1. Introduction
Browsing the IronBeasts website and registering as a customer in the online store implies understanding and accepting this Privacy and Data Protection Policy.
IronBeasts is constantly concerned with protecting the privacy of personal data and taking preventive actions regarding the security of the site and the protection of its customers’ and visitors’ data.
To reinforce guarantees of personal data confidentiality, new data protection measures have been implemented, both in verifying the legitimacy of using processed personal data and in ensuring compliance with the rights recognized to data subjects. In this context, and through the specialization of customer support channels, IronBeasts aims to promote clearer and more objective communication of the purposes underlying the processing of personal data and the transparency of processing operations.
Thus, the information in this text aims to clearly and unequivocally convey the content of the privacy and personal data protection policy that will be subject to processing under the General Data Protection Regulation in force (hereinafter referred to as GDPR) and as defined by the content of the commercial relationship to be established between the data subject and IronBeasts.
2. Types of Personal Data Collected
In general terms, personal data is collected in three situations directly related to IronBeasts’ activities:
2.1 User Registration: Creating the IronBeasts Customer Account and Purposes of Data Processing
To create a customer account, a personal area is provided where the customer must enter the necessary identification data. The first purchase requires the provision of additional personal data necessary for processing and delivering the order.
Mandatory fields in the registration forms are marked with an asterisk (*).
IronBeasts is committed to protecting customer data, which will never be made available to third parties without the data subject’s knowledge or consent, as legally required.
During order processing, certain personal data (such as address and postal code) may be disclosed to third parties solely for the purpose of fraud prevention and detection and always upon request from the competent authorities.
Additionally, when making a purchase on the site, delivery address and payment details are also required to ensure the highest possible efficiency and compliance with delivery deadlines.
The provided data will be stored for the strictly necessary period, which usually corresponds to the duration of the customer account. Therefore, when the customer cancels the account, personal data will be permanently deleted, except for data necessary to fulfill legal obligations, which will be archived in a separate database for the absolutely necessary period. If the customer wishes to place a new order on the site, they must re-register, subject to the terms and conditions in force at that time.
We may also collect other information about the customer’s experience on the site exclusively to improve the service provided, which we will do after confirming the customer’s knowledge and, when necessary, after obtaining explicit consent.
Regarding updating customer data, whenever the customer wants to check the data provided to IronBeasts, they can do so in their personal area. The customer must keep their account access data secure, as any action or request made through their account will be their responsibility, provided the customer identity verification procedures described below are followed.
We recommend that the customer does not save their password in the browser, as someone with access to their computer could access their personal information.
What are the collected data used for?
Customer data is processed for actions such as order processing, notifying the customer of any changes to site functionalities, conducting surveys, and evaluating interactions for statistical purposes.
We may also periodically send information about products and services, campaigns, promotions, and special offers by email. If the customer does not wish to be contacted for these purposes, they can unsubscribe from the newsletter by clicking the link provided in the newsletter text.
2.1.1. Customer Contact with IronBeasts
Whenever the customer, on their initiative, contacts IronBeasts for information about products, the purchase process, order status, or to report any site-related situation, IronBeasts may need to collect additional personal data for various purposes, which will be specifically communicated in each case.
2.1.2 IronBeasts’ Contact with the Customer
During the processing of a specific order, IronBeasts may need to contact the customer to:
- Confirm or correct personal data necessary for completing the delivery process (e.g., delivery address). In such cases, contact will be made using the mobile phone number listed in the customer record.
- Inform the customer via phone about a stock outage of one or more items in the order and provide alternatives such as a refund or replacement with similar products.
2.2 Cookies and Other Marketing Tools
2.2.1 Classification and Description of Cookies
By type:
- Essential – Allow site navigation and use of its features. Without these cookies, requests cannot be processed.
- Functionality or performance – Collect information on how the user uses the site to improve its functionality. They help identify areas of most interest to the customer, measure promotional campaign effectiveness, and understand which products and promotions best suit the customer’s interests and needs by creating statistics based on non-individualized customer behavior and site usage, measuring advertising campaign effectiveness, and introducing navigation improvements.
