Privacy & Cookie Policy

Privacy Policy and Cookie Policy

This Privacy & Cookie Policy applies to the website www.timelessbrands.ro (the “Site”).

The Site is owned and operated by S.C. TIMELESS BRANDS CONCEPT S.R.L., a company incorporated under Romanian law, with registered office in Bucharest, Sector 4, Bulevardul Metalurgiei nr. 132, registered with the Trade Register under no. J2025083772000, having VAT Identification Code (CUI): 52819459, telephone: +40 743 221 444, e-mail: support@timelessbrands.ro. In this Policy we refer to S.C. TIMELESS BRANDS CONCEPT S.R.L. as “Timeless Brands”, “we”, “us” or the “Controller”.

For any questions related to the protection of personal data, you can contact us at the above postal address or at the email address support@timelessbrands.ro

Definitions

“Personal data” means any information that identifies you or could identify you, directly or indirectly. This may include, for example, your name, surname, email address, home address, telephone number, delivery address, billing address, IP address, username, order history and payment details.

“Processing” means any operation or set of operations performed on personal data, with or without automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable national legislation and this Policy.

What information we collect and how?

We collect and process the following categories of information about you, depending on how you interact with the Site and with Timeless Brands.

We collect information when you subscribe to our newsletter, when you enter competitions or promotions organised by us, when you create an account or register on our Site, when you place an order on the Site, when you contact us by telephone, email or through our contact forms, and when you request personalised content such as tailored advertising.

The personal data you may provide to us include, in particular, your name and surname, gender (if you choose to disclose it), date of birth (day, month, year), email address, telephone number, home or delivery address, billing address, payment information (such as credit or debit card details, which are processed securely by our payment partners), as well as any other information you decide to share with Timeless Brands (for example preferences or notes you include in your order).

In some cases, we may collect information about you from other members or entities of the Timeless Brands group, for example if you make a purchase in a physical store operated by us or on our behalf. In such cases we may receive a copy of the transaction details in order to maintain a consistent customer profile.

We also work closely with certain third-party service providers such as payment and delivery partners, IT and hosting providers, analytics providers, advertising networks and search engine providers. Where we receive information about you from such partners, we do so only where they are authorised to share it with us under data protection law and where you have been informed about this. We may use these details to maintain accurate and up-to-date records about you.

In addition, we automatically collect certain technical information when you visit the Site, such as your IP address, browser type, device type, referring URLs, pages viewed and time spent on pages, through cookies and similar technologies, as described in the Cookies section of this Policy.

Why we use your data?

Timeless Brands may use your personal data for the following purposes.

We use your data to perform and manage the contracts concluded with you, including to process and fulfil your orders, to take payment, to arrange delivery, to manage returns, refunds and customer service, and to provide you with information about your orders and your account.

We may remind you of products that you have added to your shopping cart on the Site but for which you did not complete the purchase, for example by sending you cart reminder emails, if you have consented to receive such communications.

We may adapt the content of the Site, including the display of products and recommendations, to your preferences and behaviour, to offer you a more relevant and personalised shopping experience, where you have allowed us to do so.

We use your data to prevent, detect and investigate fraud, security breaches, violations of law or misuse of the Site, and to enforce our Terms and Conditions.

We use your data to respond to questions, requests, concerns or complaints that you send to us by email, phone or through the Site.

We use your data for internal business purposes, such as data analysis, testing, research, statistical purposes and to improve the functionality and performance of the Site and our services.

If you have given your consent, we may send you information about products, services, events and promotions that are similar to those you have already purchased or about which you have requested information. Such information may be sent via email, SMS, social media or other online advertising formats.

If you have consented, we may show you personalised advertising (for example, via newsletters, social media platforms such as Facebook or Instagram, or through banner ads on third-party websites) and make suggestions and recommendations about products or services that may interest you.

Subject to your consent, we may also create customer profiles for marketing and analytics purposes, based on your purchases, browsing behaviour and preferences, to better understand your interests and to send you more relevant communications.

We may also process your data without your prior consent where this is necessary to comply with legal obligations (for example accounting or tax obligations, or obligations arising from EU law), to protect our legitimate interests (such as preventing abuse, defending legal claims or enforcing our internal Code of Conduct) or in other situations permitted by Article 6 and, where applicable, Article 9 GDPR.

We may use and share aggregated or anonymised data that do not identify you personally without restriction.

