1. INTRODUCTION

This Privacy Policy explains how TRIBURI CREATIVE SRL (“Triburi”, “we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website www.triburi.com, make a purchase, or interact with our services.

Triburi is committed to protecting your privacy and handling all personal data with transparency, integrity, and in full compliance with the EU General Data Protection Regulation (GDPR).

By using our website, you agree to the practices described in this Policy.

2. WHO WE ARE

TRIBURI CREATIVE SRL is a company registered in Romania, operating internationally and producing its handcrafted hats in Italy.

• Legal entity: TRIBURI CREATIVE SRL

• Registered office: Bacau, Romania

• Email: contact@triburi.com

• VAT number: RO46525777

TRIBURI CREATIVE SRL acts as the data controller, responsible for processing your personal data in connection with your interactions with our website and brand.

3. INFORMATION WE COLLECT

We collect personal information that you voluntarily provide to us and certain data automatically generated by your use of our site.

a. Information you provide directly

• Contact details: name, email address, phone number, billing and shipping address

• Personal details: date of birth (if provided voluntarily)

• Purchase information: order details, payment confirmation, and transaction data (handled securely through our payment processors)

• Account or newsletter registration: login credentials and preferences if you register or subscribe

• Customer communications: messages or inquiries sent via contact forms or email

b. Information collected automatically

When you visit our website, we may automatically collect:

• Device information (browser type, IP address, operating system)

• Usage data (pages visited, time spent, navigation path)

• Cookies and similar technologies (see our Cookie Policy)

4. HOW WE USE YOUR INFORMATION

We use your data for legitimate business purposes, including to:

• Process and fulfill your orders and payments

• Communicate with you about orders, deliveries, or returns

• Maintain your account and manage your preferences

• Send updates about new collections, events, and special releases (only if you have subscribed)

• Improve our website, services, and customer experience

• Comply with legal obligations and prevent fraud

We will never use your personal data for purposes incompatible with these.

5. LEGAL BASES FOR PROCESSING

We process your personal data on the following legal grounds:

• Contract performance: to process and deliver your purchases;

• Legitimate interest: to improve our services and prevent misuse;

• Consent: for newsletter subscriptions or marketing communications;

• Legal obligation: to comply with accounting, tax, or consumer laws.

6. MARKETING COMMUNICATIONS

If you choose to join our mailing list, we may use your contact information to send you:

• News about Triburi’s collections

• Invitations to events

• Product updates or special releases

You can unsubscribe at any time by clicking the “unsubscribe” link at the bottom of our emails or by contacting us directly at [insert email].

Your personal data will never be sold, rented, or shared with another party for marketing purposes.

7. HOW WE STORE AND PROTECT YOUR DATA

Our website is hosted on Squarespace, which provides a secure environment and uses encryption (SSL) to protect your data.

We also use trusted third-party providers for payment processing and delivery logistics, each of which complies with GDPR standards and handles data securely.

We implement appropriate technical and organizational measures to prevent unauthorized access, disclosure, alteration, or destruction of your personal data.

8. SHARING YOUR INFORMATION

We only share personal data when necessary to operate our services. This may include:

• Squarespace, for website hosting and analytics;

• Payment processors (e.g., Stripe, PayPal) for secure payments;

• Delivery and logistics partners, for order fulfillment;

• IT or marketing service providers, when assisting us under strict confidentiality.

All third parties are required to process your data only for the purpose specified and under appropriate safeguards.

We do not sell or lease your data to anyone.

9. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies to function properly, analyze performance, and personalize your experience.

You can manage or disable cookies through your browser settings at any time.

For detailed information, please refer to our Cookie Policy.

10. DATA RETENTION

We keep your personal data only for as long as necessary to fulfill the purposes described in this Policy:

• Customer and order data: retained for up to 10 years, as required by Romanian accounting and tax regulations;

• Newsletter subscriptions: retained until you withdraw consent or unsubscribe;

• Contact inquiries: deleted once resolved unless further retention is required by law.

When no longer needed, data is securely deleted or anonymized.

11. INTERNATIONAL DATA TRANSFERS

As Squarespace and some of our service providers operate internationally, your data may be transferred and processed outside the European Economic Area (EEA), including in the United States.

In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to guarantee adequate data protection.

12. YOUR RIGHTS

Under the GDPR, you have the following rights:

• Access – request a copy of your personal data;

• Rectification – correct inaccurate or incomplete data;

• Erasure – request deletion of your personal data (“right to be forgotten”);

• Restriction – limit how we process your data;

• Objection – object to certain processing, including direct marketing;

• Data portability – request your data in a structured, machine-readable format;

• Withdraw consent – at any time for activities based on consent (e.g., marketing emails).

To exercise any of these rights, please contact us at contact@triburi.com

We will respond within the time limits required by GDPR.

13. CHILDREN’S PRIVACY

Our website and services are not directed toward children under 16 years of age.

We do not knowingly collect personal data from minors. If we learn that such data has been provided, it will be promptly deleted.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our practices or legal obligations.

We encourage you to review it periodically to stay informed about how we protect your data.

15. CONTACT INFORMATION

For any questions, requests, or concerns regarding this Privacy Policy or your

personal data, please contact us at: contact@triburi.com