Ships from a US warehouse · 30-day returns

Privacy policy

Last updated: October 19, 2026

This policy explains what personal information we collect when you visit Rosmira, place an order, sign up for emails or contact us, and how we use and share it. It is written for customers in the United States. It is designed to meet the California Online Privacy Protection Act (CalOPPA), the California Consumer Privacy Act (CCPA) and other US state privacy laws.

Who we are

Rosmira is run by: Eugene Chicevic, Československej armády 241/28, 972 51 Handlová, Slovakia Email: support@workfish.app

Summary

  • We use your information to process and deliver your order, to answer you, to keep the store secure and to measure and improve our ads.
  • We do not sell your personal information for money.
  • If this store uses ad tools from Meta, TikTok or Google, US privacy laws may treat that as "selling" or "sharing" your information for targeted advertising. You can opt out at any time on our Your Privacy Choices page. We also honor the Global Privacy Control signal automatically.

What we collect and where it comes from

We collected these categories of personal information in the last 12 months:

  • Identifiers and contact details: name, email address, phone number (if you give it), shipping and billing address, IP address, and random online identifiers stored in cookies. Source: you, your browser or device.
  • Order and commercial information: what you bought, prices, order status, returns and refunds, and messages with us. Source: you, Shopify (our checkout) and our suppliers and carriers.
  • Internet activity: pages you visited on this store, buttons you clicked, the ad or campaign that brought you here, browser and device type. Source: your browser or device, our cookies and, if used, ad tools.
  • Approximate location: country, state or city derived from your IP address or shipping address. We do not collect precise geolocation.
  • Inferences: ad platforms may infer your interests from your activity to show you ads.

We do not collect sensitive personal information as defined by law. Shopify and its payment providers process your card details on the checkout page. We never see your full card number.

How we use it

  • To process, ship and track your order, handle returns, refunds and complaints, and send order emails.
  • To answer your messages and give customer service.
  • To keep the store and checkout secure and prevent fraud and abuse.
  • To count visits and test versions of our pages, so we can improve the store.
  • To measure our ads and show you relevant ads (only if this store uses ad tools, and only until you opt out).
  • To send marketing emails if you signed up, or agreed at checkout. If you entered your email at checkout but did not finish, we may send you a reminder about your checkout. Every marketing email has an unsubscribe link.
  • To keep tax and accounting records and to meet other legal duties.
  • If you add a gift message, we store it with your order to print the gift card.

Who we disclose it to

We give personal information to service providers only as needed for the purposes above:

  • Shopify — checkout, payment processing and order management.
  • Cloudflare — hosting, security and email routing for this store.
  • Mailgun (Sinch) — sending our emails.
  • CJdropshipping and other suppliers, warehouses and carriers — packing and delivering your order (name, shipping address, phone number, order contents).
  • Meta, TikTok and Google — ad measurement and advertising, only if this store uses their tools and you have not opted out.
  • Tax advisers, authorities and courts, when the law requires it.

"Selling" and "sharing" for targeted advertising

We do not sell personal information for money. If this store uses the Meta Pixel, the TikTok Pixel or Google ad or analytics tags, these companies receive identifiers (cookie IDs, IP address), internet activity (pages viewed, purchases) and device information. Under the CCPA this may count as "sharing" for cross-context behavioral advertising, and under other state laws as "selling" or "targeted advertising". In the last 12 months we may have shared these categories with these companies.

You can opt out at any time:

  • on our Your Privacy Choices page, or
  • by turning on the Global Privacy Control (GPC) in your browser or with an extension. We treat GPC as a valid opt-out for that browser, in every state.

We do not knowingly sell or share the personal information of anyone under 16.

Do Not Track and tracking by other companies

Our store does not respond to "Do Not Track" browser signals, because there is no agreed standard for them. We do honor GPC, as explained above. If this store uses ad tools from Meta, TikTok or Google, those companies may collect information about your online activity over time and across different websites. See our cookie policy for details.

How long we keep it

  • Orders and invoices: as long as tax and accounting law requires (generally up to 10 years).
  • Returns, complaints and related messages: as long as we need them to handle the case, and then until possible legal claims expire.
  • Other customer service messages: up to 24 months after the conversation ends.
  • Email marketing: until you unsubscribe. After that, we keep your email address on a suppression list so we never email you again.
  • Cookies: see our cookie policy.

Your rights

Depending on the state you live in, you have the right to:

  • know what personal information we collect, use and disclose, and get a copy of it;
  • delete personal information we collected from you;
  • correct inaccurate personal information;
  • opt out of the sale or sharing of your personal information and of targeted advertising;
  • limit the use of sensitive personal information (we don't collect any);
  • appeal if we refuse your request.

We give these rights to all our US customers, whatever state you live in.

How to make a request

  • Opt out: use our Your Privacy Choices page, or turn on GPC.
  • All other requests: email support@workfish.app with the subject "Privacy request".
  • Verification: we ask you to confirm the request from the email address used for your order, or to give your order number. We only ask for what we need to verify you.
  • Authorized agents: someone you authorize can make a request for you. We may ask for your signed permission and ask you to verify your identity with us directly.
  • We reply within 45 days. If we need more time, we tell you why.
  • Appeals: if we refuse your request, reply to our answer with the subject "Appeal". We decide within 60 days. If you are not satisfied, you can contact your state attorney general.

No discrimination

We will not deny you goods, charge you a different price or give you a lower quality of service because you used your privacy rights.

Children

Our store is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child gave us information, email us and we will delete it.

Security

We use service providers with strong security, encrypted connections (HTTPS) and limited access to your data. No system is perfectly secure.

Changes to this policy

When we change this policy, we update it on this page and change the "Last updated" date. If a change is significant, we will show a notice on the store or email you.

Contact

support@workfish.app Eugene Chicevic, Československej armády 241/28, 972 51 Handlová, Slovakia