Legal

Privacy Policy

This Privacy Policy explains how Besty Promo (“we”, “us”, “our”), trading via www.bestypromoeu.com, collects, uses, and protects personal data when you use our website and services.

We are a non-EU company selling promotional products to customers in the European Union. Please update our registered company name and address in Site Settings → Legal entity.

1. Data controller

The data controller is Besty Promo. Contact: [email protected].

2. What we collect

Identity and contact data (name, email, phone, company, shipping/billing address)
Order and payment-related data (order contents, amounts, PayPal transaction references — we do not store full card numbers)
Account or enquiry data if you contact us or request a quote
Technical and usage data (IP address via hosting/CDN, browser type, pages viewed) when you allow analytics cookies
Marketing preferences if you subscribe to our emails

3. Cookies

We use:

Necessary cookies / local storage — cart, checkout, security, and consent choice. These are required to run the shop.
Analytics & advertising (only with your consent) — e.g. Google Analytics 4 and Meta Pixel, plus first-party visit logging for attribution. You can accept, reject, or change this via our cookie banner.

4. Purposes and legal bases (GDPR)

Contract — to process orders, proofs, delivery, and customer support
Legitimate interests — to secure the site, prevent fraud, and improve our services (balanced against your rights)
Consent — for non-essential cookies/analytics and marketing emails (you may withdraw anytime)
Legal obligation — where we must keep records for tax or accounting rules that apply to us

5. Sharing

We may share data with processors who help us operate the shop, including payment (PayPal), email delivery (e.g. Resend), hosting/CDN (e.g. Cloudflare), and analytics providers if you consented. We do not sell your personal data.

6. International transfers

As a non-EU seller and when using global providers, data may be processed outside the EEA. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) or your consent for specific tools.

7. Retention

We keep order and enquiry records as long as needed for the contract, disputes, and legal/accounting requirements. Marketing contacts are kept until you unsubscribe. Analytics data follows the retention settings of those tools.

8. Your rights

If GDPR applies to you, you may request access, rectification, erasure, restriction, portability, and objection to certain processing, and you may withdraw consent. You may lodge a complaint with your local supervisory authority in the EU/EEA.

9. Updates

We may update this policy from time to time. The version on this page is the current one.