Welcome to our store

Privacy policy

At BuaTerrace, we are committed to safeguarding the privacy and security of every visitor to our online store. This Privacy Policy explains how we collect, use, store, and protect your personal information when you browse or make a purchase from our collection of shirts, pants & trousers, and skirts. By accessing our website, you acknowledge and agree to the practices described below.

1. Information We Collect

We collect only the information necessary to process your orders, improve your shopping experience, and comply with legal obligations. The types of data we may gather include:

  • Order and Transaction Data: Your name, shipping address, billing address, email address, and payment details (such as credit card information or other payment method data) provided at checkout.
  • Device and Usage Data: IP address, browser type, operating system, pages viewed, time spent on our site, and referring URLs. This information helps us understand how customers interact with our store and optimize site performance.
  • Communication Data: Any messages or inquiries you send to us via email at [email protected], including any details you voluntarily share.

We do not require you to create an account or log in to browse or purchase from BuaTerrace. We do not operate a user center, and therefore we do not store login credentials or profile information beyond what is necessary for a single transaction.

2. How We Use Your Information

Your personal data is used solely for legitimate business purposes, including:

  • Processing and fulfilling your orders, including payment verification, packing, shipping, and delivery updates.
  • Responding to your customer service requests and providing order-related support via email.
  • Improving our website functionality, product offerings, and user experience through aggregated analytics.
  • Preventing fraudulent transactions and ensuring the security of our online store.
  • Complying with applicable legal and regulatory requirements, such as tax and accounting obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not use your data for unsolicited promotional communications unless you have explicitly opted in to receive such updates.

3. Legal Basis for Processing (GDPR & International Standards)

For users located in the European Economic Area (EEA) or other jurisdictions with similar data protection laws, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing is necessary to fulfill our contract with you when you place an order.
  • Legitimate Interests: We may process data to improve our services, prevent fraud, and ensure network security, provided your rights and freedoms do not override these interests.
  • Legal Compliance: Where we are required to retain or disclose data to meet legal obligations.

We respect your rights under the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy frameworks. You may request access to, correction of, or deletion of your personal data at any time by contacting us at [email protected].

4. Data Storage and Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order records, including transaction details, are kept for a minimum of 5 years to comply with tax and accounting regulations.
  • Customer service correspondence is retained for up to 2 years after the last interaction.
  • Usage analytics data is anonymized and stored for a maximum of 26 months.

Once the retention period expires, your data is securely deleted or anonymized so that it can no longer be linked to you.

5. Data Security Measures

We implement robust technical and organizational safeguards to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology.
  • Payment Security: Payment transactions are processed through PCI-DSS compliant payment gateways. We do not store full credit card numbers on our servers.
  • Access Controls: Only authorized personnel with a legitimate business need can access personal data, and they are bound by strict confidentiality obligations.
  • Regular Audits: We conduct periodic security reviews and vulnerability assessments to ensure our systems remain resilient against emerging threats.

While no method of transmission over the internet is 100% secure, we strive to use commercially acceptable means to protect your data.

6. Sharing and Disclosure of Information

We do not share your personal information with third parties except in the following limited circumstances:

  • Service Providers: We may share data with trusted partners who assist us in operating our website, processing payments, delivering shipments, or providing analytics. These providers are contractually obligated to use your data only for the services they perform on our behalf and to protect it with appropriate security measures.
  • Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the business assets, with appropriate notice provided to you.

We never share your data with advertising networks or data brokers for targeted marketing.

7. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytical information. Cookies are small text files stored on your device that help us remember your preferences and understand how you use our site.

  • Essential Cookies: Required for the website to function properly, such as maintaining your shopping cart and remembering items during checkout.
  • Analytics Cookies: Help us understand aggregate visitor behavior, such as which pages are most popular, so we can improve our site structure and content.
  • Preference Cookies: Remember your choices, such as currency or language preferences, to make your visit more convenient.

You can control or disable cookies through your browser settings at any time. However, please note that disabling certain cookies may affect the functionality of our website, such as the ability to complete a purchase.

8. International Data Transfers

As an international online store, we may process and store your personal data on servers located outside your country of residence. Where such transfers occur, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or other equivalent mechanisms recognized under applicable data protection laws.

By using our website, you consent to the transfer of your data to countries that may have different data protection standards than your own, provided that we take reasonable steps to protect your information in accordance with this policy.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
  • Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
  • Right to Data Portability: Request a structured, machine-readable copy of your data to transfer to another service provider.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the