Privacy Policy

1. Introduction

Browb.com is operated by Browb (“we,” “us,” or “our”). We are committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and purchase our products. This policy complies with the EU General Data Protection Regulation (GDPR) and applicable French data protection laws.

2. Data Controller

Browb
Phone: +33 639982245
Email: contact@browb.com
Customer Support: support@browb.com

4. What Data We Collect

  • Identity Data: name, billing address, shipping address
  • Contact Data: email address, phone number
  • Payment Data: payment card information, transaction history (processed securely via payment processors)
  • Order Data: products purchased, order number, order date
  • Technical Data: IP address, browser type and version, device information, cookies, usage data
  • Marketing Data: your preferences in receiving marketing communications

5. How We Use Your Data

  • Processing and fulfilling your orders (performance of contract)
  • Managing your account and providing customer support
  • Sending order confirmations and shipping updates (performance of contract)
  • Responding to your inquiries (legitimate interests / consent)
  • Sending promotional communications (only with your consent; withdraw at any time)
  • Improving our website and services (legitimate interests)
  • Complying with legal obligations such as tax and accounting requirements
  • Detecting and preventing fraud or unauthorized access

6. Legal Basis for Processing (GDPR)

  • Contract performance: processing necessary to fulfill your purchase agreement
  • Legitimate interests: improving our services, fraud prevention (where your rights are not overridden)
  • Consent: marketing emails, non-essential cookies (withdrawable at any time)
  • Legal obligation: tax, accounting, and regulatory requirements

7. Data Sharing

We do not sell your personal data. We may share your data with:

  • Payment processors (e.g., Stripe, PayPal) for secure payment processing
  • Shipping carriers (e.g., DHL, UPS, local postal services) for order delivery
  • Legal authorities when required by law, court order, or to protect our legal rights
  • IT, analytics, and marketing service providers under strict data processing agreements

8. Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR). Where automated tools are used (e.g., fraud screening), a human reviews any flagged cases before any action is taken.

9. International Data Transfers

As our business is based in France, your data is primarily processed within the European Economic Area (EEA). For any transfers outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) adopted by the European Commission, in compliance with GDPR Chapter V requirements.

10. Data Retention

  • Order and payment data: retained for at least 7 years for tax and accounting compliance
  • Account data: retained until account deletion request
  • Marketing data: retained until consent withdrawal
  • Technical/usage data: retained for up to 2 years

11. Your Rights Under GDPR

If you are located in the EU/EEA, you have the right to:

  • Access (Art. 15): obtain a copy of your personal data
  • Rectification (Art. 16): correct inaccurate personal data
  • Erasure / Right to be Forgotten (Art. 17): request deletion (subject to legal retention)
  • Restriction (Art. 18): restrict processing of your data
  • Data Portability (Art. 20): receive your data in a structured, commonly used format
  • Object (Art. 21): object to processing based on legitimate interests or for direct marketing
  • Withdraw Consent: at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal
  • Lodge a Complaint: file a complaint with your local data protection authority (e.g., CNIL in France, BfDI in Germany, AEPD in Spain)

To exercise any of these rights, contact us at contact@browb.com or support@browb.com. We will respond within 30 days. Where requests are complex or numerous, we may extend this period by up to two further months and will inform you of any such extension.

12. Cookies

We use cookies to operate our website and enhance your browsing experience. Essential cookies are necessary for website functionality and do not require consent. Non-essential cookies (analytics, marketing) require your consent, which you can manage through our cookie consent banner.

  • Essential cookies: required for cart, checkout, and account functions
  • Analytics cookies: to understand how visitors use our site
  • Marketing cookies: to deliver relevant advertisements (with your consent)

For a complete description of each cookie we use (name, purpose, type, duration, and third-party providers), please refer to our Cookie Policy. You can change or withdraw your cookie consent at any time via the “Cookie Settings” link in our website footer.

13. Data Security

We implement appropriate technical and organizational security measures including SSL encryption, secure servers, access controls, and regular security assessments to protect your personal data. While we strive to protect your data, no method of transmission over the Internet is 100% secure.

14. Children’s Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by posting the new policy on this page and updating the “Last updated” date. Significant changes will be communicated via email.

Country-Specific Data Protection Notes

The following notes apply depending on your country of residence and sit alongside the general provisions of this Privacy Policy.

United Kingdom

If you are resident in the United Kingdom, your personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data Protection, Privacy and Electronic Communications (Amendment etc.) (EU Exit) Regulations 2019.

  • Lawful bases: The lawful bases for processing set out in Section 6 above apply equally under the UK GDPR.
  • Your rights: UK residents have the same rights as set out under Section 11 (Access, Rectification, Erasure, Restriction, Portability, Objection), exercised with reference to the UK GDPR thresholds. You may also object to direct marketing at any time.
  • Regulator: The UK data protection supervisory authority is the Information Commissioner’s Office (ICO) — website: ico.org.uk. You may lodge a complaint with the ICO.
  • International transfers: Where your data is transferred outside the UK, we rely on appropriate safeguards, including UK-approved adequacy decisions or Standard Contractual Clauses (SCCs) as required under the UK GPA ‘UK Extension’, in compliance with Part 2 of the Data Protection Act 2018.
  • Note on the EU ODR platform: The EU Online Dispute Resolution platform is not available for UK-resident disputes.

Germany

If you are resident in Germany, your personal data is processed in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG). The supervisory authority for complaints is your competent local German data protection authority (e.g., the Landesbeauftragte für Datenschutz of your federal state or the BfDI at the federal level).

France

If you are resident in France, your personal data is processed in accordance with the GDPR and the French Data Protection Act (Loi « Informatique et Libertés »). The competent supervisory authority is the Commission Nationale de l’Informatique et des Libertés (CNIL) — website: cnil.fr. You may lodge a complaint with the CNIL.

Slovakia

If you are resident in Slovakia, your personal data is processed in accordance with the GDPR and Slovak data protection legislation. The competent supervisory authority is the Úrad na ochranu osobných údajov Slovenskej republiky (Slovak Data Protection Authority) — website: dataprotection.gov.sk. You may lodge a complaint with this authority.

16. Contact Us

For questions, concerns, or requests regarding this Privacy Policy:
Email: contact@browb.com
Customer Support: support@browb.com
Phone: +33 639982245
EU Online Dispute Resolution: https://ec.europa.eu/consumers/odr/