Privacy Policy for Moda Autentica

Last updated: July 9, 2025.

Moda Autentica, operated by Moda Elisavi SRL, with its registered office at Str. Viorelelor, No. 1, Bl. 1, Sc. A, Ap. 7, Bacău, 600125, Romania, registered with the Bacău Trade Register Office under no. J2025025004004, CUI: 51587210, EUID: ROONRC.J2025025004004, is an online store hosted by Shopify, offering a curated shopping experience through a dropshipping model. This means that we collaborate with trusted suppliers to deliver orders directly to you, ensuring quality and efficiency. This Privacy Policy explains how we collect, use, process and disclose your personal information when you visit our websites (www.moda-autentica.com and www.moda-autentica.ro), use our services, make purchases or interact with us (collectively referred to as the “Services”).

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. In the event of a conflict between the Terms and Conditions and this Privacy Policy, the latter shall govern the collection, processing and disclosure of your personal information. This policy complies with the General Data Protection Regulation (GDPR - EU Regulation 2016/679), Romanian data protection legislation (e.g. Law no. 190/2018) and the transparency requirements of Google Merchant Center.

1. Personal Information Collected

We collect personal information that identifies you or can be reasonably associated with you, depending on how you interact with our Services and as permitted by applicable law. Personal information does not include anonymized or de-identified data that cannot be linked to you. We may collect the following categories of personal information:

Contact Information: Name, email address, phone number, billing address, shipping address.

Financial Information: Payment details (e.g. credit/debit card numbers, transaction details) processed securely through third-party payment providers (e.g. Netopia, Wise).

Account Information: Username, password, security questions, preferences, and settings.

Transactional Information: Details about items viewed, added to cart, listed in wishlist, purchased, returned or canceled.

Communications: Information provided when you contact us (e.g. through customer support requests or opt-in SMS).

Device and Usage Information: IP address, browser type, operating system, device type, length of visits to pages, clickstreams and interactions with our Services, collected through cookies or similar technologies.

Third Party Data: Information obtained from partners, such as payment processors, couriers or analytics providers (e.g. Google Analytics).

Location Data: Approximate location based on IP address (if enabled), used for delivery estimates or localized marketing (see Section 6).

We do not intentionally collect sensitive personal information (e.g. racial or ethnic origin, political opinions, religious beliefs, health, sexual orientation). If such data is provided voluntarily, we will delete it unless it is necessary for a legitimate purpose.

2. Sources of Personal Information

We collect personal information from:

Directly from You: When you create an account, place an order, contact us, or provide information through forms or communications.

Automatically: Through cookies, web beacons or similar technologies when you use our Services (e.g. IP address, browsing behavior). We use cookies for analytics (e.g. Google Analytics tracks page views), personalization and advertising. You can manage your cookie preferences through our cookie consent banner, where you can accept or decline non-essential cookies. The Moda Autentica website uses cookies to help track the items you add to your shopping cart, including when you abandon your cart. This information is used to determine when to send shopping cart reminders via SMS.

Third parties: From Shopify (our platform provider), payment processors (e.g. Netopia, Wise), couriers or analytics providers (e.g. Google Analytics).

Business Partners: From suppliers or logistics partners in our dropshipping model to fulfill orders or process returns or exchanges.

3. How We Use Your Personal Information

We use your personal information for the following purposes, based on legal grounds such as contract performance, legal obligations, legitimate interests or your consent:

Providing and Improving Services: To process orders, deliver shipments, manage accounts, process payments, facilitate returns/exchanges, send order-related notifications, and personalize your shopping experience (e.g., product recommendations).

Marketing and Advertising: To send promotional emails, text messages, or display targeted advertisements based on your interactions with our Services, with your consent where necessary. For SMS marketing, we collect phone numbers to send promotional offers, order updates, or abandoned cart reminders, with your explicit opt-in consent. You can withdraw your consent via the unsubscribe link in the messages or by contacting us.

Security and Fraud Prevention: To authenticate accounts, secure transactions, detect fraudulent or malicious activity, and protect our Services.

Customer Support: To respond to requests and maintain the relationship with you.

Legal Compliance: To comply with legal obligations (e.g. tax reporting to ANAF), respond to legal requests, or enforce our policies.

4. How We Disclose Your Personal Information

We may share your personal information with:

Shopify: To host and operate our Services, process payments, and provide analytics or personalized features.

