Privacy Policy

1. Data Controller
The data controller for the personal data collected through this website is BREY. For any enquiries, clarifications, or complaints regarding the use of their data, the user can contact us directly through our official customer service email address: info@breystore.com

2. Personal Data We Collect
BREY collects only the strictly necessary information to ensure the proper provision of our e-commerce services. These data are divided into:
Identification and Shipping Information: Name, surname, delivery address, billing address, phone number, and email.
Payment Information: Payment information is processed in an encrypted manner through secure and certified payment gateways. BREY never stores or has direct access to the full data of your credit cards or bank accounts.
Browsing Data: IP address, technical cookies, and web behaviour data to optimise user experience and site security.

3. Purpose of Data Processing
The data provided by users will be processed for the following legitimate purposes:
Manage, process, and send the orders placed on the platform.
Process exchanges, returns, and refunds in accordance with our commercial policy.
Handle enquiries, incidents, or support requests through our customer service channels.
Send commercial communications, news, and exclusive brand promotions only if the user has given their explicit consent for it.

4. Legitimacy for Processing
The legal basis for processing your data varies depending on the action:
Execution of a contract: Necessary to process your purchase, payment, and shipping of the products.
Legal obligation: For the issuance of invoices and compliance with tax regulations.
Consent of the interested party: For the subscription to newsletters or newsletters. This consent can be revoked at any time.

5. Data Retention Period
Personal data will be retained for the strictly necessary time to fulfil the purposes for which they were collected, and as long as there are current legal or tax obligations that require their retention (usually up to 5 or 6 years for billing records). The data intended for commercial communications will be retained until the user requests their cancellation or deletion.

6. Recipients and Data Transfer
BREY is committed to not selling, transferring, or renting personal data to third parties under any circumstances. The data will only be communicated to essential service providers who act as data processors under strict confidentiality contracts, such as:
Logistics and transportation companies (for the physical delivery of the order).
Payment platforms and financial entities.
Providers of technological services and web hosting.

7. User Rights (ARCO-POL Rights)
In accordance with current regulations, the user has full rights over their personal data and can exercise them at any time by sending a written communication to the brand's email address. These rights include:
Access: Knowing what data we are dealing with.
Correction: Modify inaccurate or incomplete data.
Deletion (Right to be Forgotten): Request the deletion of your data when it is no longer needed.
Opposition and Limitation: Oppose the use of your data for commercial purposes or limit the scope of processing.
Portability: Receive your data in a structured and commonly used format.

8. Security Measures
BREY implements high-level technical, organisational, and technological security measures to protect personal data against unauthorised access, loss, alterations, or accidental destruction. The transmission of data on our website is carried out in an encrypted manner using SSL (Secure Sockets Layer) security protocols.

9. Modifications to the Privacy Policy
BREY reserves the right to modify this policy to adapt it to future legislative or jurisprudential developments. Any significant change will be notified in this section prior to its implementation.