- Analytical – Used anonymously for statistical purposes and to improve site functionality without collecting personal information. They help highlight articles of potential interest to customers or visitors, monitor site performance, and identify the most effective methods of linking between pages or reasons for error messages.
By validity:
- Permanent – Stored on the customer’s computer or device between browser sessions to maintain settings or preferences and improve site use on the next visit. Some of these cookies are provided by authorized third parties and are limited to presenting campaigns and products of potential interest to the customer; retargeting (IronBeasts product advertising on partner websites or social networks without storing personal data or user profiles, thus not involving any personal data transfer to third parties).
- Session – Limited to each user session and expire when the browser session ends. Their purposes include indicating previously added products in the cart, identifying issues, and ensuring a better browsing experience. Some session cookies also reinforce security.
2.2.2 Activating and Deactivating Cookies and Similar Technologies
Newsletters and other communications may contain information for statistical purposes that tracks whether they are opened and link clicks within them. However, customers can always opt out of receiving newsletters or email communications via the specific option mentioned in the communication.
Additionally, in the browser’s Help menu, the customer can manage the use of cookies and similar technologies. As indicated in the message visible at the top of this page, access to the IronBeasts online store requires the use of cookies, and their deactivation may limit site navigation.
For more information, consult the information available in each browser or specific articles on the topic.
2.2.3 Individualized Product Promotion Communications
IronBeasts may send newsletters or other email messages to conduct general or targeted promotional campaigns. These communications will only be sent after verifying that the customer has given explicit and unequivocal consent and has been informed of their right to cancel such permissions at any time.
The processing of personal data for individualized communications strictly complies with the GDPR by IronBeasts’ employees or third parties to whom the data is transmitted for executing necessary services for promotional campaigns.
2.2.4 Redirection
Some hyperlinks on this site redirect the customer to external websites. By clicking these links, the customer leaves the IronBeasts site. As we cannot control these sites, IronBeasts is not responsible for any content available on them.
2.3 Processing Security
IronBeasts uses one of the most secure online ordering systems available and continually improves its software to offer the highest security possible to its customers. SSL (Secure Sockets Layer) encryption of transmitted data ensures our identity.
3. Purpose Limitation, Access, and Retention
IronBeasts commits to using its customers’ and visitors’ personal data for purposes strictly necessary to pursue its activities, limited by its scope or the extent of the explicitly granted consent. This means that data will not be transmitted to any third party without the data subject’s knowledge and/or authorization when legally required.
Thus, IronBeasts ensures that its employees’ access to such data is limited to what is necessary for executing the relevant action, with employees identified and tracked according to their functions and tasks within the contractual relationship.
4. Rights of Data Subjects
4.1 Right to Information and Access to Personal Data
At any time, the customer can request information about stored personal data, including the category of data, origin, recipient(s), retention period, and purposes, as well as the identification of the data controller, data protection officer, and their contact information.
4.2 Right to Rectification and Erasure of Personal Data
To exercise the right to data rectification, the customer should send the request, identifying the data to be modified and the new data, by email to geral@ironbeastslifestyle.com or by calling +351 244021069. The same procedure applies if the customer wishes to exercise the right to erasure of personal data.
4.3 Right to Object and Withdraw Prior Consent
Reinforcing the principle of transparency in personal data processing and communications with customers, IronBeasts allows customers to modify granted data processing permissions at any time. To do so, contact IronBeasts via email at geral@ironbeastslifestyle.com.
5. Changes to the Privacy Policy and Contacts
5.1 Any changes to this Privacy and Data Protection Policy will be published on the IronBeasts website.
Information on conflict resolution under Article 14, Paragraph 1 of the ODR (Online Dispute Resolution Regulation):
The European Commission provides consumers with the opportunity to resolve disputes online under Article 14, Paragraph 1 of the ODR on one of its platforms. The platform (http://ec.europa.eu/consumers/odr) serves as a site where consumers can seek an out-of-court resolution to disputes arising from online purchases and service contracts.