1. Scope & Controller
Brand Casablanca (“we,” “us,” or “our”) operates the website brandcasablanca.org (the “Site”). This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit our Site, make a purchase, communicate with us, or otherwise interact with our services.
Data Controller: Brand Casablanca, 245 W 17th St, New York, NY 10011, USA. Email: [email protected]
This policy is intended to meet requirements of the GDPR/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.
2. Data We Collect
Information you provide
- Identity and contact details (name, email, phone, billing and shipping addresses).
- Account credentials and profile preferences (if you create an account).
- Order information (products, sizes, gift messages) and customer support communications.
- Payment information processed via secure payment providers. We do not store full card numbers.
Information collected automatically
- Device and usage data (IP address, browser, device type, OS, referring URLs, pages viewed, time on page).
- Approximate location derived from IP address.
- Cookies, pixels, and similar identifiers (see Cookies section).
Information from third parties
- Payment processors and banks (payment confirmations, fraud signals).
- Fulfillment and shipping partners (tracking updates, delivery status).
- Advertising and analytics partners (aggregated insights, campaign performance).
3. How We Use Data & Legal Bases
- To provide and fulfill services, including processing orders, payments, returns, and customer care. Legal basis: Performance of a contract.
- To personalize your experience and improve our Site and products. Legal basis: Legitimate interests or consent (where required).
- To send transactional messages (order and shipping updates). Legal basis: Performance of a contract.
- To send marketing communications and show tailored ads, with your consent where required. Legal basis: Consent or legitimate interests.
- To prevent fraud, secure our services, and comply with legal obligations. Legal basis: Legitimate interests; Legal obligation.
6. Retention
We keep personal information only as long as necessary for the purposes described in this Policy, including to comply with legal, tax, accounting, and reporting obligations. Retention periods vary by data category and purpose.
7. International Transfers
If you are located outside the United States, your information may be transferred to and processed in countries that may not provide the same level of protection. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
8. Your Rights
EEA/UK residents
You may have the right to request access, rectification, erasure, restriction, portability, and to object to processing, as well as to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.
US state residents (e.g., CA/CPRA, CO, CT, VA, UT)
- Right to know/access and obtain a portable copy of personal information.
- Right to delete personal information.
- Right to correct inaccuracies.
- Right to opt out of “sale”/“sharing” and targeted advertising.
- Right to limit the use of sensitive personal information (where applicable).
- Right to non-discrimination for exercising your rights.
To exercise rights or appeal a decision, contact us at [email protected]. We may need to verify your request and identity. Authorized agents may submit requests with proof of authorization.
9. Advertising & Analytics
We may work with analytics providers and ad partners to understand performance and deliver relevant content. These partners may set or read cookies and similar technologies. You can control non-essential cookies in the Preferences panel and via industry tools such as NAI and DAA (US) or EDAA (EU).
10. Security
We implement technical and organizational measures designed to protect personal information (encryption in transit, access controls, and staff training). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
11. Children’s Privacy
Our services are not directed to children. We do not knowingly collect personal information from individuals under 13 (or under 16 in the EEA/UK). If you believe a child provided information, contact us and we will take appropriate steps to delete it.
12. Do Not Track
Your browser may send a “Do Not Track” signal. Because there is no industry-standard response, we do not currently respond to DNT signals. We honor applicable opt-out mechanisms described in this Policy.
13. Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a new “Last updated” date. Material changes may be communicated by additional notice.
14. Contact Us
If you have questions about this Policy or our privacy practices, contact us:
Brand Casablanca245 W 17th St, New York, NY 10011, USA
Email: [email protected]