Privacy policy This Privacy Policy describes how Bramdz Originals ("the Site" or "we") collects, uses and discloses your personal information when you visit or make a purchase on the Site. Collection of personal data When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as "Personal Information". For more information about what personal data we collect and why, see the list below. Device information:

• Examples of personal information collected: web browser version, IP address, time zone, cookie information, which websites or products you view, search terms and how you interact with the website.

• Purpose of collection: to accurately load the website and to analyze website usage to optimize our website.

• Source of Collection: Information is collected automatically when you access our website through cookies, log files, web beacons, tags or pixels.

• Disclosure for Business Purposes: Shared with our processor Webador Order information

• Examples of personal information collected: name, billing address, shipping address, payment information (including credit card numbers), email address and telephone number.

• Purpose of Collection: To provide you with products or services to fulfill our contract, process your payment information, arrange for shipping and provide you with invoices and/or order confirmations, communicate with you, review our orders for potential risk or fraud, and, when act in accordance with the preferences you have shared with us, provide you with information or advertising messages related to our products or services.

• Collection Source: Collected from you.

• Disclosure for Business Purposes: Shared with our processor Webador, payment gateway provider Stripe and postal service provider General Logistics Systems.

Information to provide customer support

• Examples of personal information collected: name, billing address, shipping address, payment information (including credit card numbers), email address and telephone number.

• Purpose of collection: To provide customer support.

• Collection Source: Collected from you.

• Disclosure for business purposes: We only collect your personal information to provide customer support. "Text Marketing and Notifications: By entering your phone number and email at checkout and initiating a purchase or ordering through our subscription form or keyword, you agree that we may send you text notifications (for your order, including abandoned cart reminders) and text marketing offers. Text marketing messages will not exceed 20 messages per month. You acknowledge that consent is not a condition of any purchase. To unsubscribe from receiving text marketing messages and notifications, reply STOP to any mobile message you receive from us or use the unsubscribe link provided to you in any of our communications (in the case of an email ). You understand and agree that alternative means of opting out, such as using alternative words or requests, will not be a reasonable means of opting out. In the event of interruption, prices may be charged for the sent SMS according to the Slovenian price list for SMS messaging depending on your operator. For any questions, text HELP to the number you received the messages from. For more information, you can also contact us by email. To unsubscribe, follow the procedures above. MINORS The Website is not intended for individuals under the age of 18. We do not intentionally collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at the address below and request deletion.

Exchange of personal data We share your personal information with service providers who help us provide our services and fulfill our contracts as described above. For example:

• We use Webador to enable the operation of our online store. You can read more about how Webador uses your personal data here: https://help.webador.com/en/support/solutions/articles/13000048872-protecting-personal-data-while-using-webador

• We may share your personal information in accordance with applicable laws and regulations to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights. • We use Stripe as a payment gateway provider. You can read more about how Stripe uses your personal data here: https://stripe.com/en-gb-si/privacy.

• We also share your personal information with our postal service provider, Global Logistics Systems, to ship your order to your delivery address. You can read more about how Global Logistics Systems uses your personal data here: https://gls-group.eu/GROUP/en/privacy-policy-group. Use of personal data We use your personal information to provide our services, which include: offering products at a discounted price, processing payments, shipping and fulfilling your order, and informing you about new products, services and offers. LEGAL BASIS In accordance with the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA"), we process your personal data on the following legal bases:

• Your consent; • Performance of the contract between you and the website;

• Compliance with our legal obligations;

• To protect your vital interests;

• Because of our legitimate interests that do not override your fundamental rights and freedoms.

STORAGE When you place an order through the Website, we will keep your personal information for our records unless and until you request that we delete that information. For more information about your right to erasure, see the "Your Rights" section below.

AUTOMATIC DECISION If you are an EEA resident, you have the right to object to processing based solely on automated decision-making (which includes profiling) where that decision-making has a legal effect on you or otherwise significantly affects you. We do not use fully automated decision-making that has legal or otherwise significant effects when using customer data. To prevent fraud, our Webador processor uses limited automated decision-making that has no legal or otherwise significant effect on you. Services that include elements of automated decision-making include:

• A temporary list of IP addresses associated with repeated failed transactions. This ban list is valid for a few hours.

• Temporary ban list of credit cards associated with suspended IP addresses. This ban list is valid for a few days. Your rights GDPR If you are an EEA resident, you have the right to access the personal data we hold about you, transfer it to a new service and request that your personal data be corrected, updated or deleted. If you wish to exercise these rights, please contact us using the contact details below. Your personal data will first be processed in Ireland and then transferred outside of Europe for storage and further processing, including to Canada and the USA.

For more information on how data transfers comply with GDPR, see Shopify's GDPR white paper: https://help.webador.com/en/support/solutions/articles/13000050100-does-webador-support -hsts-or-ipv6-

Cookies A cookie is a small amount of information that is downloaded to your computer or device when you visit our website. We use a number of different cookies, including functional, advertising, performance and social media or content cookies.

Cookies improve your browsing experience by allowing the website to remember your actions and preferences (such as login and region selection). This means you don't have to re-enter this information every time you return to the site or browse from one page to another.

Cookies also provide information about how people use the website, such as whether it is their first visit or a frequent visitor. We use the following cookies to optimize your experience on our website and to provide our services.

NO TRACKING

Please note that because there is no consistent industry understanding of how to respond to Do Not Track signals, we do not change our data collection and use practices when we detect such a signal from your browser.

Changes We may update this Privacy Policy from time to time to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.