1. Who we are
The online store istylestores.com ("iSTYLE", "we", "us") is operated by the company below, which is the data controller responsible for your personal data:
[Company legal name] S.R.L.
[Trade Register no.] · VAT/CUI: [RO00000000]
[Registered office address], Romania
Email: privacy@istylestores.com
2. Personal data we collect
Data you give us
- Identity and contact data: name, email address, phone number, billing and delivery address.
- Order data: products purchased, order value, delivery method, order history and invoices.
- Account data: email address used to sign in and your saved preferences, if you create an account.
- Business data: company name and VAT number, if you ask for a company invoice.
- Communication data: messages you send us by email, phone, WhatsApp or our contact and workshop forms.
- Return and warranty data: information about the product, the problem and photos you send us.
Data collected automatically
- Technical data: IP address, browser and device type, operating system, language and approximate location.
- Usage data: pages viewed, products added to your bag, links clicked and how you arrived at our website.
Data from third parties
- Payment providers confirm whether a payment was successful. We never receive or store your full card details.
- Couriers send us delivery status updates.
- Instalment partners tell us whether your instalment plan was approved. Their credit checks are carried out by them, under their own privacy policies.
3. How and why we use your data
We only use your personal data where we have a legal basis to do so:
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, payments, invoices and order updates | Performance of a contract |
| Managing your account, returns, refunds, warranty and legal guarantee claims | Performance of a contract; legal obligation |
| Answering your questions and workshop requests | Performance of a contract or steps before entering into one; legitimate interest |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and keeping our website secure | Legitimate interest |
| Improving our website, products and services with anonymous or aggregated statistics | Legitimate interest; consent where cookies are required |
| Sending newsletters and offers by email or SMS | Consent (you can withdraw it at any time) |
| Personalised advertising on social media and other websites | Consent |
Where we rely on legitimate interest, we have balanced our interests against your rights. You can object to this processing at any time (see section 8).
4. Cookies and similar technologies
We use cookies and similar technologies to make our website work, remember your bag and preferences, understand how the website is used and, with your consent, show you relevant advertising.
- Strictly necessary cookies are required for the website and checkout to work and do not need your consent.
- Analytics and marketing cookies are only placed if you accept them in our cookie banner.
You can change your choice at any time through the cookie settings on our website or in your browser settings. Blocking some cookies may affect how the website works.
5. Who we share your data with
We never sell your personal data. We share it only with trusted partners who help us run our business, and only as much as they need:
- E-commerce platform: Shopify, which hosts our online store and processes order data on our behalf.
- Payment providers: card processors, digital wallets such as Apple Pay, Google Pay and PayPal, and instalment partners such as Klarna.
- Couriers and logistics partners that deliver your orders and handle returns.
- Suppliers and service partners when we order a product especially for you or arrange a repair or warranty claim.
- IT, email, customer service and analytics providers that support our operations.
- Advertising partners such as Meta and Google, only if you have given your consent.
- Professional advisers and authorities such as accountants, lawyers, tax authorities or courts, where required by law.
Service providers acting on our behalf are bound by data processing agreements and may only use your data according to our instructions.
6. International transfers
Some of our partners, including Shopify, may process data outside the European Economic Area or the United Kingdom. When this happens, we make sure your data is protected by an adequacy decision of the European Commission or the UK government, or by standard contractual clauses and additional safeguards where needed.
7. How long we keep your data
- Order and invoice data: for as long as required by accounting and tax law.
- Warranty and return data: for the duration of the warranty and legal guarantee, plus the period during which claims can be made.
- Account data: until you delete your account or ask us to delete it.
- Marketing data: until you unsubscribe or withdraw your consent.
- Customer service messages: for as long as needed to handle your request and any follow-up.
After these periods, we delete or anonymise your data.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and receive a copy.
- Rectify inaccurate or incomplete data.
- Erase your data, where there is no legal reason for us to keep it.
- Restrict the processing of your data in certain situations.
- Data portability – receive your data in a structured, commonly used format or have it sent to another company.
- Object to processing based on legitimate interest, and at any time to direct marketing.
- Withdraw your consent at any time, without affecting processing carried out before the withdrawal.
To exercise your rights, email us at privacy@istylestores.com. We will reply within one month. We may ask you to confirm your identity before we act on your request.
You also have the right to lodge a complaint with a data protection supervisory authority – in particular in the country where you live or work, or where you believe your rights were infringed. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP); in the United Kingdom it is the Information Commissioner's Office (ICO).
9. Marketing communications
We only send you newsletters and offers if you have agreed to receive them. You can unsubscribe at any time using the link at the bottom of every email, or by contacting us. Service messages about your orders are not marketing and will still be sent.
10. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure payment processing by certified providers and restricted access for our staff. No online service can be completely secure, so please keep your email account secure and let us know straight away if you suspect any misuse.
11. Children
Our website is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time, for example when we add new services or when the law changes. The latest version is always available on this page, with the date of the last update shown at the top.
13. Contact us
If you have any questions about this policy or how we use your personal data, contact us at privacy@istylestores.com or using the details on our Contact page.