Privacy policy

Last updated: July 20, 2026

GAROFALI® ("we," "us," "our") is operated by GAROFALI Limited Liability Company. This policy explains what personal information we collect when you visit garofali.com, subscribe to our communications, or purchase from us, and how we use, share, and protect that information.

By using our website or providing us with your information, you agree to the practices described in this policy.

Information We Collect

Information You Provide to Us

Newsletter and marketing subscribers — your email address, and where you provide it, your first name, last name, and any preferences or interests you share.
Customers — contact details, shipping and billing addresses, order history, product preferences, and payment information processed through our payment providers.
Inquiries and customer service — any information you include when you contact us, such as your name, email address, and the content of your message.

Information Collected Automatically

Site usage data — pages viewed, time on site, referring site, search terms, and other analytics data.
Device and connection data — IP address, general location (derived from IP), device type, browser type, and operating system.
Cookies and similar technologies — small data files stored on your device that allow the site to function and that support analytics, advertising, and personalization. See "Cookies and Tracking" below for more detail.

Information Collected from Third Parties

Marketing and advertising platforms may share with us information about your engagement with our advertising or content.
Affiliate networks and referral partners may share information about purchases attributed to their channels.
Social media platforms may share information when you interact with our content or connect a social account.

How We Use Your Information

To fulfill orders, process payments, and provide customer service.
To send transactional communications such as order confirmations, shipping updates, and customer service replies.
To send marketing communications by email, including newsletters, promotions, product launches, and brand updates, where you have opted in.
To personalize your experience on our site and in our communications.
To measure the performance of our marketing and improve our products, services, and user experience.
To deliver and measure advertising across social media platforms, affiliate networks, marketplaces, and other digital channels.
To detect and prevent fraud, protect the security of our site, and enforce our terms.
To comply with legal obligations and respond to lawful requests from authorities.

How We Share Your Information

We do not sell your personal information for monetary consideration. We do share information with the third parties listed below to operate our business and our marketing programs. Some of these sharing practices may qualify as a "sale" or "sharing" of personal information under certain US state privacy laws. See "Your Rights and Choices" below to learn how to opt out.

Categories of Recipients

Marketing service providers — Klaviyo for email delivery and related marketing automation.
Advertising platforms — Meta, Google, TikTok, Pinterest, and similar platforms. We may share hashed customer lists for targeted advertising and lookalike audiences, and we use conversion pixels and similar technologies to measure advertising performance.
Affiliate and referral networks — Platforms that facilitate referral tracking and attribution, such as Rakuten, LTK, and similar partners, where applicable.
Marketplaces and retail partners — Other platforms where we list or sell products. These platforms operate under their own privacy policies.
Operational service providers — Shopify for site hosting and order management, payment processors, shipping carriers, customer support tools, and analytics providers.
Professional advisors — Legal counsel, accountants, and other advisors as reasonably necessary.
Authorities and successors — We may disclose information when required by law, in response to lawful requests, to protect our rights or the rights of others, or in connection with a merger, acquisition, or sale of business assets.

How We Store and Protect Your Information

Your information is stored by the service providers identified above, including Shopify for site infrastructure and Klaviyo for email marketing. We work only with partners whose privacy and security practices are consistent with this policy, and we maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction.

We retain personal information for as long as is necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements. Subscriber data is retained while you remain subscribed and for a reasonable period afterward. Customer records are retained for the period required by applicable tax, accounting, and consumer protection laws.

Your Rights and Choices

Depending on where you live, you may have the following rights with respect to your personal information:

Access — request a copy of the personal information we hold about you.
Correction — request that we correct inaccurate or incomplete information.
Deletion — request that we delete your personal information, subject to limited exceptions.
Opt out of marketing — unsubscribe from email at any time using the link in every message.
Opt out of sale or sharing — direct us to stop sharing your personal information with advertising and marketing partners.
Limit use of sensitive personal information — where applicable (we do not currently use sensitive personal information beyond what is necessary to provide our services).
Non-discrimination — exercise these rights without being denied service or charged a different price.
Appeal — if we deny your request, you may have the right to appeal our decision using the contact information below.

To exercise any of these rights, email us at contact[at]garofali[dot]com. We respond to verifiable requests within 45 days. Where reasonably necessary, we may extend this period by an additional 45 days and will provide notice to you within the original response period.

You may also opt out of the sale or sharing of your personal information for cross-context behavioral advertising by emailing us at contact[at]garofali[dot]com with the subject line "Privacy Opt-Out Request."

Global Privacy Control: If you visit our site with the Global Privacy Control (GPC) signal enabled in your browser, we will treat this as a valid request to opt out of the sale or sharing of your personal information for the browser and device you used, to the extent required by applicable law.

Cookies and Tracking

We use cookies and similar technologies to operate our site, understand site usage, and support advertising. You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; instructions are available through your browser's help documentation.

Essential cookies — required for the site to function, including for checkout and account security.
Analytics cookies — help us understand how visitors interact with the site.
Marketing cookies — used to deliver and measure advertising on our site and across other platforms.

Disabling non-essential cookies will not prevent you from using the site, but some personalization and advertising features may not work as intended.

Children's Privacy

Our site and services are not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us with personal information, please contact us at contact[at]garofali[dot]com and we will take steps to delete it.

International Users

GAROFALI® operates from the United States. If you access our site or services from outside the United States, your information may be transferred to, stored in, and processed in the United States or in other countries where our service providers operate. By using our site, you consent to the transfer of your information to countries whose privacy laws may differ from those in your country of residence.

European Economic Area and UK Visitors

If you are located in the EEA or UK, you may have additional rights under the GDPR and UK GDPR, including the right to access, correct, delete, restrict, or port your personal information, and the right to object to processing based on legitimate interests, including direct marketing. You may also lodge a complaint with your local data protection authority. See our Terms of Service for additional information regarding EU consumer withdrawal rights.

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices, our service providers, or applicable law. When we do, we will revise the "Last updated" date at the top of this policy. We will provide notice of material changes through a notice on our site or by email where appropriate.