Suppliers and Logistics Partners: To fulfill orders and manage returns in our dropshipping model (e.g. sharing delivery details with couriers).

Service Providers: For IT management, payment processing (e.g. Netopia, Wise), analytics (e.g. Google Analytics) or customer support.

Business Partners: For marketing purposes, with your consent, in accordance with their privacy policies. The above excludes opt-in data and consent from the originator of text messages; this information will not be shared with any unaffiliated third parties.

Authorities: To comply with legal obligations (e.g. tax authorities) or protect our rights.

Affiliates: Within our corporate group for business operations.

Other Parties: In the event of mergers, acquisitions or bankruptcy, or with your consent (e.g. through integrations with social networks).

We don't sell your personal information. Shopify may use your data for its own purposes (e.g., analytics or fraud prevention), as described in the Shopify Consumer Privacy Policy. Sharing data for targeted advertising may be considered a "sale" or "sharing" under some U.S. privacy laws; you can opt out by activating the Global Privacy Control (GPC) or by contacting us at contact@moda-autentica.com.

5. International Transfers

Your personal information is primarily stored in the European Economic Area (EEA). However, some data (e.g. through Google Analytics or Shopify) may be transferred outside the EEA to countries such as the USA, with safeguards such as Standard Contractual Clauses to ensure GDPR compliance.

6. Location Tracking and Location-Based Services

We may collect approximate location data based on your IP address to provide delivery estimates or localized marketing offers (e.g., promotions relevant to your region). This data is only collected with your explicit consent through site settings or the cookie banner. We do not use precise location tracking (e.g., GPS) and will delete location data when it is no longer needed for these purposes, except as required by legal compliance.

7. Data Security and Retention

We use industry standard security measures (e.g. SSL encryption, restricted access, secure servers) to protect your data. However, no system is completely secure, and data transmitted over the internet may be at risk. You are responsible for maintaining the confidentiality of your login details.

We keep your data only as long as necessary:

Customer Data: 5 years from the last order (according to Romanian tax legislation).

Financial Data: 10 years (according to the Fiscal Code).

Marketing Data: Until consent is withdrawn.

Technical Data (e.g. cookies): Up to 2 years, according to the Cookie Policy.

The data is deleted after these periods, except where required by law or for legitimate purposes.

8. Your Rights

According to GDPR and applicable laws, you have the following rights:

Access: Request a copy of your personal information. Contact us at contact@moda-autentica.com with your request, and we will respond within one month.

Correction: Request correction of inaccurate data by contacting us with details.

Deletion: Request the deletion of your data, except for legal obligations, by sending a written request.

Portability: Request a transferable copy of your data in a structured, machine-readable format.

Opposition/Restriction: You can oppose or restrict certain processing (e.g. marketing) by notifying us.

Withdrawing Consent: Withdraw consent for processing (e.g. newsletters or SMS) without affecting previous processing via the unsubscribe link or by contacting us.

Opt Out of Targeted Advertising: Opt out through site settings (cookies) or by enabling Global Privacy Control (GPC). We respect GPC signals and treat them as requests to opt out of targeted advertising.

Complaints: File a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) or contact us to challenge decisions.

To exercise these rights, send an email to contact@moda-autentica.com or call +40766254138. We may verify your identity before processing requests.

9. Third Party Sites

Our Services may contain links to third-party sites (e.g. Netopia, Wise, social media platforms). We are not responsible for their privacy practices. Please check their policies before providing information.

10. Children's Data

Our Services are not intended for children under the age of majority in your jurisdiction (19 years in Romania). We do not knowingly collect data from children. If you believe a child has provided us with their data, please contact us to request its deletion.

11. Changes to That Policy

We may update this Privacy Policy to reflect changes in practices or legal requirements. Updates will be posted on our sites with a revised “Last Updated” date. For significant changes, we will notify existing users by email or by prominent notice on our sites, as required by law.

12. Contact

For questions or to exercise your rights, contact us:

Email: contact@moda-autentica.com

Phone: +40766254138

Address: Moda Elisavi SRL, Str. Viorelelor, No. 1, Bl. 1, Sc. A, Ap. 7, Bacau, 600125, Romania

Moda Elisavi SRL is the controller of your personal data according to applicable data protection laws.