top of page




At Bruna Bongani we are committed to protecting and respecting your privacy. This policy sets out key information regarding bruna bongani and how any personal data you provide to us will be processed. 


What personal data do we collect and why? 


We collect your personal data when you place an order, sign up for our marketing communications, browse our website or use the other services offered by our website ( The data we collect includes details you provide to us, such as your given name and surname and your shipping and billing addresses. We also collect data regarding your shopping habits and the pages and products you have viewed from your use of the website. We use this data to:


    •    Take your orders, process your payments and deliver the items you have purchased;

    •    Provide any additional services you have requested, such as our marketing communications;

    •    Give you access to services reserved for registered users, such as Wish Lists and product alerts;

    •    Provide you with help and assistance via our Customer Care team;

    •    Personalize your visit to the website and ensure that content from our site is presented in the most effective manner           for you and for your computer.


Under the Law, we must have a valid legal basis to process your data. In most instances, we will process your data because we have a contract with you e.g. to deliver your purchases. We will also use your personal data to send you sales and marketing communications that we believe may be of interest to you if we have your explicit consent for this activity, or if you are an existing customer where we have a legitimate interest in communicating with you. You can opt out of sales and marketing communications from us at any time. 


Who will process your data? 


Your personal data will be processed by as the data controllers. 


We may also retain the services of external suppliers to help meet our business needs and may share your data with these suppliers (such as the logistics suppliers and mailchimp for the comercial email).  These suppliers have been selected after a rigorous evaluation process and chosen for their security, reliability and competence.  They will process your data only under our instructions.     


Some of these suppliers and some Group companies may be based in non-EU countries.  Where this is the case, the transfer of your personal data to these countries is carried out in compliance with the guarantees provided by law. 


How long do we keep your data? 


We will not retain your personal data for longer than is necessary to fulfil the purposes for which you provided that personal data, unless the law permits or requires that we retain it for longer. The retention period varies depending on the purpose of the processing. For example, the data collected during your purchase of goods on are retained in accordance with local tax law (six years in Spain), while those data used to send you our marketing communications are retained until you ask to be unsubscribed. 


What are your rights regarding your personal data? 


          Under the Law, you have the right to: 

    •    Know what personal data of yours we are processing, where that data came from and how we are using that data;

    •    Ask us to update, correct or supplement the data we hold about you;

    •    Withdraw consent for processing for a specified purpose;

    •    Ask us to delete or erase your data from our systems;

    •    Limit or oppose our processing of your data;

    •    Ask us to supply the personal data we hold about you in an easy readable electronic format, or transfer that data                   direct to a third party nominated by you.

    •    You can exercise these rights at any time by emailing

          This Privacy Policy may undergo changes and additions from time to time. Where possible we will inform you of any             changes, but please check the contents periodically.


      Who is the data controller? 


       Under the data protection law, the data controller is responsible for ensuring that your data is held securely, that you are given accurate information about how your data is used, and that your rights regarding your data are respected. The Bruna Bongani website is owned and run by Isabel Llanza Lopez-Quesada. For the purpose of the Spanish Data Protection Act 2018 and the General Data Protection Regulation 2016 (the Law), the data controllers for any personal data we hold about you are Isabel Llanza Lopez-Quesada C/ Gomez Ortega numero 12, 28002 Madrid.



       What personal data do we collect? 


