Privacy policy

Who we are

This website, getcartlet.com, and the Cartlet products are run by Ashik (“Cartlet”, “we”, “us”). We are the controller of the personal data described in this policy.

Questions about privacy? Email us at [email protected].

Summary

• We collect your email address (and, if you add it, your store URL) only when you join a waitlist or ask for launch pricing.
• We don’t use analytics, advertising or tracking cookies on this website.
• We don’t sell or rent personal data, and we don’t use it for advertising.
• The free Cartlet plugin keeps your store’s data on your own website. It doesn’t send it to us.

What we collect and why

Waitlist and launch-pricing forms

When you sign up for the Cartlet for Shopify waitlist or for Combo launch pricing, we collect your email address and, for Shopify, the store URL if you choose to give it. We use it to send you a launch email about the product you signed up for, and to answer you if you write back. Our legal basis is your consent, which you can withdraw at any time.

Technical data

Like any website, our servers and our security provider receive technical data when you visit: your IP address, browser and device type, the pages you request, and the time of the request. We use it to deliver the site, keep it secure and stop abuse. Our legal basis is our legitimate interest in running a safe, working website.

Emails you send us

If you contact us, we keep your message and email address so we can reply and keep a record of the conversation.

Cookies and local storage

We don’t set analytics or advertising cookies. The site may use:

• Security cookies from Cloudflare, which protect the site from bots and attacks.
• Cloudflare Turnstile on our forms, which checks that a real person is submitting them.
• Your browser’s local storage, only to remember that you closed the announcement bar.
• WordPress login cookies, only if you sign in to manage the site.

Services we use

We use these providers to run the website. Each one receives only what it needs to do its job:

• Hostinger – web hosting. Stores the website and the form sign-ups.
• Cloudflare – content delivery, security and Turnstile spam protection. Processes technical data such as your IP address.
• Fluent Forms (a WordPress plugin running on our own server) – stores waitlist sign-ups in our website’s database.
• Lemon Squeezy – sells Cartlet Pro as our merchant of record. When you buy, Lemon Squeezy collects your name, email, billing address and payment details, handles tax, and issues your license key. We receive your order details and license, never your full card number.
• Google Fonts – serves the website’s font. Your browser requests it from Google, which receives your IP address.
• jsDelivr – serves the small script that draws QR codes in our demo. Your browser requests it, which shares your IP address.
• Vimeo – hosts our product video. It loads only when you press play, with Vimeo’s “do not track” setting turned on.
• WordPress.org – where the free plugin is downloaded. Its own privacy policy applies when you visit it.

Some of these providers may process data outside your country. Where that happens, they rely on safeguards such as the European Commission’s standard contractual clauses.

The Cartlet plugin and app

This policy covers getcartlet.com. When you use the Cartlet plugin on your WooCommerce store, the shared carts, saved carts and statistics it creates are stored in your own store’s database. You are responsible for that data and for telling your customers about it; Cartlet works with WordPress’s privacy tools to export and erase it. By default the plugin makes no requests to outside services, and it doesn’t send your store’s data to us.

Cartlet Pro licenses are issued and managed through Lemon Squeezy. When the Shopify app launches, this policy will be updated to describe any app data we handle for it.

Sharing

We share personal data only with the providers listed above, to run the site; when the law requires it; or to protect our rights and users. We never sell personal data.

How long we keep data

• Waitlist sign-ups: until the product you signed up for launches and we’ve sent the launch email, or until you ask us to delete them – whichever comes first.
• Emails you send us: as long as needed to help you, then up to two years for our records.
• Technical and security logs: kept by our hosting and security providers for a short period, usually days to weeks.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent at any time. To use any of these rights, email us at [email protected]. You can also complain to your local data protection authority.

Security

The site runs over HTTPS only, behind Cloudflare, and our forms are protected against automated spam. No system is perfectly secure, but we limit what we collect and who can access it.

Children

Cartlet is a tool for businesses. We don’t knowingly collect data from children under 16.

Changes to this policy

We’ll update this page when our practices change, and change the “Last updated” date above. If a change is significant, we’ll make it clear on this page.

Contact

Ashik
Email: [email protected]