Privacy Policy

Effective date: November 17, 2025
Last updated: November 17, 2025

Who we are (Data Controller)

Carnicraft (“we,” “us,” “our”) operates https://www.carnicraft.com/ (the “Site”).

  • Data controller: Carnicraft
  • Contact email: info@carnicraft.com
  • Mailing address: Manouba, Tunisia

This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit or use the Site. By using the Site, you agree to this Policy.

Scope

This Policy applies to information collected through the Site and any related contact (such as emails you send to us).

Information we collect

Information you provide to us

We may collect information that you provide directly, such as:

  • Contact form submissions: first name, last name, email address, and the content of your message
  • Emails you send to us

Please do not include sensitive personal information (e.g., health records, financial account numbers, government IDs) in your messages.

Information collected automatically

When you visit or use the Site, we and our service providers may automatically collect:

  • Device and usage data: IP address (and approximate location), browser type, operating system, referring URLs, pages viewed, time spent on pages, and actions on the Site
  • Cookies and similar technologies: including consent status, ad preferences, and analytics events (see “Cookies & consent” below)

We do not intentionally collect sensitive personal data.

How we use your information (purposes)

We may use the information we collect for purposes such as:

  • Responding to and managing your inquiries
  • Operating, maintaining, and improving the Site
  • Securing the Site and preventing fraud or abuse
  • Measuring and analyzing traffic and usage
  • Personalizing and measuring advertising, where permitted by law or your consent
  • Complying with legal obligations and responding to lawful requests

Legal bases for processing (GDPR/UK GDPR)

If you are located in the EEA or UK, our processing of your personal data is based on one or more of the following legal bases:

  • Consent – for example, for non‑essential cookies/ads and certain uses of contact form data
  • Legitimate interests – for example, to maintain site security, perform non‑invasive analytics with safeguards, and respond to your messages
  • Legal obligations – for example, to comply with record‑keeping or other legal requirements

You may withdraw your consent at any time where processing is based on consent; this does not affect processing carried out before withdrawal.

Advertising and analytics

We use third‑party services to display ads and analyze how our Site is used. These services may use cookies, pixels, and similar technologies.

Ezoic Services

This website uses the services of Ezoic Inc. (“Ezoic”), including to manage third‑party interest‑based advertising. Ezoic may employ a variety of technologies on this website, including tools to serve content, display advertisements, and enable advertising to visitors of this website, which may utilize first‑ and third‑party cookies.

A cookie is a small text file sent to your device by a web server that enables the website to remember information about your browsing activity. First‑party cookies are created by the site you are visiting, while third‑party cookies are set by domains other than the one you’re visiting. Ezoic and its partners may place third‑party cookies, tags, beacons, pixels, and similar technologies to monitor interactions with advertisements and optimize ad targeting. Disabling cookies may limit access to certain content and features on the website, and rejecting cookies does not eliminate advertisements but will result in non‑personalized advertising.

The following information may be collected, used, and stored in a cookie when serving personalized ads:

  • IP address
  • Operating system type and version
  • Device type
  • Language preferences
  • Web browser type
  • Email (in a hashed or encrypted form)

Ezoic and its partners may use this data in combination with information that has been independently collected to deliver targeted advertisements across various platforms and websites. Ezoic’s partners may also gather additional data, such as unique IDs, advertising IDs, geolocation data, usage data, device information, traffic data, referral sources, and interactions between users and websites or advertisements, to create audience segments for targeted advertising across different devices, browsers, and apps.

You can view Ezoic’s privacy policy for this site, which includes more detail about cookies and Ezoic’s advertising partners, at:
http://g.ezoic.net/privacy/carnicraft.com

For general information about managing cookies, you may also visit:
https://www.allaboutcookies.org/manage-cookies

For general information about interest‑based advertising and how to opt out, you may visit:
https://optout.aboutads.info (US) or
https://www.youronlinechoices.eu (EU)

Google AdSense and other ad partners

We may use Google AdSense and other advertising partners to display ads. These partners may use cookies or similar technologies to:

  • Serve ads based on your visits to this and other websites
  • Measure ad performance and effectiveness

In the EEA/UK, we use a Consent Management Platform (CMP) with Google Consent Mode v2 via Ezoic or a similar provider. If you do not consent to advertising cookies, we serve non‑personalized ads.

For more information:

Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors use the Site (for example, which pages are viewed, how long visitors stay, and which devices are used). This information is aggregated and is not used to directly identify you.

  • GA4 uses region‑based data controls and does not log or store full IP addresses.
  • You can opt out of Google Analytics by installing the browser add‑on: https://tools.google.com/dlpage/gaoptout
  • Data retention settings in GA4 are typically between 2–14 months.

