Privacy policy

1. Introduction

Bellanno cares about your privacy and security. For this reason, we only process data that we need to provide our services and handle the information we have collected about you and your use of the website with the utmost care. Your data will never be made available for commercial purposes.

This privacy policy applies to the use of the website and the services provided through it. This statement describes what data we collect about you, what the data is used for and how it is stored.

Bellanno manages this website, including all related information, content, features, tools, products and services, to offer customers a personalised shopping experience. Bellanno is “Powered by Shopify”, enabling us to provide the Services to you

If you have any questions, please email us at our email address. This privacy statement applies to our website. This statement may be amended from time to time. The most up-to-date version can be found on our website.

2. Personal information we process

When we use the term ‘personal data’, we mean information that identifies you or can reasonably be linked to you, such as your name, telephone number, email address or IP address. Depending on how you use our services, we may collect or process the following categories of personal data:

• Contact details, including your name, address, billing address, delivery address, telephone number and email address.

• Financial information, including payment card details, account numbers, transaction details, payment method and payment confirmation.

• Account details, including your username, password, security questions and settings.

• Transaction data, including the items you view, add to your shopping basket, add to your wish list, purchase, return, exchange or cancel, as well as your order history.

• Communications with us, including the content of messages you send to us, for example in connection with customer service enquiries.

• Device data, including information about your device, browser or network connection, your IP address and other unique identifiers.

• Usage information, including information about your interaction with our website, such as navigation behaviour and frequency of visits.

3. Sources of personal information

We may collect personal data from the following sources:

• Directly from you, for example when you create an account, visit or use our website, place an order, or otherwise contact us.

• Automatically via the website, including through cookies and similar technologies on your device when you visit our website.

• From our service providers, when they facilitate certain technology for us or collect or process personal data on our behalf.

• From our partners or other third parties, to the extent permitted under applicable law.

 

4. Purposes of processing

We process your personal data exclusively for specific, explicitly defined and legitimate purposes. For each processing purpose, we rely on one of the legal bases set out in Article 6 of the GDPR:

a) Implementation of the contract (Article 6(1)(b) of the GDPR)

We process your contact details, financial details and transaction data in order to fulfil the purchase agreement you enter into with us. This includes processing your payment, fulfilling your order, arranging dispatch and facilitating returns.

b) Legitimate interest (Article 6(1)(f) of the GDPR)

We process certain data on the basis of our legitimate interest, provided that this interest does not override your interests or fundamental rights. This applies, amongst other things, to:

• Security and fraud prevention: verifying your account, securing the payment environment and detecting fraudulent or malicious activities.

• Improving our services: analysing usage data to improve our website and services.

• Customer communication: answering your queries and providing customer support.

c) Consent (Article 6(1)(a) of the GDPR)

We request your prior consent for direct marketing via email, text message or post, and for the placement of non-functional cookies. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out prior to the withdrawal.

d) Legal obligation (Article 6(1)(c) of the GDPR)

We process your data where this is necessary to comply with legal obligations, such as retaining accounting records or responding to legitimate requests from competent authorities.

5. Retention periods

We do not retain your personal data for longer than is necessary for the purposes for which it was collected, or for as long as required under applicable legislation. The following retention periods apply:

• Account details: for as long as your account is active, with a maximum retention period of two years following the last activity.

• Order details and financial information: seven years after the relevant transaction, in accordance with the statutory retention obligation for accounting purposes.

• Communication with customer service: up to two years after the request has been resolved.

• Marketing data: until you withdraw your consent or unsubscribe.

• Device and usage data via cookies: in accordance with the cookie retention periods as described in Article 11 of this policy.

6. Disclosure of personal data to third parties

We disclose your personal data to third parties solely for legitimate purposes and to the extent necessary. We enter into a data processing agreement with all processors who process data on our behalf. Data may be disclosed to:

• Shopify and other service providers who carry out services on our behalf, such as IT management, payment processing, data analysis, customer support, cloud storage and logistics.