Legal basis for processing your data

For each of the processing activities described above, Timeless Brands relies on one or more legal bases under the GDPR.

In many cases, processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This includes, for example, processing your orders, managing your account, providing customer support and delivering products to you.

In other cases, processing is necessary for compliance with legal obligations, for instance obligations arising from tax or accounting laws, consumer protection laws or other applicable regulations.

We also process data based on our legitimate interests, provided that these interests are not overridden by your rights and interests. These legitimate interests include, in particular, ensuring the effective organisation of our databases and business operations, understanding how our customers shop in different markets, improving and securing the Site, carrying out analytics and statistics, sending certain marketing communications to existing customers, presenting personalised offers on the Site or on social media platforms, and keeping you informed about changes to the Site or to this Policy.

Where the law requires your consent for specific processing operations, such as sending newsletters or certain forms of profiling and personalised advertising, we will only process your personal data for those purposes if you have given us your consent, for example by ticking a consent box or by otherwise clearly indicating your agreement. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Marketing communications

If you have agreed to receive marketing communications, we will send you information about Timeless Brands products, services, events, campaigns and promotions, including personalised content and online advertising through our own channels or through our online partners.

We may ask for your consent to join our mailing list when you create an account, when you complete a purchase, when you subscribe to our newsletter or updates, or when you provide your details to us by phone, in-store or through online forms.

You can withdraw your consent and opt out of marketing communications at any time. The easiest way to do so is by clicking the unsubscribe link at the bottom of any marketing email you receive from us. You can also contact us at support@timelessbrands.ro to update your marketing preferences.

We do not sell or rent your email address or other contact details to third parties for their own marketing purposes. Where third-party providers contact you on our behalf, they do so only in accordance with our instructions and under appropriate confidentiality obligations.

How we store and protect your data?

We treat the confidentiality and security of your personal data with great care. We only use the information you provide to us to the extent necessary to process your orders, provide our services (such as new arrivals alerts or back-in-stock reminders), communicate with you and fulfil our legal obligations.

Personal data collected through the Site are recorded and stored in our IT systems in accordance with GDPR and applicable data protection laws, and with appropriate technical and organisational security measures. These measures are designed to protect your data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Access to your customer account information is restricted to employees and collaborators who require such access to perform their job duties. We use secure login and password controls for our systems, and we review and update access rights and security controls on a regular basis.

Our personnel who have access to personal data belong mainly to the following categories: IT and administrative staff, customer service, marketing and other departments that need to process data in order to perform their duties. All such persons are bound by confidentiality obligations and are trained to handle data securely and lawfully.

Where we transfer personal data outside the European Union or the European Economic Area, including to countries that may not offer the same level of data protection as EU law, we do so only in accordance with the mechanisms permitted by the GDPR, such as standard contractual clauses or other appropriate safeguards.

With whom we share your personal data?

Your personal data may be stored in databases that can be accessed by Timeless Brands and, where applicable, by other entities in the same group, solely for the purposes described in this Policy.

We may share your data with certain trusted third parties who assist us in operating our business and the Site, such as IT service providers, hosting providers, payment processors, banking partners, courier and logistics companies, fraud prevention and collection agencies, analytics providers, marketing and advertising partners, affiliate and rewards programme operators, and other suppliers involved in the performance of the contract with you.

We may also share your data with analytics and search engine providers who help us improve and optimise the Site, always based on aggregated or pseudonymised data where possible.

Where required by law or where we are allowed to do so, we may disclose your data to law enforcement authorities, regulatory bodies or other authorised third parties in response to a verified request relating to a criminal investigation, suspected illegal activity or to protect our rights, the rights of our customers or the rights of third parties.

In the event of a merger, acquisition or other corporate transaction involving Timeless Brands, your data may be shared with potential or actual buyers and their advisers, subject to appropriate confidentiality obligations and in accordance with applicable law. In such cases, we will require the new entity to respect this Privacy Policy in relation to your data.

Upon request, we can provide you with a list of the main categories of third parties with whom we share personal data.

How long we store your data and how you can access it?

We retain your personal data for as long as is strictly necessary to fulfil the purposes for which it was collected, including to provide you with the services you request, maintain a relationship with you, comply with legal obligations, resolve disputes, prevent fraud and enforce our agreements.

If you have an account or an ongoing relationship with us, we will normally keep your data for the duration of that relationship and for a certain period thereafter, in line with applicable limitation periods and legal retention obligations.

