Home - Legal - Privacy Policy

Privacy Policy

Effective Date: April 9, 2025

1. Introduction

Welcome to The New Beige! This Privacy Policy explains how Not Different S.L. ("we", "us", "our") collects, uses, shares, and protects your personal information when you visit or make a purchase from https://www.thenewbeige.com (the "Site").

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD).

Data Controller:
Not Different S.L.
CIF: B75313148
C/Cojinete 3 y 4, 41020, Sevilla, España
Email for Privacy Inquiries: legal@thenewbeige.com

2. What Personal Data We Collect

We collect personal information that you provide to us directly, information collected automatically, and information from third parties (if applicable, e.g., social logins). The types of personal data we collect include:

Account Registration Information:
- Email address
- Password (stored securely, typically hashed)
Order & Shipping Information:
- Full Name (First and Last)
- Shipping Address
- Billing Address (if different)
- City
- Phone Number
Automatically Collected Information:
- Device Information (e.g., IP address, browser type, operating system, device identifiers)
- Usage Data (e.g., pages visited, time spent on site, interactions, referring URLs)
- Cookie Data (See Section 8: Cookies)
Purchase Information:
- Details of products purchased
- Order history
- Payment information (Note: Typically processed directly by secure third-party payment processors; we usually only store transaction identifiers or partial card details for reference, not full card numbers).
Communication Information: Information you provide when you contact customer service.

3. How We Collect Your Data

Directly from You: When you register for an account, place an order, fill out forms, subscribe to newsletters (if offered), or contact us.
Automatically: Through cookies and similar tracking technologies when you browse our Site. Server logs may also record information like your IP address.

4. Legal Basis and Purposes for Using Your Data

We process your personal data based on the following legal grounds and for the specified purposes:

To Fulfill a Contract (Article 6(1)(b) GDPR):
- To create and manage your user account.
- To process and fulfill your orders, including payment processing (via third-party providers) and shipping.
- To communicate with you about your account or orders (e.g., order confirmations, shipping updates).
- To handle returns or exchanges.
Based on Your Consent (Article 6(1)(a) GDPR):
- To send you marketing communications or newsletters, only if you have explicitly opted-in. You can withdraw consent at any time.
- To place non-essential cookies (e.g., for analytics or marketing).
For Our Legitimate Interests (Article 6(1)(f) GDPR):
- To operate, maintain, and improve our Site and services.
- To ensure the security of our Site and prevent fraud.
- To provide customer support.
- To analyze website usage (often using aggregated or anonymized data, or based on consent for specific cookies).
To Comply with Legal Obligations (Article 6(1)(c) GDPR):
- To maintain records for tax and accounting purposes (e.g., invoices).
- To comply with requests from law enforcement or regulatory authorities.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with trusted third parties only in the following circumstances and for the purposes described above:

Service Providers: Companies that perform services on our behalf, such as:
- Payment Processors: To securely process your payments (e.g., Stripe, PayPal).
- Shipping Carriers: To deliver your orders (e.g., Correos, DHL, UPS).
- IT & Hosting Providers: To host our website and manage our infrastructure.
- Email Marketing Services: If you consent to newsletters (e.g., Mailchimp).
- Analytics Providers: To help us understand website usage (e.g., Google Analytics).
Legal Requirements: If required by law, regulation, legal process, or governmental request.
Business Transfers: In connection with a merger, acquisition, or sale of company assets, your information may be transferred.

International Data Transfers:
Some of these third parties may be located outside the European Economic Area (EEA). If we transfer your data outside the EEA, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or reliance on an Adequacy Decision.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Account Information: Retained while your account is active and for a reasonable period afterward as required by law or for legitimate business purposes.
Order Information: Retained for the period required by Spanish tax and commercial law (typically at least 6 years).
Consent-Based Data (e.g., Marketing): Retained until you withdraw your consent.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include secure servers, encryption where appropriate, access controls. However, please note that no method of transmission over the Internet or electronic storage is 100% secure.

