Privacy policy

PRIVACY POLICY

Last updated: September 22, 2025

Superior Soles (“we”, “us”, “our”) operates this online store and website (“Services”). We are established in the European Union and act as the data controller of your personal data.

By using the Services, you acknowledge this Privacy Policy.

1) Who we are (Data Controller)

Superior Soles
Email: info@superiorsoles.com
Address: Strada Bradetu 71, bl 0252, Bradetu, Nistorești, Vrancea, 627232, Romania

2) What we collect

We collect the following categories of personal data, depending on how you use the Services:

  • Contact details: name, email, phone, billing/shipping address.

  • Order and payment details: purchased/returned items, order totals, transaction identifiers, and limited payment information (processed by our payment providers; we do not store full card numbers).

  • Account details (if you create one): username, password, preferences.

  • Customer support content: messages and attachments you send us.

  • Device/usage data: IP address, device and browser type, pages viewed, interactions, and cookie identifiers.

3) Data sources

  • Directly from you (placing an order, creating an account, support).

  • Automatically via cookies and similar technologies when you browse our site.

  • From service providers (e.g., payments, shipping, analytics) acting on our behalf.

4) Purposes and legal bases (GDPR Art. 6)

We process your personal data for:

  • Order processing and account management (fulfilment, shipping, returns, customer service) — Contract performance (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).

  • Payments and fraud prevention — Legitimate interests and legal obligations (e.g., accounting, taxes) (Art. 6(1)(c), (f)).

  • Service improvement and analytics (e.g., to understand site usage, fix issues) — Legitimate interests (Art. 6(1)(f)).

  • Direct marketing (emails/SMS, onsite personalization, ads) — Consent when required (Art. 6(1)(a)); otherwise, legitimate interests (Art. 6(1)(f)). You can withdraw consent at any time.

  • Legal compliance (tax, accounting, responding to legal requests) — Legal obligation (Art. 6(1)(c)).

5) Cookies and similar technologies

We use cookies/pixels to:

  • make the site work (strictly necessary),

  • remember preferences,

  • measure performance/traffic, and

  • personalize/market where permitted.

Where required, we will ask for your consent for non-essential cookies when you first visit. You can change your preferences at any time through our cookie settings (or your browser settings). Please note that blocking some cookies may affect functionality.

6) Who we share data with (processors and recipients)

We only share personal data as necessary to operate our Services:

  • Shopify (store platform/hosting, order fulfilment, security).

  • Payment processors (process payments, fraud checks).

  • Shipping and logistics partners (deliver orders, handle returns).

  • IT/Cloud and analytics providers (hosting, email, performance).

  • Professional advisors/authorities (legal, tax, compliance) where required by law.

  • Business transfers (e.g., merger, acquisition) — your data may be transferred as part of the transaction.

We do not sell your personal data.

7) International transfers

Some providers (including Shopify and certain sub-processors) may process data outside the EEA/UK. Where this occurs, we rely on EU Standard Contractual Clauses (SCCs) and/or other lawful safeguards. You may contact us for a copy of the relevant safeguards (with redactions where necessary).

8) Data retention (how long we keep data)

We keep data only as long as necessary for the above purposes and to comply with legal/accounting obligations. Typical periods:

  • Orders and invoices: up to 10 years (tax/accounting laws).

  • Account data: kept while your account is active; deleted or anonymized after inactivity and any statutory retention.

  • Customer support: up to 3 years after resolution (or longer if needed for legal claims).

  • Marketing data: until you withdraw consent or object; then we suppress your contact from marketing lists.

9) Your rights (EEA/UK GDPR)

You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing based on legitimate interests or direct marketing at any time. Where processing is based on consent, you may withdraw it at any time (this does not affect prior lawful processing).

To exercise your rights, email info@superiorsoles.com We may need to verify your identity. We will respond within one month (extendable by two months for complex requests, with notice).

You also have the right to lodge a complaint with your local data protection authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP). You may also contact the EEA authority in your country of residence.

10) Children’s privacy

Our Services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, please contact us to have it deleted.

11) Automated decision-making

We do not engage in automated decision-making that produces legal or similarly significant effects (GDPR Art. 22).

12) Shopify (our platform)

We use Shopify to power our store (hosting, order fulfilment, analytics, security). Shopify processes your data as our processor and may act as an independent controller for certain aggregated or platform-level activities. For details and your options, see Shopify’s Privacy Policy and Privacy Portal.

13) Changes to this policy

If we update this Privacy Policy, we will post the new version here and update the “Last updated” date. Material changes will be communicated as legally required.

14) Contact us

Questions or requests regarding this Privacy Policy or your personal data:
Legal Entity: Born Online S.R.L.
Phone number: +40 720 483 200
Email: info@superiorsoles.com
Address: 71 Bradetu Street, bl 0252, Bradetu, Nistorești, Vrancea, 627232, Romania
Costumer Service working hours: Monday to Friday, from 10:00 to 18:00 (EET)