Legal
Privacy policy
What we collect, why we hold it, and who processes it on our behalf.
Last updated September 2026
Who we are
Caviar & Roe operates this website at caviarroe.com. This policy covers the website and the ordering process running on it.
What we collect
Information you give us. If you create an account we store the email address you register and, if you choose to add them, your name, phone number and shipping or billing addresses. If you place an order we store the contact and delivery details needed to fulfil and support it, along with a record of what was ordered.
Payment details. Card numbers are entered directly into fields hosted by Stripe and are never sent to, seen by, or stored on our servers. We retain only what Stripe returns to us: a payment reference, the amount, the status, and enough detail to identify the transaction for support and refunds.
Information collected automatically. Our hosting provider records standard server logs, including IP address, timestamp, requested URL and browser user agent, which are used to operate and secure the site.
Cookies and browser storage
We use browser storage for the site to function rather than to build a profile of you. Specifically: a cart saved in your browser so it survives a refresh, your chosen weight unit (ounces or grams), and — if you sign in — an authentication cookie set by Supabase that keeps you signed in. Clearing your browser storage removes all of these.
Where analytics or advertising technologies are enabled, those set their own cookies or identifiers. See the section below.
Analytics and advertising
This site is built to support Google Analytics 4, Microsoft Clarity and the Meta pixel. Each is loaded only when it has been configured for the production site, so one or more may not be running when you visit. You can confirm what is actually loading in your browser’s network inspector at any time.
Where they are running: Google Analytics 4 measures aggregate traffic and which pages and products are viewed. Microsoft Clarity records anonymised session replays and heatmaps to show where the interface confuses people; text you type into form fields is masked before it leaves your browser, so names, emails, phone numbers and addresses do not appear in recordings. The Meta pixel measures the performance of advertising.
These providers act as independent controllers of the data they collect. Their own policies apply in addition to this one.
Who processes data for us
We use a small number of providers, each for a specific purpose: Vercel for hosting and delivery, Supabase for the database and account authentication, and Stripe for payment processing. Where the analytics and advertising technologies above are enabled, Google, Microsoft and Meta receive the data described in that section.
We do not sell personal information, and we do not share it with third parties for their own independent marketing.
How long we keep it
Account and order records are retained while your account is open and afterwards for as long as needed to meet tax, accounting and consumer-protection obligations. Server logs and analytics data are retained according to each provider’s own retention settings.
Your choices
You can view and change your account details, addresses and preferences from your account pages while signed in, and you can ask us to delete your account. Depending on where you live you may have additional rights over your personal information, including access, correction, deletion and objecting to certain processing. Contact us and we will respond.
You can block or delete cookies in your browser settings, and you can opt out of Google Analytics across all sites using Google’s browser add-on.
Children
This site sells food products and is intended for adults. It is not directed to children, and we do not knowingly collect personal information from them.
Changes and contact
If this policy changes materially we will update the date at the top of this page. For any privacy question or request, contact us through the details published on this site.