• Business partners and marketing partners, solely on the basis of your consent, for personalised advertising.

• Third parties where you expressly instruct us to do so or give your consent, for example for the dispatch of your products.

• Government bodies or law enforcement agencies, where we are legally obliged to do so or receive a lawful request.

• Successors in title in the context of a merger, acquisition or insolvency, to the extent permitted by law.

 

7. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information relating to your access to and use of the Services in order to provide and improve the Services for you. Information you submit via the Services will be transmitted to and shared with Shopify, as well as with third parties who may be located in countries other than the one in which you reside, in order to provide and improve the Services for you. In addition, to help us protect, grow and improve our business, we use certain enhanced Shopify features that include data and information obtained from your interactions with our shop, with other merchants and with Shopify. To provide these enhanced features, Shopify may use personal information collected about your interactions with our shop, with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including responding to your requests to exercise your rights regarding the use of your personal information for these purposes. Please see the Shopify Customer Privacy Polic for more information on how Shopify uses your personal information and any rights you may have. Depending on where you live, you may be able to exercise certain rights regarding your personal information via the Shopify Privacy Policy Portal.

8. Third-party websites and links

Our website may contain links to third-party websites or platforms. We are not responsible for the privacy or security policies of these external websites. We recommend that you read the privacy policies of such websites carefully before providing any personal data.

9. Security and retention of your information

Please be aware that no security measure is perfect or impenetrable, and that we cannot guarantee ‘perfect security’. Furthermore, information you send to us may not be secure during transmission. We advise you not to use unsecure channels to communicate sensitive or confidential data to us.

Communication via our website takes place via a secure connection (SSL certificate), whereby data is encrypted.

10. Your rights and choices

Under the GDPR, you have the following rights in relation to your personal data. These rights are not absolute and may be restricted in certain cases by law:

• Right of access (Article 15 of the GDPR): you may request details of the personal data we process about you.

• Right to rectification (Article 16 of the GDPR): you may request that inaccurate or incomplete personal data be corrected.

• Right to erasure (Article 17 of the GDPR): you may request that your personal data be deleted, provided that no statutory retention obligation applies.

• Right to restriction of processing (Article 18 of the GDPR): you may request that the processing of your data be restricted in certain circumstances.

• Right to data portability (Article 20 of the GDPR): in certain cases, you may request to receive your data in a structured, commonly used and machine-readable format.

• Right to object (Article 21 of the GDPR): you may object to processing based on legitimate interests or for direct marketing purposes.

• Right to withdraw consent: if the processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of the processing prior to withdrawal.

 

You can exercise your rights by contacting us at info@bellannowear.com. We will respond within the timeframe prescribed by the GDPR (in principle, one month). We may ask you to verify your identity before processing your request.

11. Communication

We may send you promotional emails if you have given us your consent to do so. You can unsubscribe at any time via the unsubscribe link in our emails or by contacting us. After unsubscribing, we may still send you non-promotional messages, such as order confirmations or information about your account.

12. Complaints

If you have any complaints about the way we process your personal information, please contact us using the contact details below. Depending on where you live, you have the right to appeal against our decision by contacting us via the contact details below, or to lodge your complaint with your local data protection authority. For the EEA, you can find a list of the relevant data protection supervisory authorities here.

13. International transfers

Please note that we may transfer, store and process your personal information outside the country where you live.

Where we transfer your personal information outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses, or equivalent contracts issued by the relevant competent authority in the United Kingdom, where applicable, unless the data is transferred to a country that has been determined to offer an adequate level of protection.

14. Cookies

Cookies are set via our website by Shopify. We use this service to track how our visitors use the website and to gain insights into website usage. Shopify is not permitted to use the information obtained for other Shopify services.

Where third-party software solutions use cookies, this is stated in this privacy notice.

15. Contact

If you have any questions about our privacy practices or this privacy policy, or if you wish to exercise any of your rights, please call or email us at info@bellannowear.com. For the purposes of the applicable data protection legislation, we are the data controller for your personal information.