Privacy Policy

1. Introduction

BROOV (“we,” “us,” or “our”) operates the website www.thebroov.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site or make a purchase. By using our Site, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Contact & shipping information: name, email address, phone number (optional), and shipping address when you place an order.
• Payment information: credit/debit card details are collected and processed exclusively by our payment processor, Stripe. We do not store your full card number on our servers.
• Newsletter subscription: email address when you subscribe to our mailing list.
• Communications: any information you provide when contacting us via email at support@thebroov.com.

2.2 Information Collected Automatically

• Device & usage data: IP address, browser type, operating system, referring URLs, pages viewed, and time spent on pages — collected via Google Analytics 4 and Vercel Analytics.
• Behavioral data: session recordings, heatmaps, and click patterns — collected via Microsoft Clarity.
• Local storage data: shopping cart contents, language/currency preferences, and cookie consent status — stored locally on your device and not transmitted to our servers.

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including shipping and delivery.
• Send order confirmations and shipping updates.
• Respond to your inquiries and provide customer support.
• Send marketing communications if you have opted in (you may unsubscribe at any time).
• Analyze Site usage to improve our products, content, and user experience.
• Detect and prevent fraud or unauthorized transactions.
• Comply with legal obligations.

4. Third-Party Service Providers

We share your information only with trusted third parties who assist us in operating our business:

• Stripe — payment processing. Stripe processes your payment data under its own privacy policy and is PCI DSS compliant.
• Google Analytics 4 — website analytics and e-commerce event tracking (page views, purchases, cart activity).
• Microsoft Clarity — session recording and heatmap analytics for UX improvement.
• Vercel — website hosting and performance analytics.
• Neon — secure cloud database hosting for order and customer records.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to analyze traffic, personalize content, and improve your experience. You can manage your cookie preferences at any time via our Cookie Settings page. For full details on the cookies we use, please see that page.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including to satisfy legal, accounting, or reporting obligations. Order records are retained for a minimum of 5 years for tax and compliance purposes. You may request deletion of your personal data at any time by contacting us (see Section 10).

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including SSL/TLS encryption for all data in transit, secure cloud infrastructure, and restricted access controls. Payment card data is handled entirely by Stripe and never touches our servers. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

We operate globally and ship to multiple countries. Your personal data may be transferred to and processed in countries outside of your own, including the United States, where our service providers are located. We ensure that such transfers are carried out in compliance with applicable data protection laws using appropriate safeguards such as Standard Contractual Clauses (SCCs) where required.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

European Economic Area, UK & Switzerland (GDPR / UK GDPR)

• Right to access, rectify, or erase your personal data.
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with your local data protection authority.

California (CCPA / CPRA)

• Right to know what personal information we collect and how it is used.
• Right to request deletion of your personal information.
• Right to opt out of the sale or sharing of personal information (we do not sell your data).
• Right to non-discrimination for exercising your privacy rights.

Brazil (LGPD)

• Right to confirmation and access to your personal data.
• Right to correction, anonymization, blocking, or deletion of unnecessary data.
• Right to data portability.
• Right to revoke consent.

Australia (Privacy Act)

• Right to access and correct your personal information.
• Right to complain about a breach of the Australian Privacy Principles.

Canada (PIPEDA)

• Right to access and challenge the accuracy of your personal information.
• Right to withdraw consent, subject to legal or contractual restrictions.

To exercise any of these rights, please contact us at support@thebroov.com. We will respond within 30 days (or sooner where required by law).

10. Children's Privacy

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: