NEW PRUNĂ ESSENTIALS - NEW TEXTURES, NEW SILHOUETTES

Free delivery for orders of minimum 300 lei

Privacy policy

Last updated: 28 October 2026

1. Controller. BY PRUNA SRL (pruna.ro), Drumul Fermei 65C, Popești-Leordeni, Ilfov, Romania; Trade Register No.: J2025057675003; Tax ID: RO52258526; email: orders@pruna.ro. Online clothing store (sales exclusively online).

2. Data We Process

  • Account / order data: name, email, phone number, delivery and billing addresses, products, order values, transaction history.
  • Payment: payment information (processed by authorised payment processors; pruna.ro does not store card data).
  • Delivery: data required for handover to the courier.
  • Support: information provided in conversations or attachments.
  • Marketing (optional): consent for newsletter and commercial communications.
  • Technical: IP address, device/browser, security and fraud logs, cookies and similar identifiers, including mobile advertising identifiers (non-essential cookies only with consent – see section 4.1).

3. Purposes & Legal Bases. Performance of contract (orders, delivery, returns); legal obligations (accounting and tax requirements); legitimate interest (anti-fraud security, service improvement); consent (marketing, non-essential cookies, and personalised and non-personalised advertising – ads personalization – as described in section 4.1). We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

4. Recipients. Strictly necessary processors and partners: e-commerce platform, payment processors, couriers, email/SMS providers, anti-fraud and analytics services, and the advertising and analytics partners described in section 4.1. Processors act solely in accordance with our instructions. We may also disclose data to public authorities (e.g. tax authorities, courts) where required by law.

4.1 Cookies, advertising and partners. With your consent, pruna.ro uses cookies and similar identifiers, including mobile advertising identifiers where applicable, for personalised and non-personalised advertising (ads personalization), advertising measurement and analytics. This may include your IP address, the pages and products you view, items added to your cart, orders placed and your interactions with our advertising. For these purposes, data may be shared with:

  • Google Ireland Limited, through Google services including Google Ads, Google Analytics and Merchant Center integrations. For information about how Google uses data from sites and apps that use its services, see business.safety.google/privacy.
  • Meta Platforms Ireland Limited, through Facebook and Instagram advertising services and Meta Pixel. Privacy information: facebook.com/privacy/policy.

The legal basis for this processing is your consent (Article 6(1)(a) GDPR). The storage of information on, or access to information stored on, your device is also subject to Article 4(5) of Romanian Law no. 506/2004. Cookies strictly necessary to provide services you expressly request (shopping cart, checkout, security) may be used without consent, as permitted by law. You may change or withdraw your consent at any time, with effect for the future, through Cookie settings in the footer of our website; withdrawal does not affect the lawfulness of processing carried out before it (Article 7(3) GDPR).

5. Transfers Outside the EEA. Where we use providers based outside the EEA, we apply appropriate legal safeguards (e.g. European Commission adequacy decisions or standard contractual clauses) and adequate technical and organisational measures.

6. Retention Periods

  • Accounting documents / orders: as required by law (up to 10 years, depending on document type).
  • Customer account: until deletion or 3 years from last activity.
  • Support: 3 years from closure of the request.
  • Marketing: until withdrawal of consent / opt-out.
  • Cookies: as per the settings in the consent banner.

7. Your Rights. Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time (without affecting processing carried out before withdrawal); cookie and advertising consent can be changed at any time via Cookie settings in the website footer. To exercise your rights, contact us at orders@pruna.ro. We will respond within 30 days (extendable by up to two further months for complex requests, in which case we will inform you). You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania, www.dataprotection.ro.

8. Security. We apply proportionate technical and organisational measures to protect your data. No measure is entirely infallible; please avoid sending sensitive information over unsecured channels.

9. Minors. Our services are not directed at persons under 16. We do not knowingly collect data from children under 16. If you are a parent or guardian and believe we have collected such data, please contact us for deletion.

10. Updates. We may update this policy to reflect operational or legal changes. The current version and the date of the last update are displayed at the top of this page.