Privacy policy

1. Data controller

Your data is processed by:

• Company: SPRITZ PERFUME LABS S.R.L., trading as SPRITZ.
• Registered address: Str. Narciselor nr. 5, Mun. Brașov, jud. Brașov, România.
• VAT / tax number (CUI): 55269180.
• Trade register number: J2026045696004.
• Email: hello@spritz.ro. Phone: +40 749 392 549.

2. What we collect and why

• Order data (name, delivery address, email, phone, order contents): to ship your products and issue the invoice. Legal basis: performance of the contract and our legal tax obligations.
• Payment data: handled directly by the payment processor. We only see the result of the transaction, never the card number.
• Newsletter email: only if you sign up. Legal basis: your consent. You can unsubscribe from any email we send.
• Messages you send us: to reply. Legal basis: our legitimate interest in providing support.
• Technical browsing data from cookies: see the Cookie policy. Anything that is not strictly necessary runs only with your consent.

3. Who we share it with

We use suppliers who process data on our behalf, strictly to run the service:

• the commerce platform and the payment processor;
• the courier that delivers the parcel;
• our hosting and email providers;
• our accountants, for tax obligations.

We do not sell your data and we do not use it for anything else. Where a supplier processes data outside the European Economic Area, the transfer relies on the standard contractual clauses approved by the European Commission.

4. How long we keep it

• Commercial and accounting records: 10 years, as tax law requires.
• Account data and order history: while your account is active, then 3 years.
• Newsletter email: until you unsubscribe.
• Support messages: 3 years.

5. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting processing carried out before.

Write to hello@spritz.ro and we answer within 30 days at most.

If you are not happy with our answer, you can complain to the Romanian data protection authority: https://www.dataprotection.ro/

6. Security and automated decisions

The site uses an encrypted connection and access to data is limited to the people who need it.

We do not take automated decisions with legal effect on you and we do not carry out profiling.

7. Children

This site is not aimed at children under 16 and we do not knowingly collect their data.