At a glance
How BRENDYS collects, uses, protects and documents personal data.
For website operations BRENDYS handles personal data in accordance with applicable privacy law. Data and rights requests are accepted at info@brendys.online.
We may process profile, contact and address data, order history, settings, requests, acknowledgements, device data, IP, security events, preferences and materials submitted to support. BRENDYS should not store payment credentials when payment is handled by a certified partner.
Contract and pre-contractual steps support accounts and orders; legitimate interests support security, fraud prevention and service improvement; legal obligations support accounting and sanctions screening; consent supports optional cookies and marketing. Acknowledging this policy does not replace separate consent where required.
A user with a verified email may voluntarily connect the official BRENDYS Telegram bot to an existing account. Telegram is an additional channel and does not replace email as the primary account identifier.
Telegram may be used for short-lived one-time login codes, important account and order notifications, selected Maison Journal news and support conversations. BRENDYS does not send passwords, payment credentials or other sensitive account data through Telegram.
Marketing communications are sent only with separate consent. Consent may be withdrawn through /unsubscribe or the private account without disabling necessary security messages. Telegram may be disconnected completely from the account at any time.
Where GDPR applies, rights may include access, rectification, erasure, restriction, portability, objection and withdrawal of consent without affecting prior lawful processing. You may also complain to a competent supervisory authority.
Data is kept only as long as needed for processing purposes, contractual requirements, disputes and mandatory retention. BRENDYS uses access controls, logs, transport encryption and backups. Material personal-data breaches are assessed and notified within GDPR requirements.
BRENDYS processes personal data for accounts, pre-contractual requests, orders, delivery, support, security, fraud prevention, policy records, optional communications and website operation. The relevant Website Operator or Seller acts in the role identified for the specific processing activity.
The following requirements form part of this policy and are read together with transaction-specific information and mandatory law.
- Contract or pre-contractual steps support account, order, delivery and requested support operations.
- Legal obligations may require accounting, tax, product-safety, sanctions, dispute and record retention.
- Legitimate interests may support security, service integrity, fraud prevention, limited analytics and defence of legal claims after balancing individual rights.
- Consent supports optional marketing, optional cookies and other activities where consent is required.
- Processors may include hosting, email, security, payment, analytics, support and courier providers under appropriate terms.
- International transfers use an applicable lawful mechanism and supplementary safeguards where required.
- Access is limited by role; transport security, logging, backups and incident procedures reduce risk but no system can promise absolute security.
- Children should not create commercial accounts where they lack legal capacity.
BRENDYS follows a proportionate process designed to protect clients, the Maison and lawful commerce.
- Requests for access, correction, erasure, restriction, objection, portability or consent withdrawal may be sent to info@brendys.online.
- BRENDYS may verify identity and clarify the scope before disclosure.
- Account deletion does not require immediate erasure of records retained for orders, tax, safety, fraud prevention or legal claims.
- Marketing withdrawal is applied to future optional messages while necessary service communications may continue.
- A material personal-data breach is assessed and notified to authorities or affected people when applicable law requires.
Retention is measured from the end of the relevant relationship or event and may be extended for active disputes, security investigations or legal holds.
| Category | Examples | Purpose | Legal basis | Typical retention |
|---|---|---|---|---|
| Account & identity | Name, email, verification, country | Account access and client identification | Contract; legitimate interests | Account life plus claim period |
| Contact & delivery | Phone, address, recipient, instructions | Support and fulfilment | Contract; legal obligation | Order life plus statutory records |
| Orders | Objects, sizes, returns, invoices | Contract, accounting and service | Contract; legal obligation | Applicable accounting and claim periods |
| Payment metadata | Provider reference, status, limited card metadata | Payment and reconciliation | Contract; legal obligation; fraud prevention | Transaction and dispute period |
| Support messages | Requests, attachments, correspondence | Resolve requests and evidence service | Contract; legitimate interests | Issue life plus claim period |
| Device & IP | Browser, IP, security events | Security, abuse and fraud prevention | Legitimate interests; legal obligation | Short operational period unless incident-related |
| Cookies & preferences | Consent, language, currency, analytics choice | Operation and chosen personalisation | Necessary service; consent | Session or stated cookie duration |
| Marketing | Subscription and withdrawal | Optional Maison communications | Consent where required | Until withdrawal plus suppression record |
| Policy & access logs | Version, time, language, session event | Evidence choices and protect access | Contract; legitimate interests; legal obligation | Policy life plus claim period |
Provide accurate information, protect account access, follow product and service instructions and respond promptly to proportionate verification requests. Mandatory consumer rights remain unaffected.
These examples illustrate operation of the policy and do not replace fact-specific review or mandatory law.
Where reasonably necessary, BRENDYS may pause a transaction, request verification, correct information, restrict a feature, cancel an unaccepted order, preserve records, remove infringing material or decline service. Measures are proportionate and subject to mandatory rights.
Nothing excludes liability or consumer protection that cannot lawfully be excluded. A transaction-specific confirmation, invoice or negotiated contract may contain more specific terms to the extent permitted by law.
Questions: legal@brendys.online or support@brendys.online. Material changes receive a new version and date; renewed acceptance may be requested where appropriate.
FAQ
Frequently asked questions
How do I contact BRENDYS about a legal matter?
Email legal@brendys.online. For orders and client service, use support@brendys.online.
Which language version applies?
Russian and English versions are provided for convenience. If they differ, the version identified in the contract or mandatory law of the service country applies.