Privacy policy

Effective date: October 24, 2026
Last updated: October 24, 2026

1. Who we are

CasaHeart ("CasaHeart," "we," "us") is an online store at casaheart.com operated by Rayfinite LLC, a Wyoming limited liability company. This Privacy Policy explains how we collect, use, share and protect personal information when you visit our site, buy from us or contact us. Questions or privacy requests: support@rayfinite.com.

2. Information we collect

Information you give us: name, email address, phone number (if you provide it at checkout, for example for delivery), billing and shipping address, order details, account login details (if you create an account), messages to support, and product reviews (if you submit them).
Payment information: Payments are processed by our payment processors, such as Shopify Payments, including Shop Pay, Apple Pay and Google Pay. We don't store full card numbers. Processors may give us limited details, such as card type and last four digits.
Information collected automatically: device and browser type, IP address, approximate location based on IP, pages viewed, referring URLs, and cart and checkout activity, collected with cookies, pixels and similar technologies (see Section 5).
Information from others: fulfillment and tracking information from suppliers and carriers, fraud-screening signals from our platform and payment providers, and information from analytics and marketing partners, if we use them.

We don't knowingly collect sensitive personal information such as Social Security numbers, health information or precise geolocation.

3. How we use information

We use personal information to:

process, fulfill and ship orders, including passing orders to our suppliers;
send order confirmations, shipping updates and service messages;
handle returns, refunds, replacements, shipping claims and customer support;
prevent fraud and misuse, and keep the site secure;
run, analyze and improve the store;
send marketing emails only if you opted in (you can unsubscribe any time);
show advertising, including on third-party platforms, if enabled (see Sections 4 and 5);
comply with legal, tax and accounting obligations and enforce our Terms.

4. How we share information

Platform: Our store is hosted on Shopify, which processes information for us to provide the storefront and checkout.
Payment processors, to process payments and screen for fraud.
Suppliers: We're a dropshipping store. To fulfill your order, we share your name, shipping address, phone number (if the carrier requires it) and order contents with the supplier that ships your item, including suppliers on the Syncee marketplace.
Shipping carriers and shipping insurers, to deliver orders and handle lost or damaged shipment claims.
Service providers: email, customer-support, analytics and advertising tools and Shopify apps that help us run the store.
Legal and safety: to comply with law, respond to lawful requests, protect rights and safety, or investigate fraud.
Business transfers: as part of a merger, acquisition, financing, reorganization or sale of assets.

Sale and sharing of personal information. We use Shopify's built-in analytics and customer-event tools, and may in the future use advertising tools, that may count as a "sale" or "sharing" of personal information for cross-context behavioral advertising under some state privacy laws, including California's. You can opt out at any time using our "Do Not Sell or Share My Personal Information" page at casaheart.com/pages/data-sharing-opt-out or by emailing support@rayfinite.com with the subject "Do Not Sell or Share." We also treat a Global Privacy Control (GPC) signal from your browser as a valid opt-out request for that browser. We don't knowingly sell or share the personal information of consumers under 16.

5. Cookies, pixels and similar technologies

We and our partners use cookies, pixels and similar technologies to keep the site and cart working, remember your preferences, understand how visitors use the site, and, if enabled, measure and personalize advertising. We currently use Shopify's built-in analytics and customer-event tools. We don't currently run third-party advertising pixels on the site, and we'll update this policy before adding any. You can control cookies through your browser settings and, where offered, our cookie preferences tool. Blocking some cookies may affect how the site works.

Do Not Track: We don't currently respond to browser "Do Not Track" signals, but we do honor Global Privacy Control signals as described above.

6. Data retention

We keep personal information only as long as needed for the purposes in this policy, including fulfilling orders, handling returns and claims, preventing fraud, and meeting tax, accounting and legal obligations. Marketing data is kept until you unsubscribe or ask us to delete it. When information is no longer needed, we delete or de-identify it.

7. Security

We use reasonable safeguards and rely on Shopify's and our payment processors' security for checkout. No method of transmission or storage is completely secure.

8. Your choices and rights

Everyone: You can unsubscribe from marketing emails using the link in any email, update your account details, and email support@rayfinite.com to request access to, correction of, or deletion of your personal information.
California residents: Depending on whether California privacy law applies to us, you may have the right to know and access the personal information we've collected about you, to correct it, to delete it, to opt out of its sale or sharing, and to not be discriminated against for exercising these rights. To make a request, email support@rayfinite.com with the subject "California Privacy Request." We'll verify your request by matching it to the information we have on file. You may use an authorized agent as permitted by law.
California "Shine the Light": California residents may ask whether we disclosed personal information to third parties for their own direct-marketing purposes in the previous calendar year. Email support@rayfinite.com.
Other US states: Residents of some other states may have similar rights. We'll honor requests as required by applicable law.

9. Children's privacy

Our site is intended for adults and isn't directed to children under 13. We don't knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact support@rayfinite.com and we'll delete it.

10. Where information is processed

We're based in the United States and sell to US customers. Your information may be processed in the United States and wherever our service providers operate.