This Privacy Policy explains how VallitaCo (“VallitaCo”, “we”, “us” or “our”) collects, uses, stores, and shares your personal information when you use our website, www.rosiross.com (the “Site”). It should be read together with our Terms & Conditions. VallitaCo is the controller of the personal information described in this policy.

We do not operate a mobile app and we do not offer memberships or paid accounts, so this policy covers the website only.

If you have any questions, contact us at privacy@rosiross.com.

1. Information We May Collect

We may collect and process the following information:

• Information you give us. This includes your name, email address, and the contents of any message you send us by email or through a contact form, and any comments or other Submissions you post on the Site.
• Information collected automatically. When you visit the Site, we and our service providers may collect technical information such as your IP address, browser type and version, device type, operating system, referring website, pages viewed, the date and time of your visit, and how long you stay on each page.
• Cookies and similar technologies. We use cookies to make the Site work, to remember your preferences, and to understand how the Site is used. You can control cookies through your browser settings. Blocking some cookies may affect how the Site works.
• Information from other sources. If you contact us or interact with our content on third-party platforms, we may receive information that you have made available to us there.

We do not knowingly collect sensitive personal information (such as health, religion, or political opinions). Please do not send it to us.

2. How We Use Your Information and Why

We use your information for the following purposes, relying on the legal bases shown:

• To run and improve the Site, including keeping it secure, fixing problems, and understanding how visitors use it. Legal basis: our legitimate interests in operating and improving our website.
• To respond to your messages and requests. Legal basis: our legitimate interests in answering you, or steps taken at your request.
• To publish and moderate comments and other Submissions you choose to post. Legal basis: our legitimate interests in running a safe and lawful website.
• To send you updates, such as changes to the Site or these policies, and, if you have opted in, newsletters or other communications. Legal basis: legitimate interests, or your consent where the law requires it.
• To carry out surveys or feedback requests that you choose to take part in. Information from surveys is used to improve the Site and is shared with third parties only in aggregate form. Legal basis: your consent or our legitimate interests.
• To comply with the law and to protect our rights, our Content, and the safety of others. Legal basis: legal obligation or legitimate interests.

We do not sell your personal information. We do not use your personal information to train artificial intelligence models.

3. Marketing

We will only send you marketing emails if you have asked to receive them or have otherwise agreed to it. You can opt out at any time by using the unsubscribe link in any message or by emailing privacy@rosiross.com. We will not share your personal information with third parties for their own marketing purposes without your consent.

4. Where We Store Your Personal Information

Your information is stored on secure systems operated by us or by trusted service providers, such as website hosting, email, and analytics providers, that act on our behalf and under our instructions. Information may be stored and processed in countries other than the one where you live (see section 7).

5. Disclosure of Your Information

We may share your personal information only in these situations:

• Service providers that help us run the Site, such as hosting, email delivery, analytics, and security providers. They may use your information only to provide services to us.
• Legal and safety reasons, where we are required to do so by law, court order, or a regulator, or where it is needed to enforce our Terms & Conditions, protect our rights, Content, or users, or prevent fraud or illegal activity.
• Business changes, if VallitaCo or the Site is sold or merged, in which case your information may be transferred to the new owner, who must continue to use it as described in this policy.
• Aggregated or anonymized information, which cannot identify you, may be shared with third parties for analysis or reporting.

Comments and other Submissions you post publicly on the Site can be seen by other visitors. Please think carefully before including personal information in them.

6. Security Over the Internet

We take reasonable technical and organizational steps to protect your information from loss, misuse, and unauthorized access. However, no transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You send information to us at your own risk.

7. International Transfers

Because our service providers may be located in, or process data in, countries outside the European Economic Area (EEA), your information may be transferred internationally. Where this happens, we take steps to make sure it remains protected, for example by using approved contractual safeguards or by working with providers in countries recognized as offering adequate protection.

8. How Long We Keep Your Personal Data

We keep personal information only for as long as we need it for the purposes described in this policy, or as the law requires. In general:

• messages and emails you send us are kept for as long as needed to deal with your request and for a reasonable period afterward;
• comments and Submissions are kept for as long as they remain published on the Site, unless we remove them earlier;
• technical and analytics data is kept for a limited period, in identifiable form only as long as needed; and
• marketing preferences are kept until you opt out, so we can respect your choice.

When we no longer need your information, we delete it or anonymize it.

9. Your Rights

Depending on where you live, you may have the right to:

• ask for access to the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your personal information;
• ask us to restrict or object to our processing of your information;
• ask for a copy of your information in a portable format;
• withdraw your consent at any time, where we rely on consent

To exercise any of these rights, email privacy@rosiross.com. We may need to confirm your identity before acting on your request, and we will respond within the time required by law.

10. Children

The Site is not directed at children under 13, and we do not knowingly collect personal information from them. If you are under 16, please get the permission of a parent or guardian before submitting content or personal information to us. If you believe a child has given us personal information without permission, contact us at privacy@rosiross.com and we will delete it.

11. Links to Other Websites

The Site may link to websites run by others. We are not responsible for their privacy practices or content, and we encourage you to read their privacy policies before giving them any information.

12. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a new “Last updated” date, and changes take effect when posted. Please check this page periodically. Your continued use of the Site means you accept the updated policy.

13. Contact

For any questions about this Privacy Policy, or to exercise your rights over your personal information, contact RosiRoss at privacy@rosiross.com.

14. Cookies

We use cookies and similar technologies as described in section 1. You can manage or delete cookies at any time through your browser settings. For more information about how to do this, visit the help pages of your browser. For questions about our use of cookies, contact privacy@rosiross.com.