Who we are. Cartful Solutions, Inc. (“Cartful”) provides Cartful Studio, a quiz tool used on brand websites. For quizzes on a brand’s site, the brand is the controller of your data and Cartful acts as its processor. What we collect. Quiz interaction data (steps answered, selections, timestamps, basic technical data needed to run the quiz). Our analytics exclude direct identifiers like your full IP address, email, or name. If a brand asks for your email to send results, that email is passed to the brand’s system and not retained by Cartful. Why we collect it. To run the quiz and show product recommendations (strictly necessary).To measure performance only if you consent (non-essential analytics).Cookies & consent. Non-essential tracking is off by default in regions that require consent and is enabled only if you opt in or your consent choices (via the site’s consent banner) indicate opt-in. We honor Global Privacy Control (GPC) as a “no” for non-essential tracking. Where data is processed. EU visitors are processed and logged in EU cloud regions; TLS termination also occurs in the EU. For other regions, processing occurs in the region the brand selects. If a brand enables a non-EU service, any transfer happens only as permitted by law and the brand’s policy.How long we keep it. Raw analytics events: 6 months. De-identified aggregates: 36 months (US) and 13 months (EU). Security/operations logs: short operational window (≤90 days). Backups stay in-region; deletions propagate on the next cycle. Sharing. We share data with the brand that hosts the quiz and with limited subprocessors needed to provide the service (e.g., AWS, Cloudflare, Sentry for error monitoring). We do not run third-party advertising. Your rights. Please contact the brand hosting the quiz to exercise your privacy rights. Cartful will support the brand as its processor. You may also reach us at security@cartfulsolutions.com and we will coordinate with the brand. We respond within 30 days where required. Contact. Cartful Solutions, Inc., PO Box 520, New York, NY 10024, USA.
Effective date: September 1, 2025 • Version: 1.0