Privacy policy
As updated in September 2023:
THE BRANDLET is strongly committed to protecting and respecting all customers’ privacy and information. Data provided to THE BRANDLET on the pages of the website accessible at the Internet address www.thebrandlet.com at the time of registration and then for the use of the services provided by our company will be treated in compliance with the provisions of the Legislative Decree 196/2003 concerning the protection of personal data ("Privacy Code") and articles 13-14 EU Regulation n. 2016/679 (hereinafter, "GDPR").
The following section describes in detail our data collection, processing, and storage policies, controls, and procedures. For more information on how we use cookies, please refer to our Cookie Policy. For all other information regarding our services, please refer to our Terms and Conditions section.
a. Data control issues:
Your data are securely held by THE BRANDLET S.R.L., a Romanian limited liability company headquartered in Bucharest (23 Octavian Goga Boulevard M106). Our company is responsible and accountable for personal data security and the provision of accurate information on how clients’ data is used and respected. The products we sell target specifically adults, as we do not market and/or promote our products to individuals under the age of 18 and therefore, we cannot identify individuals of this age and/or under, on our database. Please refer to our Terms and Conditions section for more information. Please also read our Registration & Account Terms and Conditions which apply to you when you register for an account on our website or App.
Data and Legal Processing issues:
Data collection is automatically activated when a potential client visits our website and/or our associated apps (“website and Apps”). Data collection includes customer name, email address, telephone number and shipping/billing address, day and month of birth, preferred designers and brands, and information regarding browsing and shopping behavior. Data is further collected when a client is placing an order, calls our Customer Care Service, registers with us, browses our site, and uses all other services offered by our site. Collected Data is used to take customers’ orders, process payments, and product delivery. We also use it to deliver future marketing communications, give access to services for registered users, personalize visits to our site and provide assistance via our Customer Care team.
Data processing is only permitted for a legitimate reason and is not allowed by our company to collect, store or process data about a client that is not compatible with a valid reason. If you have given your consent to our use of your info, you are entitled to withdraw this consent at any time.
Personal data is processed by our specifically trained and experienced staff who have been authorized for this activity. Additionally, in the process of distributing our products and managing our supply chain, the same clients’ data may also be transmitted to our logistical partners. Personal data may also be transmitted to other third parties that externally provide our services; these parties have been pre-assessed for how they manage personal data and may only use your data for the exact purposes that we specify in the contract with them. Other third parties mentioned above refer to the following categories:
- Payment service providers help us to process your order.
- Courier and other parcel service providers that deliver clients’ purchases and act as Data Controllers for the duration of the delivery process.
- Supporting Service providers, such as email delivery suppliers, IT software, marketing, and research agencies, analytics companies, and website hosts that assist us to effectively run our business.
- Credit reference agencies, law enforcement, and fraud prevention agencies, effectively fight fraud and corruption.
- Government bodies and regulators to comply with our legal obligations.
- Aggregated data that does not identify individuals is shared with internal teams, relevant service providers, and brand partners for business planning purposes
These third parties can even be located in countries outside the United Kingdom (UK),European Union (EU), or European Economic Area (EEA) nevertheless have an adequate level of data protection, as established by specific decisions of the European Commission.
We may also communicate and transfer clients’ data to a buyer or potential buyer if our company is acquired by or merged with another company. The purchaser will be required by law to use your clients’ data only as described in this Privacy Policy.
c. Duration of data collection and storage
The data retention policy limits the period of collection and storage of data according to the reason for processing personal information. After this period, data will be permanently erased or otherwise rendered anonymous.
d. Client's rights:
You constantly have the following rights under data protection law:
- to request a copy of the personal data that we maintain in our records.
- to ask us to correct any inaccuracies in the personal data that we maintain in our records.
- to withdraw your consent to marketing.
- to object to our processing of your data based on our legitimate interest.
- to request the deletion of your data in certain circumstances.
- to refuse data transferability of your data to another entity.
- to prohibit automated decision-making tools including profiling.
Our company is using profiling to make relevant and tailored recommendations for you. Profiling is the automated processing of personal data to evaluate certain things about an individual, for example, people who are interested in particular designers or products. We do not use automated decision-making processes that would have a potentially damaging effect on you. But if we did, you have the right to obtain human intervention, express your point of view, obtain an explanation of the decision and challenge it.
To exercise any of these rights, you can sign in to your account, contact our Customer Care team be email at thebrandlet@gmail.com or call us at 0040743476776 (english-language customer care service representative) or even write to our Data Protection Officer (DPO) by writing to "Data Protection Officer" at 23 Octavian Goga Boulevard M106, Bucharest Romania, or by email to the thebrandlet@gmail.com (to the attention of the Data Protection Officer).
e. Security issues
We have established all appropriate technical, physical, and organizational procedures and controls to adequately protect personal information against unauthorized access, unlawful processing, accidental loss, or damage. These security measures include pseudonymization or encryption of your data to ensure the confidentiality, integrity, and availability of your data as well as the resilience of the systems and services that process them. Furthermore, our company can restore the availability and access to personal data in the event of a physical or technical incident. Finally, our company undertakes audits and verification procedures to regularly evaluate the effectiveness of the technical and organizational measures to ensure continuous improvement in the safety of processing
f. Final Provisions
THE BRANDLET reserves the right to change its privacy policy at any time without expressly notifying the user, either privately, by email or otherwise, or in public through the personal page of the site or other means of communication. Privacy Policy is continuously under review to reflect any changes in our services, privacy policy, and data privacy regulation. Therefore, the user is invited to frequently consult the privacy policy to stay updated on any changes that have occurred. The processing of personal data, modification, or cancellation of the same can be requested from THE BRANDLET at any time by the user free of charge.
The acceptance of the conditions at the time of registration and the use of the services offered by the site implies the complete and implicit acceptance of the privacy policy drawn up by the company.