Privacy Policy
At BMR Active, we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, and safeguard your data when you visit our website or make a purchase from our online store. By accessing our website or using our services, you agree to the terms of this policy.
1. Who We Are
BMR Active is a wellness brand designed to support busy working women and mums. We are based in Ireland (the European Union (EU)), and we are committed to complying with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
2. Information We Collect
We collect personal data to improve your experience with our products and services. The types of personal information we collect may include:
Personal Identification Information: Name, email address, phone number, and billing information (such as your billing address).
Transactional Data: Information about the products you purchase, including order history.
Website Usage Data: We collect non-personally identifiable information about how you interact with our website, such as IP addresses, browser type, and device information, to improve our website’s functionality.
Cookies: Our website uses cookies to enhance your browsing experience. You can manage cookie settings in your browser.
3. How We Use Your Information
We use your personal data for the following purposes:
To process and fulfill orders.
To communicate with you about your order, including shipping updates, order status, and customer service inquiries.
To provide you with personalized recommendations and content, such as promotions or wellness tips.
To improve our website, products, and services based on user behavior and feedback.
To send marketing communications (if you have consented to receive them).
To comply with legal obligations or resolve any disputes.
4. Legal Basis for Processing Your Data (GDPR Compliance)
Under the General Data Protection Regulation (GDPR), we are required to have a legal basis for processing your personal data. The legal bases we rely on include:
Consent: When you subscribe to our newsletter or agree to receive marketing emails.
Contractual Necessity: To process orders and deliver products or services to you.
Legitimate Interests: To improve our website, conduct marketing, and improve our offerings, provided that these interests do not override your privacy rights.
Legal Obligation: To comply with applicable laws and regulations.
5. Sharing Your Information
We do not sell or rent your personal information to third parties. However, we may share your data with trusted service providers who assist us in operating our business, such as:
Payment processors to complete transactions.
Shipping and delivery companies to fulfill orders.
Marketing and advertising partners (only with your consent).
These third parties are obligated to protect your information and use it solely for the purpose of providing their services to us.
6. Your Rights
As an EU resident, you have the following rights under the GDPR:
Access: You can request a copy of the personal data we hold about you.
Rectification: You can ask us to correct any inaccurate or incomplete information.
Erasure: You can request that we delete your personal data under certain circumstances.
Restriction of Processing: You can request that we limit how we use your personal data.
Data Portability: You can request a copy of your personal data in a structured, machine-readable format.
Objection: You can object to the processing of your personal data for certain purposes, including marketing.
If you wish to exercise any of these rights, please contact us at bmractive@gmail.com.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. After this period, your data will be securely deleted or anonymized.
8. Data Security
We take reasonable steps to protect your personal data from unauthorised access, use, or disclosure. We use industry-standard security measures, including encryption and secure payment processing. However, no method of data transmission over the internet or electronic storage is entirely secure, and we cannot guarantee its absolute security.
9. International Transfers
As we are based in the EU, your personal data may be transferred to and processed in countries outside the EU. In such cases, we ensure that adequate safeguards are in place to protect your data, such as using EU-approved standard contractual clauses.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will update the "Effective Date" at the top of the policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us.