If you ask us to delete your data, we may still retain certain information in anonymised or aggregated form, which can no longer be linked to you. Where reasonably necessary or legally required, we may retain certain personal data even after you close your account or where it is no longer needed to provide services, for example in order to comply with legal obligations, resolve disputes or prevent fraud.

If you have not consented to the use of your data for marketing purposes, we will keep your data for a period that is necessary to fulfil our contractual and legal obligations and, in general, no longer than six years after your last purchase, unless the law requires a different period.

Timeless Brands does not knowingly collect personal data from children under the age of 16 through the Site. If you are under 16, please ask a parent or legal guardian to contact us. If a parent or guardian becomes aware that a child under 16 has provided personal data to Timeless Brands, they should inform us without delay. If we discover that a child under 16 has provided personal data without parental consent, we will delete such data from our systems as soon as reasonably possible, unless the parent or guardian explicitly agrees to our processing the child’s data for specific purposes in accordance with the law.

Your rights

Under the GDPR and applicable law, you have several rights in relation to your personal data.

You have the right of access, meaning you can request information about the personal data we hold about you and receive a copy of those data, together with information about how we process them. We may ask you to confirm your identity before complying with such a request.

You have the right to rectification, which allows you to request that we correct or complete inaccurate or incomplete personal data that we hold about you.

You have the right to erasure (“the right to be forgotten”), which allows you to request that we delete your personal data in certain circumstances, for example if the data are no longer necessary for the purposes for which they were collected, if you withdraw consent where processing was based on consent, or if the data have been processed unlawfully. This right is not absolute and may be limited where we have a legal obligation or a legitimate interest to retain the data.

You have the right to restriction of processing, which allows you to request that we suspend the processing of your data in certain situations, for example if you contest the accuracy of the data or object to the processing, for a period enabling us to verify your request.

You have the right to change your preferences at any time, including your preferences regarding marketing communications. For example, if you have consented to direct marketing but have changed your mind, you can opt out of marketing at any time using the unsubscribe link in our emails or by contacting us.

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless such processing is allowed by law and subject to appropriate safeguards.

You have the right to data portability, which allows you to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller where processing is based on consent or on a contract and is carried out by automated means.

You have the right to lodge a complaint with the competent supervisory authority if you believe your data protection rights have been infringed. In Romania, the supervisory authority is the National Supervisory Authority for Personal Data Processing (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal – ANSPDCP), www.dataprotection.ro.

To exercise any of your rights, you can contact us by post at S.C. TIMELESS BRANDS CONCEPT S.R.L., Municipiul București, Sector 4, Bulevardul Metalurgiei nr. 132, or by email at support@timelessbrands.ro. We may need to verify your identity before responding to your request.

If you ask us to stop processing certain personal data that are necessary for you to use the Site or for us to provide certain services (for example management of your online account), you may no longer be able to use those services or the Site in the same way as before.

Cookies and similar technologies

A cookie is a small file stored on your computer by a website in order to provide you with a unique ID. Cookies help make your use of our Website easier and faster, because they can remember whether you have visited the Website before and help us provide you with the information you need about your shopping activity or your account details, when and where you need them. A cookie generated by our Website does not contain information that directly identifies you. It contains only a numerical code that allows you, for example, to retrieve your account details or your shopping list. In line with our Privacy Policy regarding customer information, we analyse data collected through cookies only in an aggregated form, not at the level of each individual customer.

We use cookies to provide you with a pleasant and seamless online shopping experience. We use them to determine which browser you are using, the type of device, a unique code, information about your computer and connection, statistics about page views, traffic to and from the Website, the referring URL, IP address (“IP”) and standard web log information.

By using the Timeless Brands Concept S.R.L. Website, you agree that we may store cookies on your device. If you prefer, you can configure your internet browser not to accept cookies, but this may reduce or affect your online experience.

  1. Types of cookies we use and why we use them:

There are two main types of cookies that may be used during your visit to the Timeless Brands Concept S.R.L. Website:

  • technical cookies: these are necessary for the Website to function properly and to allow users to navigate it; without them, a user may not be able to view pages correctly or use certain features.

  • profiling cookies: these are used to create user profiles in order to send advertising messages in line with the preferences shown by users while browsing.

