Casa Modern Retail - Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how Casa Modern Retail, Inc. (“Casa Modern Retail,” “we,” “us,” or “our”) collects, uses, and shares personal information about individuals who register for an account and use our services (our “Users”).

This policy applies only to the personal information we collect directly from our Users for the purposes of account administration, billing, and providing our services.

This Privacy Policy does not apply to the data our clients provide when they connect their business systems to our Service. The processing of that data, which may include their own customers’ personal information, is governed by our separate Client Data Agreement (CDA). In that context, our client is the “Business” or “Data Controller” and we act as a “Service Provider” or “Data Processor” on their behalf.

2. Information We Collect

We collect information about you directly from you and automatically through your use of our Service.

2.1. Information You Provide to Us:

  • Account Information: When you create an account, we collect your name, email address, and password.
  • Billing Information: When you purchase a Subscription, our third-party payment processor (e.g., Stripe) will collect your payment information. We do not directly store your full credit card number.
  • Communications: If you contact us directly, we may receive additional information about you, such as the contents of your messages and any other information you choose to provide. We also store messages sent between users on our platform.

2.2. Information We Collect Automatically:

  • Usage Data and Logs: Like most websites and services, we automatically collect certain information when you use our Service. This may include your Internet Protocol (IP) address, browser type, operating system, pages viewed, the dates and times of your requests, and other interaction data. We use this information to secure and improve our Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide and Maintain the Service: To create and manage your account, process payments, and provide you with the features and functionality of the Service.
  • To Improve Our Service: To understand how our Users interact with the Service so we can improve it and develop new features.
  • To Communicate With You: To send you service-related announcements, technical notices, security alerts, and support messages.
  • For Security and Fraud Prevention: To protect the safety and security of our Service, our users, and the public.
  • To Comply with Law: To comply with applicable legal obligations, including responding to lawful requests from government authorities.

We do not sell the personal information of our direct Users.

4. How We Share Your Information

We may share your information in the following limited circumstances:

  • With Service Providers: We share information with third-party vendors and service providers who perform services on our behalf, such as our cloud hosting provider (e.g., Amazon Web Services) and our payment processor (e.g., Stripe). These service providers are contractually obligated to protect your information and may only use it to provide services to us.
  • For Legal Reasons: We may disclose your information if we believe it is required to comply with a law, regulation, legal process, or governmental request; to protect the safety of any person; to address fraud, security, or technical issues; or to protect our rights or property.
  • Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

5. Your California Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) regarding your personal information. These rights include:

  • Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, as well as the sources of that information and the business purposes for collecting it.
  • Right to Delete: You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.

To exercise these rights, please contact us using the information in the “Contact Us” section below. We will not discriminate against you for exercising your CCPA rights.

6. Data Security

We implement reasonable technical and organizational measures to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no internet or email transmission is ever fully secure or error-free, so you should take special care in deciding what information you send to us.

7. Data Retention

We will retain your personal information for as long as your account is active or as needed to provide you with the Service. We may also retain your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

8. Children's Privacy

Our Service is not directed to individuals under the age of 21, and we do not knowingly collect personal information from individuals under 21\. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the new policy on our website or by sending you an email or other notification, and we will update the "Last Updated" date at the top of this policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: legal@growcasa.co

Last Updated: August 25, 2025