1. Who we are and the scope of this policy
This policy applies to the website, online store, and digital services operated by برونزباج للحقائب - باب السلام. In this policy, the business is referred to as “Bronzebag”, “we”, “us”, or “our”.
We are the controller of the personal data we collect about you when you browse the website, create an account, place an order, contact us, or subscribe to marketing communications. Some service providers may process personal data on our behalf and in accordance with our instructions.
2. Personal data we collect
Depending on how you use the website, we may collect the following categories of personal data:
- Identity and contact data: name, telephone number, email address, billing address, and delivery address.
- Account data: login information, account preferences, language, and saved products where these features are available.
- Order and transaction data: products ordered, order value, discounts, returns, payment and delivery status, and purchase history.
- Payment data: information related to a payment, such as the payment method, status, and transaction identifier. Full card details are normally processed by the payment provider and are not retained by us unless necessary and legally permitted.
- Usage and device data: Internet Protocol address, device and browser type, pages visited, visit time, referral source, and cookie identifiers.
- Communication data: messages, enquiries, complaints, reviews, and any information you provide when contacting us.
- Marketing data: your preferences regarding messages and offers and information about your interaction with them.
Please do not send us sensitive data or information that we do not need to provide the service.
3. How we collect data
We collect data directly from you when you create an account, place an order, complete a form, or contact us. Some data may be collected automatically through cookies and similar measurement technologies. We may also receive necessary data from payment and delivery providers, login platforms, and technical service providers, according to your settings and their policies.
4. How we use your data and our lawful basis
We use your data only when we have a legitimate purpose and an appropriate lawful basis, including to:
- Create and manage your account and our contract with you, and confirm payment, preparation, delivery, returns, and after-sales service.
- Communicate with you about orders, enquiries, and essential operational notices.
- Prevent fraud and misuse and protect the website, accounts, and transactions.
- Meet accounting, tax, regulatory, and legal obligations and respond to lawful requests.
- Analyse website performance, fix faults, and improve products and the user experience, proportionate to our legitimate interests and your rights.
- Send offers and marketing communications where permitted by law or after obtaining your consent where required.
Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
6. When do we share your data?
We do not sell your personal data. We may share only what is necessary with:
- Payment providers and banks to verify and process payments and combat fraud.
- Shipping and delivery companies to fulfil your order and communicate about delivery.
- Hosting, technical support, analytics, communications, and customer relationship management providers.
- Professional advisers, such as accountants, lawyers, and auditors, where necessary.
- Governmental, judicial, or regulatory authorities when required by law or to protect rights and safety.
- An organisation that acquires all or part of the business, subject to obligations to protect the data and use it for lawful purposes.
We require service providers to protect the data and not use it for their own purposes unless they act as independent controllers and comply with their own privacy notices.
7. Transfers of data outside your country
Some service providers may use data centres or support teams located in other countries. When data is transferred across borders, we apply safeguards required by applicable law, such as assessing the level of protection, using appropriate contractual commitments, and limiting access to what is necessary.
8. How long we retain data
We retain data for as long as necessary to fulfil the purposes for which it was collected, including fulfilling orders, resolving disputes, and meeting accounting, tax, and legal requirements. We determine retention periods based on the type and sensitivity of the data, its purpose, the risks involved, and legal obligations.
We may keep account data while the account remains active, order and invoice records for the period required by law, and marketing data until you unsubscribe or there is no longer a legitimate need for it. When the retention period ends, we securely delete or anonymise the data.
9. How we protect your data
We use appropriate technical and organisational measures, including access controls, encrypted connections, backups, security updates, monitoring, and limiting staff and service-provider access according to need.
No method of electronic transmission or storage is completely secure. If a security incident affects your data, we will take containment, assessment, and notification measures where required by law.
10. Your rights regarding your data
Depending on the applicable law and the circumstances of the processing, you may have the right to:
- Know how your data is processed and obtain a copy of it.
- Correct inaccurate data or complete missing data.
- Request deletion or destruction of data where there is no lawful reason to retain it.
- Restrict or object to processing where permitted by law.
- Receive certain data in a machine-readable format or request its transfer where applicable.
- Withdraw consent and unsubscribe from marketing at any time.
- Lodge a complaint with the competent data protection authority.
We may request reasonable information to verify your identity before fulfilling a request. Some rights may be limited where retaining data is necessary to comply with a legal obligation or protect legal rights.
11. Marketing and communications
You can stop marketing messages by using the unsubscribe link in the message or by contacting us. Essential operational messages relating to your account or orders will continue even after you opt out of marketing.
12. Children's privacy
The website is not directed to children who do not have the legal capacity to make purchases. We do not knowingly collect children's data without parental consent where required. If you believe a child has provided data without authorisation, please contact us so that we can take appropriate action.
13. Third-party links and services
The website may contain links to external services, such as payment gateways or social networks. Those services are governed by their own privacy policies, and we are not responsible for their independent practices. We recommend reviewing their policies before providing your data.
14. Updates to this policy
We may update this policy when our services, practices, or legal requirements change. We will publish the updated version on this page and change the “Last updated” date. We may also draw your attention to material changes through an additional method where appropriate or required.
15. Contact us and exercise your rights
For questions about this policy or to exercise your data rights, contact برونزباج للحقائب - باب السلام through:
Please write “Privacy request” in the subject line and describe your request and the contact information needed for verification. We will review your request and respond within the period required by applicable law.