Privacy Policy
Effective date: September 30, 2026.
Who we are
Caro Rocha Designs presents the artwork and children’s books of Zuleika Caro Rocha. Our website is carorochadesigns.com. For questions about this policy or your personal information, contact carorochadesigns@gmail.com.
Contact forms and email
When you contact us, we receive the name, email address, message, and other information you choose to provide. We use this information to respond to inquiries, communicate about our work, and maintain relevant correspondence. Please do not send payment card details or sensitive personal information through our contact form.
We use WPForms for our contact form and WP Mail SMTP connected to Gmail for website email delivery. Messages and replies are retained in our email account. WPForms Lite Connect entry backups are disabled. This does not prevent information from being retained in email, relevant service logs, or backups.
Cookies and site access
WordPress uses cookies for functions such as checking browser cookie support, maintaining login sessions, and remembering account preferences. These account-related functions apply when someone accesses the login or administration areas. You can manage or delete cookies through your browser settings; blocking them may affect those functions.
Public account registration and visitor comments are disabled. You do not need a website account to browse our work or send an inquiry.
Analytics and third-party tracking
We have not added Google Analytics, Google Tag Manager, advertising pixels, or embedded videos to this website. We do not use these tools to track visitors across websites. We display a live Instagram feed as described below. The website does not currently provide a separate response to browser Do Not Track signals.
If we introduce analytics or additional embedded third-party content, we will update this policy to describe the information involved and provide any required choices before enabling that collection.
Instagram feed
We use the Smash Balloon Social Photo Feed plugin to display recent public posts from our Instagram account. The plugin periodically retrieves this content through Instagram’s API and stores cached feed data and optimized copies of the images on our WordPress website. The plugin does not use cookies or track visitor activity.
We have enabled the plugin’s GDPR setting. This allows the feed images to be delivered from our website instead of being requested directly from Instagram when a visitor opens the page. Instagram therefore is not automatically contacted by the visitor’s browser merely because the feed is displayed.
If you select an Instagram image or the Follow on Instagram button, you will leave our website and visit Instagram. Instagram and its parent company, Meta Platforms, Inc., may then process technical information, cookies, account information, and interactions according to the Meta Privacy Policy.
External links and Amazon purchases
Our website contains links to Amazon, Instagram, Facebook, and TikTok. When you follow an external link, the destination website processes information according to its own privacy policy.
Some Amazon links on this website are affiliate links. As an Amazon Associate I earn from qualifying purchases.
When you follow an Amazon affiliate link, Amazon may use cookies and other identifiers to recognize the referral and attribute qualifying purchases to our account. For details about Amazon’s handling of personal information and your choices, please read the Amazon Privacy Notice.
Book purchases take place through Amazon. We do not operate a checkout or collect payment card details on this website. Amazon handles purchase and payment information according to its own policies.
Who we share information with
We use service providers to operate the website and deliver email, including Namecheap EasyWP for hosting and Google for Gmail. These services process information as needed for their functions. Hosting and security services may process technical information, such as IP addresses, browser details, and request logs, to operate and protect the website.
We do not sell your contact information. We may disclose information when reasonably necessary to comply with law or address fraud, abuse, or security threats. Service providers may process information outside your country.
Google connection for website email
Our connection, Caro Rocha Website Email, authorizes the website to send notifications through our own Gmail account. Visitors do not need to connect a Google account. The integration uses connected-account information and authorization tokens to maintain the connection, and recipient addresses, subjects, and message content to send emails. Authorization credentials are maintained in the website email configuration.
Information received through Google APIs is used for this email functionality, not for advertising or sale. Our use and transfer of that information will follow the Google API Services User Data Policy, including its Limited Use requirements. The connected account owner can revoke access in their Google Account settings.
How long we retain information
We retain correspondence and related records for as long as reasonably needed to respond to inquiries, maintain relevant records, and meet applicable obligations. Cached Instagram feed data and locally stored image copies may remain until the plugin refreshes or clears them, or until they are removed through the website’s plugin or media settings.
Your choices and requests
Email carorochadesigns@gmail.com to request access to, correction of, or deletion of personal information we hold about you. We may need to verify your identity. We handle requests in accordance with applicable law. Some information may need to be retained for legal or security reasons, and backup copies may remain until those backups expire.
Security and children’s privacy
We take reasonable steps to protect personal information, although no online system can guarantee complete security. Our contact form is intended for adults, including parents, caregivers, and educators. Please do not submit a child’s personal information. Contact us if you believe a child has provided information so we can review and address it.
Changes to this policy
We will update this page and its date when our practices change. For material changes, we will also post a prominent website notice and provide any additional notice or obtain consent required by applicable law.