Cookies, whether “technical” or “profiling”, can also be classified as follows:

  • site functionality cookies: these cookies are used to identify users between page loads and are essential to allow you to navigate a particular website, for example by remembering certain user settings. Without them, some services provided on the Website (such as the shopping cart) would not be available.

  • analytics cookies: these cookies are used to measure and analyse how visitors use a website (for example, site traffic, total sales via the website, the pages users visit most frequently and the pages from which users receive error messages) in order to continuously improve the Website and the shopping experience. All information collected by these cookies is anonymous and is not used to identify you.

  • customer preference cookies: these functional cookies remember your preferences and behaviour and help us personalise your shopping experience.

  • marketing and advertising cookies: these cookies may be used to deliver personalised advertisements that are more relevant to you. They also limit the number of times you see one of our online ads and help us measure the effectiveness of our marketing campaigns.

  • third-party cookies: Timeless Brands Concept S.R.L. works with third-party companies for marketing and advertising purposes. These cookies allow us to make more informed decisions about what our customers want from us. Third-party companies may use a mix of session and persistent cookies. Any information they collect is anonymous.

The cookies we use on our Site include, among others, the following:

Cookie
Domain
Description
Duration / Expiry
Type
_cfduidtimelessbrands.roCookie used by Cloudflare to identify individual clients and apply security settings. It does not contain personal data.1 monthNecessary
wp_woocommerce_session_*timelessbrands.roCreates a unique ID for each customer and stores information about the shopping cart.2 daysFunctional
woocommerce_cart_hashtimelessbrands.roHelps maintain the shopping cart between pages and sessions.SessionFunctional
woocommerce_items_in_carttimelessbrands.roStores the number of items added to the shopping cart.SessionFunctional
yith_wcwl_sessiontimelessbrands.roCookie used to store items added to the wishlist.24 hoursFunctional
wpforms_sessiontimelessbrands.roTemporarily stores data entered in WPForms to prevent loss in case of an error.24 hoursFunctional
quform_session (if QuForm is also active)timelessbrands.roTemporarily stores data entered in the contact form.24 hoursFunctional
_gatimelessbrands.roInstalled by Google Analytics. Used to collect anonymous data about visitors and their behavior on the site.2 yearsAnalytics
_gidtimelessbrands.roUsed by Google Analytics to generate reports on user interactions with the site.1 dayAnalytics
_gat / ga / _ga_Q**timelessbrands.roUsed by Google Analytics to limit request rates and improve the accuracy of traffic measurement.1 minuteAnalytics
_fbptimelessbrands.roInstalled by Meta (Facebook Pixel) to deliver personalized ads and track campaign performance.3 monthsMarketing
_clck / _clsktimelessbrands.roMicrosoft Clarity cookies used for user behavior analysis (heatmaps, scroll tracking).1 yearAnalytics
mailchimp_landing_sitetimelessbrands.roStores the first page visited by the user to track Mailchimp signup campaigns.1 monthMarketing
rankmath-viewtimelessbrands.roCookie used by the Rank Math plugin for internal SEO performance analysis (administrators only).SessionFunctional
wp_rocket_cachetimelessbrands.roManaged by WP Rocket. Helps improve page performance and loading speed.VariableTechnical / Performance
_GRECAPTCHA / rc::a / rc::b / rc::cgoogle.comUsed by Google reCAPTCHA to protect forms from automated abuse.VariableNecessary
hjSessionUser*timelessbrands.roHotjar cookie (if enabled via GTM) for analyzing user behavior.1 yearAnalytics
elementortimelessbrands.roUsed by Elementor to store user actions in real time during editing (administrators only).PersistentTechnical

Google reCAPTCHA

We use the reCAPTCHA service provided by Google Ireland Limited (or Google LLC, depending on your location) to protect our online forms against spam and automated abuse. This service checks whether a form is being submitted by a human or by an automated program.

In order to perform this check, reCAPTCHA collects certain information, such as your IP address and other technical data about your device and interaction with the Site, and transmits it to Google for analysis. In general, your IP address is shortened and anonymised by Google within the European Union or the European Economic Area before being transferred to servers in other countries. Only in exceptional cases is the full IP address transmitted to a Google server and shortened there.

Google uses the information collected for the purpose of providing and improving the reCAPTCHA service. The IP address transmitted by your browser in the context of reCAPTCHA is not merged with other Google data. The processing of data by Google in this context is subject to Google’s own privacy policy, which you can consult at https://www.google.com/policies/privacy/.

