anonymize information when it is no longer required, subject to lawful retention duties.

8. Security safeguards

We use safeguards appropriate to the nature and sensitivity of the information, including access-controlled administration, password hashing, session protections, CSRF protection, input validation, restricted image uploads and security logging. Access to customer information should be limited to people who need it for their work. No website or transmission method can be guaranteed completely secure.

9. Your rights and how to contact us

Depending on the law that applies, you may request access to personal information we hold about you, ask us to correct inaccurate information, withdraw consent where available, or make a complaint about how information is handled. We may need to verify your identity before responding. Submit a request through the Contact Us page and state that it is a privacy request. You may also contact the privacy regulator with jurisdiction over your concern, such as the Office of the Privacy Commissioner of Canada or the relevant provincial or territorial regulator.

10. Cookies and similar technologies

Essential session technology is used to maintain website sessions, protect forms and support security. Some page resources may be hosted by third parties (such as remote editorial images or the administration editor library); those providers may receive technical request data when your browser retrieves the resource. Such resource requests are not, by themselves, analytics or advertising cookies. This release does not include third-party analytics tags or advertising pixels by default. The optional categories in the consent panel are designed for future integrations and remain inactive unless the operator adds a service that respects the stored choice. Read our Cookie Policy for more detail.

11. Children

This website is intended for general business and household customers and is not directed to children. We do not knowingly seek personal information from children. A parent or guardian may contact us if they believe a child has submitted information.

12. Updates

We may update this Policy when our website, providers, business processes or legal obligations change. We will revise the effective date when a material update is made. Please review this page periodically.