Contact & scope
This policy explains how The Dem Clothes handles personal information for thedem.me and orders discussed by email or Instagram. For privacy questions or requests, contact thedemclothes@gmail.com. The seller’s full legal identity and address are supplied with the written order information before an order is accepted.
Information you provide
We use the contact details you give us, such as your name, email, telephone number and Instagram username; delivery and billing information; garment measurements, design references, photographs and messages; and order, payment and delivery records. Please send only what is relevant to your enquiry. Do not send card details, passwords, identity documents or unnecessary sensitive information.
Why we use it
We use enquiry and order information to discuss your requirements, quote, agree and perform your order, obtain approvals, arrange delivery and handle returns or complaints. The legal basis is taking steps at your request before a contract and performing that contract. We retain legally required records to meet legal obligations. Necessary records may also be kept for our legitimate interests in documenting agreements, preventing fraud and establishing or defending claims, subject to your rights.
Portfolio & optional permission
We can show a piece or its making process without identifying its customer. We seek separate consent before using your face, name, private messages, personal story or identifying design details in promotion. You may refuse without affecting your order and withdraw consent by email. Withdrawal stops future use based on that consent; it does not make earlier lawful use unlawful. Gift secrecy and any agreed release date will be respected. We do not enrol you in a newsletter.
Where information is handled
Our working records are kept in email, on our phone, in Instagram conversations and in a folder for the relevant work. Email and Instagram providers process information under their own terms and privacy notices. Order data is shared with the selected payment service and delivery provider only as needed for the transaction; the exact payment method is confirmed before payment. We do not receive your payment-service password or full card credentials. Records may also be disclosed where legally required or necessary for professional advice or a legal claim.
Providers & international processing
Website hosting, email, social-media, payment and delivery providers may process information in other countries. Their own privacy notices describe their processing. Where we make a transfer requiring safeguards under data-protection law, the applicable transfer requirements must be met, such as an adequacy decision or appropriate contractual safeguards. Contact us for information about the providers and safeguards relevant to your order.
Website form & cookies
The custom brief builder prepares text in your browser. It does not submit that text to us when you generate the brief. You choose whether to send it through your email app or an Instagram message. Copying a brief places it on your device clipboard. The website’s own code does not set advertising or analytics cookies, run marketing pixels or store your brief in browser local storage. Hosting infrastructure may process technical information such as IP addresses and access/security logs to deliver and protect the website. External links open services with their own privacy and cookie practices.
How long information is kept
Enquiries are kept while needed to answer and manage the request. Order and payment records are kept for applicable accounting, tax and other legal retention periods, and relevant records for the period needed to handle disputes or legal claims. Optional promotional material is kept only while the relevant permission and purpose remain valid. Information that is no longer needed is deleted or anonymised, subject to necessary legal records and backup retention. Contact us about the retention period applicable to a specific record.
Your rights
Depending on the applicable conditions, you may request access, correction, erasure, restriction or portability of your data and object to processing based on legitimate interests. You can withdraw consent at any time. We may need proportionate information to verify a request, and generally respond within one month, subject to lawful extensions. Some information cannot be erased immediately where retention is legally required. There is no automated decision-making or profiling used to decide whether to accept your order.
Complaints & updates
You can contact us first or complain directly to the Romanian supervisory authority, ANSPDCP, or your competent local data-protection authority. This policy may be updated when our actual practices change. Changes will be dated on this page.