Privacy policy
Privacy Policy (GDPR) – TopBlend
Last updated: September 30, 2025
1. Data controller
BILOUD SRL (TopBlend) is the controller of your personal data for the activities described herein. Contact: Intrarea Nicolae Iorga nr. 39J, Chiajna, Ilfov, România, +40 374 499 000.
2. Data we collect
• Identification and contact data: name, e‑mail, phone, shipping/billing address, VAT number (for B2B clients).
• Order and payment data: purchased items, amount, payment method (no full card details – processed by the payment processor).
• Account data: order history, saved addresses, preferences.
• Communications: messages, reviews, support tickets.
• Technical data: IP address, cookie identifiers, device/browser, visited pages (via cookies and similar tech).
3. Purposes and legal bases
• Sale and delivery of products, order management – performance of contract.
• Payments and invoicing – performance of contract and legal obligation.
• Customer account, loyalty/subscriptions – performance of contract.
• Customer support and warranties – performance of contract and legitimate interest.
• Direct marketing (newsletter) – consent or legitimate interest, as applicable; you may unsubscribe at any time.
• Security, fraud/abuse prevention – legitimate interest.
• Legal compliance (accounting, archiving) – legal obligation.
4. Disclosures/recipients
• IT/hosting providers (including e‑commerce platform) – processors.
• Payment processors – processors (we do not receive/store full card details).
• Carriers/postal services – for delivery (independent recipients).
• Accounting, audit, legal – recipients/processors as applicable.
• Public authorities – where required by law.
5. Transfers outside the EEA
If we transfer data outside the EEA (e.g., providers operating in the USA), we will implement appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, as required.
6. Retention periods
• Order/invoicing data: per financial/accounting law (typically 5–10 years, depending on the document).
• Account data: until account deletion or after a reasonable inactivity period.
• Marketing: until consent withdrawal/objection.
• Security/fraud logs: short periods necessary for the purpose.
7. Your GDPR rights
Access; rectification; erasure; restriction; portability; objection; withdrawal of consent (where applicable). Exercise them at the e‑mail above. You may also lodge a complaint with the Romanian DPA (ANSPDCP – www.dataprotection.ro).
8. Children
We do not knowingly sell to persons under 16. If you believe we collected a minor’s data, contact us for deletion/remedy.
9. Cookies
We use cookies for site operation, analytics and marketing. See our Cookie Policy for details and manage preferences through the consent banner or your browser settings.
10. Data security
We implement appropriate technical and organisational measures (encryption in transit, access controls, internal policies). No method is 100% secure.
11. Automated decisions and profiling
We do not take decisions with legal effects based solely on automated processing. Aggregated analyses may be used to improve experience and prevent fraud.
12. Updates
We may update this policy periodically. We will publish the current version on the site and indicate the last update date.
BILOUD SRL (TopBlend)
Trade Registry (ONRC): J2015002244239 | VAT ID: RO34723223
Address: Intrarea Nicolae Iorga nr. 39J, Chiajna, Ilfov, România
Website: www.topblend.ro | Phone: +40 374 499 000