Last updated: 30 December 2025
Sunehri By Simran (“Sunehri”, “we”, “us”, “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit or make a purchase on sunehribysimran.com (the “Website”).
We process personal data in accordance with:
- Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
- The Belgian Data Protection Act
- Applicable EU ePrivacy legislation
1. Data Controller
The data controller responsible for your personal data is:
Sunehri By Simran
Veldeke 5, bus 13
1930 Zaventem, Belgium
Company number: 1024146091
Email: sunehribys@gmail.com
2. What Personal Data We Collect
We collect only personal data that is necessary to operate our Website and fulfil orders.
A. Identification & Contact Data
- First name and surname
- Email address
- Telephone number
B. Order, Billing & Delivery Data
- Billing address
- Shipping address
- Order details and communication history
C. Body Measurements
- Measurements voluntarily provided by you for the sole purpose of producing custom-made garments
These measurements are not used for health assessment, profiling, or automated decision-making.
D. Payment Data
- Payments are processed securely by third-party providers (e.g. Wordline, PayPal)
- We do not store full payment card details
E. Technical & Cookie Data
- IP address (temporary server logs)
- Browser and device information
- Cookie preferences and consent status
3. Purposes of Processing & Legal Bases
We process personal data only where a valid legal basis exists under Article 6 GDPR.
| Purpose | Legal Basis |
| Processing and fulfilling orders | Performance of a contract (Art. 6(1)(b)) |
| Producing custom-made garments | Performance of a contract (Art. 6(1)(b)) |
| Customer communication & support | Performance of a contract (Art. 6(1)(b)) |
| Accounting & tax compliance | Legal obligation (Art. 6(1)(c)) |
| Website security & fraud prevention | Legitimate interest (Art. 6(1)(f)) |
| Marketing emails (newsletters, promotions) | Consent (Art. 6(1)(a)) |
| Cookies & analytics | Consent where required (Art. 6(1)(a)) |
4. Is Providing Personal Data Mandatory?
Certain personal data (such as name, address, contact details, and measurements) is required to conclude and perform a sales contract.
If this data is not provided, we may be unable to fulfil your order.
Providing consent for non-essential cookies or marketing communications is optional and does not affect your ability to place an order.
5. Data Sharing & Third-Party Processors
We share personal data only when strictly necessary and only with trusted third parties, including:
- Payment providers (e.g. Wordline, PayPal)
- Shipping and logistics partners (for order delivery)
- Website hosting and infrastructure providers
- Accounting, tax, or legal authorities where required by law
All third parties act as data processors under Article 28 GDPR and are contractually bound to comply with GDPR requirements.
We do not sell or rent personal data.
6. International Data Transfers
As our garments are manufactured and shipped from India, personal data necessary for delivery (such as name, address, and telephone number) may be shared with courier and logistics partners located outside the European Economic Area (EEA).
Where international data transfers occur, we ensure appropriate safeguards in accordance with GDPR Articles 44–49, including contractual protections and data minimisation. Data is shared solely for order fulfilment purposes.
7. Data Retention Periods
We retain personal data only for as long as necessary and in accordance with legal obligations:
- Order and customer data: 5 years (contractual claims and complaints)
- Accounting and invoice data: 7 years (Belgian tax law)
- Body measurements: retained only as long as necessary for order fulfilment and related claims
- Marketing data: until consent is withdrawn
- Technical logs: short-term for security and troubleshooting
- Cookies: according to our Cookie Policy
- IP adress is kept for 3 months
- Browser and device information collected by google are kept according to their privacy policy / terms
After the retention period, data is securely deleted or anonymised.
8. Your Rights Under GDPR
You have the following rights under GDPR:
- Right of access – obtain a copy of your personal data we have on record.
- Right to rectification – correct inaccurate data
- Right to erasure – request deletion where legally permitted
- Right to restriction of processing – in specific circumstances
- Right to data portability – receive your data in a structured, machine-readable format
- Right to object – to processing based on legitimate interests
- Right to withdraw consent – where processing is based on consent
- Right not to be subject to automated decision-making
Sunehri does not use automated decision-making or profiling.
To exercise your rights, mail to: sunehribys@gmail.com . Please note we may require proof of your identity in order to fulfill your request.
9. Complaints
If you believe your personal data is processed unlawfully, you may submit a complaint to us using the following email: sunehribys@gmail.com.
You also have the right to lodge a complaint with the supervisory authority:
Belgian Data Protection Authority
Rue de la Presse / Drukpersstraat 35
1000 Brussels
Website: https://www.dataprotectionauthority.be
10. Cookies & Tracking Technologies
Our Website uses cookies to ensure functionality and improve user experience.
We use:
- Essential cookies (required for Website operation)
- Functional cookies
- Analytics cookies (only with consent)
A detailed and up-to-date list of cookies, their purpose, duration, and providers is available in our Cookie Policy, accessible via the Website footer.
Cookie consent can be managed at any time via the cookie banner or settings.
11. Children’s Data
Our Website is not intended for individuals under the age of 18.
We do not knowingly collect personal data related to minors.
12. Security Measures
We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. However, no system can guarantee absolute security. In case an incident involving personal data occurs, clients affected will be informed.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available on the Website, and the “Last updated” date will reflect any changes.
14. Contact
For any questions regarding this Privacy Policy or your personal data, contact:
sunehribys@gmail.com
Sunehri By Simran, Belgium