Other service providers

We also use third‑party service providers such as:

  • Hosting and CDN providers – to operate and deliver the Site
  • Email service providers – to send and receive emails
  • Form plugins and anti‑spam/CAPTCHA services – to process and secure form submissions
  • Consent Management Platform (CMP) providers – to capture and manage cookie consent

These providers act as processors on our behalf and only process personal data as necessary to provide their services.

“Sale” or “sharing” under California law (CPRA)

Under the California Privacy Rights Act (CPRA):

  • We do not sell personal information for money.
  • We may “share” identifiers and internet or network activity information with advertising partners for cross‑context behavioral advertising (interest‑based ads).

California residents can opt out of such “sharing” at any time:

  • By using the “Do Not Sell or Share My Personal Information” link in our footer (where available), or
  • By sending a request to info@carnicraft.com
  • By using Global Privacy Control (GPC), where supported by the browser

See “Your rights – California residents” below for more detail.

Cookies & consent

We use cookies and similar technologies for:

  • Strictly necessary purposes (site functionality and security)
  • Functional purposes (remembering preferences)
  • Analytics (measuring traffic and usage)
  • Advertising (personalized ads, where permitted)

In the EEA/UK, our CMP will:

  • Ask for your consent for non‑essential cookies
  • Communicate your choices to partners (for example via Google Consent Mode v2)

You can change your cookie choices at any time via the “Manage Cookies” or similar link in the footer (where available).

You can also control or delete cookies in your browser settings. Please note that some features of the Site may not work properly if you disable certain cookies.

Data retention

We retain personal data only as long as necessary for the purposes described in this Policy, or as required by law. For example:

  • Contact inquiries: up to 12 months, unless we need to keep them longer for legal or operational reasons
  • Consent logs (from CMP): up to 13 months (typical CMP retention)
  • Analytics data: per provider settings (generally 2–14 months in GA4)
  • Advertising logs: per partner policies (often up to 13 months)

International data transfers

Your information may be transferred to and processed in countries outside your home country, including countries that may not provide the same level of data protection (for example, the United States).

Where required by law, we rely on appropriate safeguards, such as standard contractual clauses or comparable mechanisms, to protect your information in connection with such transfers.

Your rights

EEA/UK residents (GDPR/UK GDPR)

If you are located in the EEA or UK, you may have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Erase your personal data (“right to be forgotten”)
  • Restrict or object to certain processing
  • Receive your data in a structured, commonly used, machine‑readable format (data portability)
  • Withdraw consent at any time where processing is based on consent (this does not affect processing carried out before withdrawal)

To exercise these rights, please contact us at info@carnicraft.com.

You also have the right to lodge a complaint with your local supervisory authority, such as:

California residents (CPRA)

If you are a California resident, you may have the right to:

  • Know the categories and specific pieces of personal information we have collected about you
  • Request the deletion of your personal information (subject to certain exceptions)
  • Correct inaccurate personal information
  • Opt out of the “sale” or “sharing” of personal information for cross‑context behavioral advertising
  • Limit the use and disclosure of sensitive personal information (we do not use sensitive personal information to infer characteristics)
  • Not be discriminated against for exercising your privacy rights

To exercise these rights:

  • Use the “Do Not Sell or Share My Personal Information” link in our footer (where available), or
  • Email us at info@carnicraft.com

We may need to verify your identity before fulfilling your request. We aim to respond within 45 days, or notify you if we need more time as allowed by law.

We honor Global Privacy Control (GPC) signals where detected.

Security

We use reasonable technical and organizational measures to help protect your personal information, such as encryption in transit (HTTPS) and access controls. However, no online service can be guaranteed to be completely secure.

Children’s privacy

Our Site is not directed to children under 13 (or the applicable age of digital consent in your jurisdiction), and we do not knowingly collect personal information from children in this age group.

If you believe that a child has provided us with personal information, please contact us and we will take steps to delete such information.

Do Not Track

We do not respond to browser “Do Not Track” (DNT) signals. You can control tracking and advertising preferences by:

  • Using our cookie/consent tools (where available)
  • Adjusting your browser’s privacy settings
  • Using tools like Google Ads Settings or Global Privacy Control (GPC)

External links

The Site may contain links to third‑party websites. We are not responsible for the content, privacy practices, or security of those external sites. We encourage you to review their privacy policies before providing any personal information.

Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the “Last updated” date at the top.

Your continued use of the Site after any changes take effect constitutes your acceptance of the updated Privacy Policy.

Contact us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, you can contact us at:

Helpful links