Last updated: 27 October 2026
1. Who we are
DUNBOSS is an online clothing store operated by CORBAN PETRU PFA, with its business address at Intrarea Baladei 3, 077090 Domnești, Ilfov, Romania.
CORBAN PETRU PFA is the controller responsible for the personal data processed for the purposes described in this policy.
For questions about this policy or to exercise your data protection rights, contact:
Email: contact@dunboss.com
Telephone: +40 753 065 853
Postal address: Intrarea Baladei 3, 077090 Domnești, Ilfov, Romania.
This policy explains how we process personal data when you visit our website, place an order, request product personalisation or contact us.
2. Personal data we process
Depending on how you interact with us, we process:
- Contact and delivery information: your name, email address, telephone number, billing address and delivery address.
- Order information: products, sizes, colours, quantities, personalisation instructions, order numbers, payment status, delivery information and information concerning cancellations, returns or refunds.
- Personalisation content: photographs or other images you upload and the placement instructions associated with your design. Images may contain personal data about you or other people.
- Customer-service information: messages, correspondence and photographs provided in connection with enquiries or product complaints.
- Technical information: information made available when your browser connects to our website and its service providers, such as your IP address, browser and device information, requested pages and connection or error information.
Payment details are processed through Shopify checkout and the payment provider you select. We receive information needed to administer your order and payment, but do not receive your full payment-card number or card security code through our storefront.
We receive information directly from you and, where relevant, from Shopify, payment providers, production partners and delivery providers in connection with your purchase.
3. Why we use your data and our legal bases
We process personal data for the following purposes:
Purchases and delivery — performance of a contract, or steps at your request before entering into a contract. We use the information needed to manage your cart, process orders, arrange production and delivery, and handle order-related enquiries, cancellations and returns.
Product personalisation — performance of a contract, or steps at your request before entering into a contract. Where you choose personalisation, we process your uploaded image and design instructions to prepare and fulfil the personalised order.
Legal and accounting requirements — compliance with legal obligations. We process information required for accounting, taxation and applicable consumer-protection obligations.
Security and dispute handling — legitimate interests. We process necessary information to protect the website, prevent misuse, investigate technical problems and establish, exercise or defend legal claims. These interests are considered against your rights and freedoms.
Optional activities requiring consent. Where consent is required for a particular activity, including non-essential cookies or direct marketing where applicable, that activity must be subject to the relevant consent requirements. You may withdraw consent without affecting the lawfulness of processing carried out before withdrawal.
Information necessary to process and deliver an order must be provided if you wish to purchase. Without it, we may be unable to complete your order. Uploading a photograph is optional for a standard product, but necessary if you request personalisation using that photograph.
4. Uploaded photographs and personalisation
Uploaded images are used to prepare and fulfil your requested personalisation and, where necessary, resolve related quality issues or disputes. Uploading an image does not itself give us permission to use it in advertising.
Please upload only content you are entitled to use. If an image identifies another person, ensure you have an appropriate basis to provide it for this purpose. Please avoid uploading unnecessary sensitive information.
Images are stored using the website’s cloud-storage service. A reference to the uploaded file and the relevant design instructions may be attached to the Shopify cart and order. Where needed to fulfil the personalised order, the relevant image and instructions are made available to the production provider.
Removing an item from your cart does not automatically delete its uploaded image. If you abandon a personalised purchase or wish to request deletion of an uploaded image, contact contact@dunboss.com. Deletion requests are subject to any applicable legal obligations and any necessary retention for an ongoing order or legal claim.
5. Service providers and other recipients
We share personal data only as relevant to the purposes described in this policy, including with:
- Lovable and its infrastructure providers, for website hosting, cloud storage and technical operation.
- Shopify, for product catalogue services, shopping carts, checkout, payments where applicable and order management.
- Payment providers, to process payments and associated refunds.
- Printify and the relevant production partners, to produce and fulfil orders. Information may include the recipient’s name, delivery address, contact details, ordered products and any required personalisation content.
- Delivery providers, to transport orders and provide delivery updates.
- Professional advisers or competent authorities, where necessary for accounting, legal obligations or legal claims.
Our website also uses externally hosted resources, including Shopify product images and Google Fonts. Loading these resources involves your browser connecting to the relevant provider, which receives connection information such as your IP address.
Providers may act on our instructions for some activities and have their own responsibilities for other processing, as explained in their applicable privacy notices.
6. Cookies and browser storage
Our storefront uses browser storage to retain shopping-cart information, including selected products and, where applicable, a design preview. This allows your cart to remain available between visits on the same browser.
Shopify checkout and payment services may use cookies or similar technologies for checkout functionality, security and payment processing. Any non-essential tracking used in connection with the store is subject to applicable consent requirements.
You can manage cookies and website storage through your browser settings and any privacy controls made available by the relevant service. Clearing or blocking necessary storage may remove your saved cart or affect checkout functionality.
7. International processing and transfers
Although we sell to selected European countries, our technology and service providers may process personal data in other countries. Shipping destinations do not determine where all personal data is processed.
Where personal data is transferred outside the European Economic Area, applicable data-protection law requires an appropriate transfer mechanism, such as a European Commission adequacy decision or Standard Contractual Clauses, together with additional safeguards where required.
You may contact us for information about the safeguards applicable to the processing of your data and to request a copy where available, subject to necessary redactions.
8. How long information is retained
Retention depends on the type of information and the purpose for which it is processed:
- Order, invoice and accounting information: for the periods required by applicable Romanian accounting, tax and other legal obligations.
- Order-related correspondence and complaint information: as necessary to handle the matter and any applicable legal claims or obligations.
- Uploaded images and design instructions: retention is assessed by reference to whether they are needed for a requested personalisation, order fulfilment, related quality issues or legal claims. There is currently no automatic deletion triggered by removing a cart item.
- Technical and security information: according to the operational and security needs of the relevant service and its applicable retention arrangements.
- Browser-stored cart information: may remain in your browser until it is replaced or cleared, including through your browser settings.
Personal data must not be retained longer than necessary for its applicable purpose. You may contact us to ask about the retention of particular information or request its deletion, subject to applicable legal exceptions.
9. Your rights
Subject to the conditions and exceptions under applicable law, you have the right to:
- Access your personal data and obtain a copy.
- Have inaccurate or incomplete data corrected.
- Request deletion of your data.
- Request restriction of processing.
- Receive eligible data in a portable format.
- Object to processing based on legitimate interests.
- Object at any time to processing for direct marketing.
- Withdraw consent where processing is based on consent.
To exercise your rights, email contact@dunboss.com. We may request proportionate information to verify your identity. We normally respond within one month. Where the law permits an extension because of the complexity or number of requests, we will explain this within that initial period.
You also have the right to lodge a complaint with a data-protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement.
In Romania, the authority is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal — ANSPDCP. Information about submitting a complaint is available at https://www.dataprotection.ro/.
10. Security
We use technical and organisational measures intended to protect personal data, including access controls appropriate to the services used. No website, storage system or transmission method can guarantee absolute security.
11. Changes to this policy
We may update this policy to reflect changes to our services, processing activities or legal obligations. The latest version will be published on this page with its updated date. Where required, we will provide additional notice of material changes.
12. Contact
For privacy questions or requests, contact contact@dunboss.com, or write to CORBAN PETRU PFA, Intrarea Baladei 3, 077090 Domnești, Ilfov, Romania.