Below you can find information on how we treat the personal data of users who browse our sites, given in pursuance to, and for the purposes of art. 13 of the EU Regulation 2016/679. If you wish to have a more thorough understanding of the principles we follow, in our website management and the protection of your information, we advise you to consult the General Conditions of use of our websites.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Information

We’ll only ask for the information we need to fulfill your request.  So any information we collect and store depends on how you use our website. When you knowingly provide information, we collect and store some or all of the following: name, billing address, shipping address, email address, payment details and telephone number. This information lets us process and ship your order, send order and shipping confirmations, and provide customer service. Unless you opt out of receiving our promotional communications, we may use some information to contact you about sales and special offers, new products or site features, and the like.

Under the law, we must have a valid legal basis to process your data. In most instances, we will process your data because we have a contract with you e.g. to deliver your purchases or to provide you with other services you have requested. We will also use your personal data to send you sales and marketing communications that we believe may be of interest to you if we have your explicit consent for this activity, or if you are an existing customer where we have a legitimate interest in communicating with you. You can opt out of sales and marketing communications from us at any time.

Usage Data

Usage Data is collected automatically when using the website. 

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

How long we keep your data:

We will not retain your personal data for longer than is necessary to fulfil the purposes for which you provided that personal data, unless the law permits or requires that we retain it for longer. The retention period varies depending on the purpose of the processing. 

Who will process your data:

 Your personal data will be processed by the internal staff of SHEBABRAND who are authorized for this processing.

To function properly, we rely on a number of carefully selected third parties to provide us with services and products. We permit these companies to use your personal information only to the extent necessary to provide us with their services and products. Below you can find the types of third parties we use:

  • Courier companies, that we use in order to deliver the products to you and, as such, they need to have access to your order information, including your name and address. These providers have a global outreach, with many local companies that can be engaged depending on your shipping address;
  • Payment providers that we use to process your payment information (including your credit/debit card details) so that we can collect payment from you. These are based in the European Union.
  • Performance Marketing Providers, Marketing Tools providers, Analytics and search engine providers which are all based in Europe.
  • IT/technology providers that we use to support, maintain and provide our technology and IT infrastructure that supports our Website and the storage of your information.

We do not sell or disclose your personal information to third parties for marketing purposes.

However, we may disclose your personal information to governmental and law enforcement agencies in the defense of legal claims.

We protect your information using measures that reduce the risks of loss, misuse, unauthorized access, disclosure and alteration. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Exercise of your rights

You can exercise the rights that the law governs you regarding your personal data by writing to info@shebathebrand.com. We will reply to your request as soon as possible and in any case, no later than 30 days upon receipt. In some cases, we may request a copy of an identification document if required in conjunction with your request, to enable us to verify your identity.

  •   Right of access 

You have the right to know if your personal data is being processed and if confirmed, to obtain a copy of such data and be informed about; the source of the data, the categories of personal data processed, data recipients, the processing purposes, the existence of an automated decision-making process, (including profiling) the data retention period and the rights provided by Regulation.

  •   Right of rectification

You have the right to obtain a rectification of data in our possession that concerns you or to update data that is incomplete. We remind you that when you provide your data to use our services, you guarantee its authenticity and accuracy. You yourself, can help us ensure that your data is always accurate by communicating updates to info@shebathebrand.com.

  •   Right of erasure

You have the right to request the erasure of your personal data if it is no longer needed for the purpose for which they were collected, or if we are no longer authorized to process this.

  •   Right of restriction of processing

You have the right to obtain processing restrictions in the following cases:

  1. You objected to the accuracy of personal data. You can request processing restriction for the period in which we will verify the accuracy of your data;
  2. We are not authorized to process your data and instead of deleting them, you can request a limit in their usage;
  3. Where the data in our possession, although no longer necessary for us for the processing purposes for which they were collected, are required for the investigation, exercise or defense of a right in court;
  4. You oppose processing based on our legitimate interest. You can ask us to limit processing, pending verification of the precedence of our legitimate reasons, regarding those that are your responsibility.

Right of consent withdrawal

You can withdraw your consent in relation to all processing of data that requires it.

  •   Right of data portability

In the event that we process data based on your consent or in the implementation of a contract, or if the processing is carried out by automated means, you can exercise the right of data portability. You will then be able to receive the personal data you have communicated to us in a structured format, commonly used and readable using an automatic device. You can also request to forward your data directly to another company, as long as this is technically possible.

  •   Right of opposition

You have the right to object to the processing of your personal data at any time based on our legitimate interest, including profiling.

We also inform you that if you believe that the processing of your personal data goes against the provisions of EU Regulation 2016/679 you have the right to file a complaint with the competent data protection supervising authority.

Use of Cookies

SHEBATHEBRAND may, by its own means, or through a third party contracted to provide measurement services, use cookies when the User navigates the Site. Cookies are files, sent to the browser through a web server, for the purpose of recording User activities during their browsing time.

The cookies used by the Site are solely associated with an anonymous User and with your computer, and therefore do not provide, personally, personal data of the User. By using the cookies, it is possible that the server where the Site is hosted recognizes the User’s web browser, in order to make the navigation simpler, allowing, for example, access to Users who have previously registered, access to the areas, services, promotions or contests reserved exclusively for them, without having to register in each new visit.

They are also used to measure audience and traffic parameters, as well as to monitor the evolution and number of entries. The User has the possibility to configure his browser, in order to be warned of the reception of cookies, and to prevent them from installing in his equipment. Please refer to your browser instructions and manuals for further information. In order to use the Site, it is not necessary for the User to allow the installation of the cookies sent by the Site, however, it is probably necessary that the User initiates a session as such in each of the services whose use requires their previous registration or “login”.

How We Use Your Information

Except as disclosed in this Privacy Policy, we don’t disclose information about your individual visits to our site or your personal information collected online to any companies not affiliated with us. If we propose to permit any use of your personal information, we will not do so without your permission prior.

Emergency Situations

We may use or disclose personal information if required to do so by law or in the belief that such action is necessary to conform to applicable law, to comply with legal process served upon us or the website, to protect and defend our rights or property, the site or our users, or to act under emergency circumstances to protect the personal safety of us, our affiliates, agents, or users, or the public.

 Keeping Personal Information Secure

Your personal information, collected by our site, is stored in secure operating environments that are not available to the public. In many instances, such as in the case of credit card numbers and all on-line purchases, your information is encrypted before you conduct your transaction. Only employees who need access to your personal information to do their jobs are allowed access, after having signed confidentiality agreements. Any employee who violates our privacy and/or security policies is subject to disciplinary action, such as termination and civil and/or criminal prosecution.

To protect the security of your information during transmission, we use Secure Sockets Layer (SSL) software, which encrypts the information you input. Most browsers will give a visual indication of when your connection is secure. For example, Internet Explorer will show a padlock icon in the lower right of the browser window. When you place an order through our site, you’ll be asked for your email address and password to set up an account. You must provide an appropriate email address and password in order to access account information. In order to help protect your personal information, please be careful about sharing your password with others.

If you wish to cancel your password, or if you become aware of any loss, theft or unauthorized use of your password, please contact our customer service department by sending an email to info@shebathebrand.com While we do our absolute best to safeguard your personal information once we receive it, no transmission of data over the Internet or any other public network is guaranteed to be 100% secure.



Questions regarding this Privacy Policy should be directed to our customer service department by emailing info@shebathebrand.com.