Privacy Policy

This Privacy Policy explains what personal data Byourself.es collects, why, how it's used and protected, and what rights you have, in accordance with the EU General Data Protection Regulation (GDPR) and applicable e-privacy rules.

1. Who is responsible for your data

Byourself.es is operated by Iryna Burman, who acts as the data controller for the personal data described in this policy. For any privacy-related request, contact us via the Contact page.

2. What data we collect

  • Identity and contact data: name, email address, phone number, delivery and billing address
  • Order data: items purchased, order value, order history, returns/refund requests
  • Payment data: your payment is processed directly by our payment provider; we do not store full card numbers on our own systems
  • Technical data: IP address, browser type, device information, and cookies (see Section 7)
  • Communications: messages you send us via the Contact page or email

3. Legal basis for processing

  • Contract performance — to process your order, take payment, arrange delivery, and handle returns
  • Legal obligation — to meet accounting, tax, and consumer-protection recordkeeping requirements
  • Legitimate interest — to keep the Site secure, prevent fraud, and improve our service
  • Consent — for marketing emails and non-essential cookies, which you can withdraw at any time

4. How we use your data

  • To process and deliver your order, and to handle any return or complaint
  • To contact you about your order's status
  • To send marketing emails or offers — only where you've given consent, and always with an unsubscribe option
  • To detect and prevent fraud or misuse of the Site

5. Who we share your data with

We share personal data only with third parties who need it to help us run the Site and fulfil your order, specifically:

  • Our e-commerce hosting platform (Shopify), which stores and processes order and account data on our behalf
  • Our payment processor, to securely take payment
  • Our B2B wholesale suppliers, who receive your name, delivery address, and order details solely to prepare and ship your order directly to you
  • Shipping and logistics carriers, to deliver your order and provide tracking

We do not sell your personal data to third parties.

6. International data transfers

Some of the service providers listed above may process data outside the European Economic Area (EEA). Where this happens, we rely on providers that maintain appropriate safeguards recognized under GDPR, such as the European Commission's Standard Contractual Clauses. Full details of a specific recipient of your data can be provided on request via the Contact page.

7. Cookies

The Site uses cookies that are strictly necessary for core functions (such as keeping items in your cart and keeping you signed in), which do not require consent. Where we use any non-essential cookies (for analytics or marketing), we will ask for your consent first, and you can change your preference at any time.

8. Data retention

We keep order and transaction data for as long as required by applicable tax and accounting law, and other personal data only for as long as necessary for the purposes described above, after which it is deleted or anonymized.

9. Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten"), subject to our legal obligation to retain certain order/tax records
  • Request restriction of, or object to, certain processing
  • Request a portable copy of your data
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with your national data protection supervisory authority

To exercise any of these rights, contact us via the Contact page.

10. Children's privacy

This Site is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Material changes will be reflected by an updated date below.

Last updated: July 2026.