8. Your Data Protection Rights (GDPR)

You have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data under certain conditions.
Right to Restrict Processing: Request restriction of how we process your data under certain conditions.
Right to Data Portability: Request transfer of your data to you or another controller in a structured, commonly used, machine-readable format (where processing is based on consent or contract and automated).
Right to Object: Object to the processing of your data based on our legitimate interests, or for direct marketing purposes.
Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent (this does not affect the lawfulness of processing before withdrawal).
Rights Related to Automated Decision-Making: You have rights regarding decisions based solely on automated processing, including profiling (if applicable).

To exercise any of these rights, please contact us at legal@thenewbeige.com . We may need to verify your identity before processing your request.

You also have the Right to Lodge a Complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. The Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) is the relevant authority in Spain (https://www.aepd.es/).

9. Cookies and Similar Technologies

Our Site uses cookies and similar technologies to enhance user experience, analyze site traffic, and for other purposes. Some cookies are essential for the Site to function. For detailed information about the cookies we use, their purpose, and how you can manage your preferences, please see our separate https://www.thenewbeige.com/cookiepolicy .

10. Children's Privacy

Our Site is not intended for individuals under the age of 14 (or the relevant age of digital consent in Spain). We do not knowingly collect personal data from children under this age. If we become aware that we have inadvertently collected such data, we will take steps to delete it.

11. Login with Facebook

As a convenience, you may choose to log in to our Site using your Facebook account ("Facebook Login"). When you choose to use Facebook Login, you will be prompted to grant permission for The New Beige (operated by Not Different S.L.) to access certain information from your Facebook profile.

By using Facebook Login, you understand that Facebook Ireland Ltd. (Meta Platforms Ireland Limited) will share certain personal data with us, based on the permissions you grant during the Facebook authorization process. Facebook acts as an independent data controller for the data processing it performs.

The information we typically request and may receive from Facebook includes:

Your Facebook User ID (a unique identifier)
Your Name (as it appears on your public Facebook profile)
Your Email Address (associated with your Facebook account, *if you grant permission*)
Your Profile Picture URL (publicly available picture)

Purpose and Legal Basis: We use this information solely for the purpose of authenticating your identity, creating or linking your user account on The New Beige, and potentially pre-filling some profile information for your convenience. The legal basis for processing this data obtained via Facebook Login is your explicit Consent (Article 6(1)(a) GDPR), which you provide during the Facebook authorization step.

Facebook's Data Policy: Your use of Facebook Login is also subject to Facebook's own Data Policy and Terms of Service. We encourage you to review Facebook's Data Policy to understand how they collect, use, and share your information: https://www.facebook.com/policy.php

Managing Permissions: You can manage the information The New Beige receives from Facebook or revoke permission at any time through your Facebook account settings under "Apps and Websites".

The storage, security, and your rights regarding the data received from Facebook once it is held by us are governed by the other relevant sections of this Privacy Policy.

12. Account and Data Deletion

In accordance with your Right to Erasure, you have the option to delete your account and associated personal profile data directly through our website. This process allows you to manage your data deletion request efficiently.

Instructions for Account Deletion:

Log in to your account on https://www.thenewbeige.com/account.php.
Within your account settings, click on the section labelled "Details".
Scroll down or locate the option explicitly labelled "Delete my account" (or similar phrasing).
Follow the on-screen prompts to confirm the deletion of your account.

Consequences of Deletion: Please be aware that deleting your account is irreversible. This action will permanently remove your account profile information, login credentials, and other data directly associated with your account profile from our active systems. However, please note that certain information, such as order history or transaction records, may be retained for longer periods where required by law (e.g., for tax and accounting purposes), as detailed in Section 6 (Data Retention) of this policy.

Alternative Method: If you encounter issues deleting your account through the self-service option or cannot access your account, you can also exercise your Right to Erasure by contacting us directly via email at legal@thenewbeige.com, as stated in Section 8.

Providing these clear instructions helps fulfil requirements for platforms like Facebook Login, ensuring users have a straightforward path to request data deletion.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on our Site and updating the "Effective Date" at the top. We encourage you to review this policy periodically.