      We collect and process only the data that is required to allow us to provide our services to you.  We collect the following data when you browse or shop at


    a    We process the personal data required to complete and despatch your purchase, including your name, billing address, delivery address, payment details, mobile number, telephone number and email address.  We collect your email address in order to send you confirmation of your order; we collect your telephone number so that we can contact you if there are any issues with the order.

    b    We collect your email address when you sign up for email updates.

    c    If you register to the bruna bongani account, we collect your name, email address, password, country, day and month and year of birth.

    d    When you contact our Customer Care team, we may collect additional data to help us resolve any queries relating to your order, delivery, payments, marketing, the website or any other queries.

    e    We collect and process data about your browsing on, including the pages you visit and how you interact with these pages.  If you have registered for an account, we collect browsing data about your access to the dedicated areas of the website.

    f    If you are a customer of, or if you have given us your consent, we collect and process your personal data for direct marketing activities.

    g    If you provide us with someone else’s data – for example, if you purchase a product to be delivered to a friend or as a gift – we will collect and process the personal data required to enable the transaction such as the name, delivery address and other contact details for your friend.  If you are receiving an item as a gift, we will process your data only to complete the gift request and our contractual obligations.


       How do we use the personal data we collect? 


       We collect and process your personal data for the following purposes:


    a    When you visit, we will collect the minimum personal data necessary to allow us to provide you with the services of the website, such as placing and holding items in your shopping bag.

    b    When you visit, we will use some data about your use of the website to help us improve the website and our promotion of the website.  This will include data about how you came to the website; the date and time of your visit; products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction data (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.   

    c    We also collect data about your use of by using cookies. More data about how we use cookies and how you can, if you wish, turn off cookies is included in our Cookie Policy.

    d    When you sign up for our marketing communications, we will ask you for your email address to enable delivery of the newsletter.  If you would prefer not to receive these emails, you can unsubscribe at any time using the link on the bottom of the email, or by contacting our Customer Care team.

    e    If you have purchased from, we will use the personal data we hold about you, including your purchase history, to contact you via email regarding products and services that may be of interest to you.  If you would prefer not to be contacted in this way, you can unsubscribe from emails at any time using the link on the bottom of the email, or update your contact preferences on or by contacting our Customer Care team.

    f    We analyse contact data, purchase history, web browsing data and lifestyle data to tailor our marketing communications, web site presentation and internet advertising to meet your preferences.

    g    When you contact our Customer Care team, we will use the personal data you provide and that we have collected to respond to your requests for help or information.

    h    We will use the contact information that you provide to deliver service messages such as any changes to our Terms and Conditions or Privacy Policy, delivery updates or other non-marketing communications.


        What is our legal basis for processing your personal data? 


        Under the Law we must have a valid reason for using your personal data and we may not collect, store or use data about you that is not compatible with that reason.  There are four valid reasons for our use of your personal data: 


    I    Most of the data we collect from you is necessary to allow us to fulfil our contract with you or to enter into a contract with you e.g. you provide a billing address and email address when your purchase an item from, so that we can process your payment and send you your order confirmation.

    II    In certain circumstances we will ask for your permission or consent to use your personal data e.g. if we would like to send you marketing information about items we believe may be of interest to you via email.  If you have given your consent to our use of your personal data, you are entitled to withdraw this consent at any time.

    III    We may also have a legitimate interest in using your personal data e.g. to ensure that the content of our website is presented to you and your device as effectively as possible, or to ensure that our marketing communications are relevant to your interests.  If this is our reason for using your data, we must make sure that our interests do not override yours and you are entitled to object to this use of your data.

    IV    Lastly, we may be required to use your data to meet a legal obligation or to protect your interests e.g. we may exchange information with other specialist organisations for the purposes of fraud detection and credit risk reduction and we will retain financial data long term to meet our statutory obligations.


        Data transfer outside the European Union 


       Some of the third parties such as (DHL, Mailchimp, Braintree, Amazon web services) may be located in countries outside the European Union that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission. The transfer of your personal data to countries that do not belong to the European Union and that have not been assessed as offering adequate levels of protection will be performed only:

    I    after the completion between Bruna Bongani and said parties of specific agreements containing data protection clauses. 

    II    if the transfer is necessary for the completion and execution of a contract between you and Bruna Bongani (for the purchase of goods offered on our website, for registration on the website or use of services on the website), or

    III    for the management of your requests.


  How long do we keep your data?