By using our Site and its forms protected by reCAPTCHA, you agree to the processing of data about you by Google in the manner and for the purposes described above.

How you can manage or delete cookies?

You can configure your internet browser to reject some or all cookies or to notify you when cookies are set. You can also delete cookies that have already been stored on your device at any time. You should still be able to use our Site without accepting cookies, although disabling certain cookies may affect your ability to use some features and services fully, such as the shopping cart, login or remembering your preferences.

Cookie management and configuration options vary from one browser to another. You can generally find the relevant settings in the “Options”, “Tools” or “Preferences” menus of your browser. For more detailed information, you can consult the help pages of your browser.

For example, you can find information on managing cookies at the following addresses:
for Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies
for Firefox: https://support.mozilla.org/kb/enable-and-disable-cookies-website-preferences
for Chrome: https://support.google.com/chrome/answer/95647
for Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data
for Edge: https://privacy.microsoft.com/windows-10-microsoft-edge-and-privacy
for Opera: https://www.opera.com/help/tutorials/security/privacy/

For more general information about cookies, you can visit www.allaboutcookies.org or www.youronlinechoices.eu, which also contains information about behavioural advertising and online privacy.

If you have any questions or requests relating to cookies or to your rights as a data subject, you can contact our data protection contact at support@timelessbrands.ro.

În cazul în care doriți să eliminați fișierele de tip cookie stocate pe dispozitivele dvs. și să configurați browserul dvs. web astfel încât să refuze fișiere de tip cookie, puteți să utilizați setările privind preferințele din browser-ul dvs. web. De obicei, puteți găsi setările de navigare referitoare la fișiere de tip cookie în meniurile „Opțiuni”, „Instrumente” sau „Preferințe” din browserul web pe care îl utilizați pentru a accesa Website-urile noastre. În funcție de browserele web existente, pot fi utilizate mijloace diverse pentru a dezactiva fișierele de tip cookie. Pentru a obține mai multe informații, vă rugăm să vizitați website-ul browserelor dvs.:

Setări cookie în Internet Explorer - Internet Explorer; hyerlink catre - https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies#ie=ie-11

Setări cookie în Firefox - Firefox; hyerlink catre - https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Setări cookie în Chrome - Chrome; hyerlink catre - https://support.google.com/chrome/answer/95647?hl=en&hlrm=en

Setări cookie în Safari - Safari; hyerlink catre - https://support.apple.com/ro-ro/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Setări cookie în Edge - Edge; hyerlink catre - https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy

Setări cookie în Opera - Opera; hyerlink catre - https://www.opera.com/help/tutorials/security/privacy/.

Pentru a afla mai multe despre fișierele de tip cookie, vă rugăm să vizitați www.allaboutcookies.org sau să vedeți www.youronlinechoices.eu, care conține informații suplimentare privind publicitatea comportamentală și viața privată online.

Pentru informații sau solicitări în baza dreptului persoanelor vizate conform GDPR, vă puteti adresa Ofițerului (Responsabilului) cu Protecția Datelor la adresa de e-mail.

Changes to this Policy

We may update this Privacy and Cookie Policy from time to time, for example to reflect changes in the law, our practices or the Site’s functionalities.

We will publish the updated version of the Policy on the Site and indicate the date of the latest revision. If the changes are significant, we may also notify you by email or through a notice on the Site, where appropriate.

If you do not agree with the new terms of this Policy, you should stop using the Site. If you have a registered account, you may request its closure within thirty (30) days by contacting us at support@timelessbrands.ro and, where applicable, you may also ask us to delete your personal data, subject to legal retention obligations. Continued use of the Site after the effective date of the changes will constitute your acceptance of the updated Policy.

How to contact us?

We are always happy to hear from our customers and visitors. If you have any questions about this Privacy and Cookie Policy, if you would like us to stop using your personal data in a certain way, if you wish to exercise any of your rights or if you want to lodge a complaint, you can contact us using the details below.

You can contact our data privacy team by email at support@timelessbrands.ro or by telephone at +40 743 221 444. You can also write to us at the following postal address:

S.C. TIMELESS BRANDS CONCEPT S.R.L., Municipiul București, Sector 4, Bulevardul Metalurgiei nr. 132.

We will do our best to respond to your requests and concerns promptly and in accordance with applicable data protection laws.