Privacy Policy for Moda Autentica
Last Updated: July 7, 2025
Moda Autentica, operated by Moda Elisavi S.R.L., is an e-commerce store powered by Shopify, offering a curated shopping experience through a dropshipping model. This means we collaborate with trusted suppliers to fulfill orders directly to you, ensuring quality and efficiency. This Privacy Policy explains how we collect, use, process, and disclose your personal information when you visit our websites (www.moda-autentica.com and www.moda-autentica.ro), use our services, make purchases, or otherwise interact with us (collectively, the "Services").
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs the collection, processing, and disclosure of your personal information.
1. Personal Information We Collect
We collect personal information that identifies or can reasonably be linked to you, depending on how you interact with our Services and as permitted by applicable law. Personal information does not include anonymized or de-identified data that cannot be linked to you. We may collect the following categories of personal information:
Contact Details: Name, email address, phone number, billing address, shipping address.
Financial Information: Payment details (e.g., credit/debit card numbers, transaction details) processed securely through third-party payment providers (e.g., Netopia, Wise).
Account Information: Username, password, security questions, preferences, and settings.
Transaction Information: Details about items viewed, added to cart, wishlisted, purchased, returned, or canceled.
Communications: Information provided when you contact us (e.g., via customer support inquiries).
Device and Usage Information: IP address, browser type, operating system, device type, page visit duration, click sequences, and interactions with our Services, collected via cookies or similar technologies.
Third-Party Data: Information obtained from partners, such as payment processors, couriers, or analytics providers (e.g., Google Analytics).
We do not knowingly collect sensitive personal information (e.g., racial or ethnic origins, political opinions, religious beliefs, health, or sexual orientation). If such data is provided voluntarily, we will delete it unless required for a legitimate purpose.
2. Sources of Personal Information
We collect personal information from:
You Directly: When you create an account, place an order, contact us, or provide information through forms or communications.
Automatically: Via cookies, web beacons, or similar technologies when you use our Services (e.g., IP address, browsing behavior).
Third Parties: From Shopify (our platform provider), payment processors (e.g., Netopia, Wise), couriers, or analytics providers (e.g., Google Analytics).
Business Partners: From suppliers or logistics partners in our dropshipping model to fulfill orders or manage.
System: process returns or exchanges.
3. How We Use Your Personal Information
We use your personal information for the following purposes, based on legal grounds such as contract performance, legal obligations, legitimate interests, or your consent:
Provide and Improve Services: To process orders, fulfill shipments, manage accounts, process payments, facilitate returns/exchanges, send order-related notifications, and personalize your shopping experience (e.g., product recommendations).
Marketing and Advertising: To send promotional emails, text messages, or display targeted ads based on your interactions with our Services, with your consent where required.
Security and Fraud Prevention: To authenticate accounts, secure transactions, detect fraudulent or malicious activity, and protect our Services.
Customer Support: To respond to inquiries and maintain our relationship with you.
Legal Compliance: To comply with legal obligations (e.g., tax reporting to ANAF), respond to legal requests, or enforce our policies.
4. How We Disclose Your Personal Information
We may share your personal information with:
Shopify: To host and operate our Services, process payments, and provide analytics or personalized features.
Suppliers and Logistics Partners: To fulfill orders and manage returns in our dropshipping model (e.g., sharing shipping details with couriers).
Service Providers: For IT management, payment processing (e.g., Netopia, Wise), analytics (e.g., Google Analytics), or customer support.
Business Partners: For marketing purposes, with your consent, in accordance with their privacy policies.
Authorities: To comply with legal obligations (e.g., tax authorities) or protect our rights.
Affiliates: Within our corporate group for business operations.
Other Parties: In case of mergers, acquisitions, or bankruptcy, or with your consent (e.g., via social media integrations).
We do not sell your personal information. Shopify may use your data for its own purposes (e.g., analytics or fraud prevention), as outlined in the Shopify Consumer Privacy Policy.
5. International Transfers
Your personal information is primarily stored within the European Economic Area (EEA). However, some data (e.g., via Google Analytics or Shopify) may be transferred outside the EEA to countries like the USA, with safeguards such as Standard Contractual Clauses to ensure compliance with GDPR.
6. Data Security and Retention
We use industry-standard security measures (e.g., SSL encryption, restricted access, secure servers) to protect your data. However, no system is completely secure, and data transmitted over the internet may be at risk. You are responsible for keeping your account credentials confidential.
We retain your data only as long as necessary:
Customer data: 5 years from the last order (per Romanian tax law).
Partner data: Duration of the contract plus 10 years (per Romanian Fiscal Code).
Marketing data: Until you withdraw consent.
Technical data (e.g., cookies): Up to 2 years, per our Cookie Policy.
Data is deleted after these periods unless required for legal or legitimate purposes.
7. Your Rights
Under GDPR and applicable laws, you may have the following rights:
Access: Request a copy of your personal information.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your data, subject to legal obligations.
Portability: Request a transferable copy of your data.
Objection/Restriction: Object to or restrict certain processing (e.g., marketing).
Withdraw Consent: Withdraw consent for processing (e.g., newsletters) without affecting prior processing.
Opt-Out of Targeted Advertising: Opt out via our website or by enabling Global Privacy Control (GPC). We respect GPC signals and treat them as opt-out requests for targeted ads.
Complaints: File a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or contact us to appeal decisions.
To exercise these rights, contact us at contact@moda-autentica.com or +40766254138. We may verify your identity before processing requests.
8. Third-Party Websites
Our Services may link to third-party sites (e.g., Netopia, Wise, social media platforms). We are not responsible for their privacy practices. Review their policies before providing information.
9. Children’s Data
Our Services are not intended for children under the age of majority in your jurisdiction. We do not knowingly collect data from children. If you believe a child has provided us with their data, contact us to request deletion.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in practices or legal requirements. Updates will be posted on our websites with the revised "Last Updated" date. Significant changes will be notified as required by law.
11. Contact
For questions or to exercise your rights, contact:
Email: contact@moda-autentica.com
Phone: +40766254138
Address: Moda Elisavi S.R.L., Str. Viorelelor, Nr. 1, Bl. 1, Sc. A, Ap. 7, Bacau, 600125, Romania
Moda Elisavi S.R.L. is the data controller for your personal information under applicable data protection laws.