We keep your personal data for a limited period of time in line with our data retention policy.  The specific retention period will vary according to the reason for processing your personal data.  After this period, your data will be permanently erased or otherwise irreversibly rendered anonymous. Your personal data are retained in accordance with the following criteria: When you have purchased goods from, we will retain the billing data until the end of the relevant accounting period, normally seven years from the billing date; When you make a payment, we will retain your payment details up to the certification of the payment and the completion of the relevant administrative-accounting formalities regarding your right of withdrawal and the terms applied for the disputing of the payment; When you provide us with personal data in order to use the services of, such as marketing communications, we will keep your data for this purpose until the termination of the service or until you cancel your subscription to the service; When you give us your consent to send you marketing communications, you can withdraw your consent at any time.  We will consider your consent to be current for two years from your last interaction with any email that we send you, with www.brunabongani.comWhen we use your personal data and browsing history to analyse your behaviour in order to customize the website and to show you personalized sales offers, we will keep the data for analytical purposes until you ask us to delete it; When we use personal data for market research and satisfaction surveys, we will keep the data until you ask us to stop. When you contact our Customer Care team, we will keep any additional personal data you provide that is specific to your enquiry for as long as you remain an active customer of


   Your rights


You have the right to request a copy of the data that we hold about you (and we will provide this to you free of charge once we have confirmed your identity). If you would like a copy of some or all of your personal data, please email or write to us using the contact details in this policy. If we do hold data about you we will:


    ◦    give you a description of it

    ◦    tell you why we are holding it

    ◦    tell you who it could be shared with

    ◦    tell you how long we will keep the data

    ◦    if the data was not provided by you, we will give you any available information such as the source of the data

    ◦    tell you if the data has been used for automated decision making

    ◦    tell you if the data is stored outside of the European Economic Area, and if so what safeguards are in place to protect           your personal data

    ◦    let you have a concise and clear copy of the data


       You have the right to ask us to correct any inaccuracies in the personal data we hold about you and to stop us using your data until it has been corrected.  We want to make sure that your personal data is accurate and up to date and we will be happy to correct or remove data you think is inaccurate. If you have given us your consent to use your personal data for marketing, you have the right to withdraw your consent at any time by calling our Customer Care team, clicking “unsubscribe” on a marketing email. You have the right at any time to oppose our processing of your personal data on the basis of our legitimate interest.  You will need to explain the reasons behind your request and allow us to consider your request and respond. You have the right to request the deletion of your personal data. After receiving and reviewing your request, if legitimate it will be our responsibility to promptly cease processing and to delete your personal data. You have the right to receive a copy of your data that we process based on your consent or on the basis of a contract with you in a standard format. If you wish, where technically possible, we can transfer your data directly to a third party indicated by you. To exercise any of these rights, you can sign in to your account, contact our Customer Care team by emailing or write to our Privacy Team at Isabel Llanza 

C/ Gomez Ortega numero 12, 28002 Madrid.To ensure that the data of our users are not subject to breaches or illegitimate use by third parties, we will ask you to confirm your identity before carrying out your request.




We protect your personal data with specific technical and organisational security measures aimed at preventing your personal data from being used illegitimately or fraudulently. In particular, we use security measures that guarantee: pseudonymisation or encryption of your data; the confidentiality, integrity, and availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach.




If you believe that Bruna Bongani is processing your personal data in contravention of the Law, you can file a complaint with the supervisory authority responsible for compliance with the rules on personal data protection. In Spain the complain can be processed by.


    Changes to this notice


We keep our privacy notice under regular review in order to reflect changes in our services and in privacy regulation. This Privacy Policy was last updated on May 18 2018.  


   Legislative references and useful links.


The processing of your personal data is carried out by Isabel Lopez Quesada in compliance with the Regulation (EU) 2016/679 general regulation on data protection, Spain Data Protection Act 2018 and rules on the processing of personal data.

bottom of page