Your data, explained plainly.

Who controls your information

Minh Khoi Tran, operating Cart of Two from Jämeräntaival 11 M, 02150 Espoo, Finland, is the data controller. Privacy requests: privacy@cartoftwo.com. Customer-service requests: support@cartoftwo.com.

Information we collect

• Account information: name, email address, authentication status, saved gifts, partner link, points, rewards, and account activity.
• Order information: purchased products and variants, billing and delivery details, phone number, price, currency, payment status, shipping option, tracking, refunds, and support history.
• Messages and community content: support requests, newsletter consent, restock requests, uploaded personal or shared couple pictures, reviews, reports, moderation records, and related evidence such as damage photos or videos.
• Technical and security information: IP address, country estimate, browser and device data, request logs, cookies, session identifiers, fraud signals, and Turnstile results.
• Social sign-in information, if chosen: Google or Facebook account identifier, verified email address, name, and basic public profile information supplied by that provider.

Stripe receives payment details directly. We receive transaction identifiers and payment status, not complete card numbers.

Why we use it

• To provide the store, cart, checkout, customer account, Couple Club, support, delivery, returns, refunds, and fraud prevention.
• To perform our contract with you and take requested steps before a purchase.
• To meet accounting, tax, consumer-protection, security, and other legal obligations.
• For legitimate interests such as securing the service, preventing abuse, moderating community content, maintaining records, improving reliability, and defending legal claims.
• With consent, to send newsletters or a one-time restock notice. Consent can be withdrawn at any time.

Who receives information

• WooCommerce and our Hetzner-hosted database for catalog, account, order, and customer records.
• Stripe for payment processing, wallets, fraud detection, and refunds.
• Cloudflare and Turnstile for DNS, content delivery, country signals, bot protection, and security.
• Google or Meta only when you choose their social sign-in service.
• CJ fulfilment and its logistics partners for purchased SKUs, recipient details, package preparation, dispatch, tracking, and delivery problems.
• Postmark for transactional, activation, password-reset, newsletter-confirmation, and restock emails.
• Photon/Komoot address suggestions when you type a checkout address for verification.
• Encrypted off-site backup storage for disaster recovery.
• Public visitors can see the profile picture you choose and the shared couple picture. Your personal picture is also shown beside your approved reviews; the shared couple picture is not used on individual review cards. Your partner can see the shared picture and your personal picture through the linked account.
• Professional advisers, authorities, or insurers when reasonably necessary for legal compliance or claims.

We do not sell or rent personal information. We do not currently use cross-site behavioural advertising trackers.

International transfers

Information may move between Finland or the EEA, the United States, Canada, and international fulfilment locations. Where required, we rely on safeguards such as adequacy decisions, contractual protections including standard contractual clauses, access controls, and encrypted transport.

How long we keep it

• Order and financial records: six years after the end of the relevant financial year, or longer when required for a legal claim.
• Customer profiles: while active; data not required for orders, security, or law is deleted or anonymized after 24 consecutive months of inactivity or a verified deletion request.
• Newsletter records: until consent is withdrawn, plus a minimal suppression record where needed to honour an unsubscribe.
• Restock requests: until the one-time notification is sent or the request is withdrawn.
• Cart/session data and routine server logs: normally no longer than 30–60 days, unless a shorter session expiry applies or security evidence must be retained longer.
• Backups: retained on a rotating schedule and protected from ordinary use until overwritten.
• Avatars: the current image is retained while selected, with the replaced or removed attachment deleted from ordinary media storage after the reference changes; secure backups may retain it until their rotation expires.
• Reviews and moderation records: retained while needed for the public review, abuse prevention, disputes, or legal obligations; deleted reviews may remain in protected moderation or backup records for those purposes.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also unsubscribe through an email link. We may ask for information needed to verify your identity and may retain data where law or a legal claim requires it.

Send requests to privacy@cartoftwo.com. You may complain to the Finnish Data Protection Ombudsman, the Office of the Privacy Commissioner of Canada, or another competent regulator.

Cookies and browser storage

We use essential session, account, country, preference, security, and checkout storage. Details and controls appear in our Cookie Policy.

Uploaded pictures and reviews

Pictures are processed in WordPress media storage: we validate the file signature and decoding, crop and re-encode one square JPEG derivative, and remove metadata such as EXIF before publication. Reviews are held pending moderation and stored as WooCommerce review comments. We do not use facial recognition, biometric inference, image galleries, or a separate storage service.

Review authenticity is represented by the “Verified purchase” label only when the authenticated WordPress customer account has a qualifying paid WooCommerce order for that exact product. Ratings are the arithmetic average of approved review ratings supplied by WooCommerce. The current personal avatar is looked up when a review is read, so replacing or removing it updates the public display.

Age limit

Cart of Two is for adults aged 18 or older. We do not knowingly create accounts for or collect information directly from children.

Updates

We will update this page when our practices or providers materially change. The date below identifies the current version.