Privacy Policy

Effective date: 6 August 2026 Last updated: 2 September 2026

This Privacy Policy explains how CAPITALADV S.R.L., operating as Bricoshop Europe (“we”, “us”, “our”), collects, uses, shares and protects your personal data when you visit bricoshop-europe.com, place an order, or otherwise interact with us.

We are committed to processing your personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), applicable ePrivacy rules and other applicable data-protection laws.

Who we are (Data Controller)

The data controller responsible for your personal data and the seller of the products offered through Bricoshop Europe is:
- CAPITALADV S.R.L., a company established under the laws of Italy.
- Registered address: Corso Buenos Aires 64, 20124 Milano, Italy.
- VAT number: IT11892220960.
- Email: support@bricoshop-europe.com
- Phone: +1 951 647-5902 (customer service line, operated on behalf of CAPITALADV S.R.L.)

Scope of this policy

This policy applies to personal data we process about customers, prospective customers, and visitors of our website, whether you buy from us or simply browse. It does not apply to third-party websites we may link to, which have their own privacy policies.

The personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

Identity and contact data — first and last name, delivery and billing address, email address, telephone number.
Order and transaction data — products ordered, order value, payment method (including cash-on-delivery selection), delivery details, order history, and communications with our customer service.
Payment data — where you pay online, payment is processed by our payment providers; we do not store full card numbers. For cash-on-delivery orders we process only the information needed to fulfil and collect the order.
Technical and usage data — IP address, device and browser type, operating system, referring pages, pages viewed, and interactions on our site, collected through cookies and similar technologies (see our Cookie Policy).
Marketing and communications data — your preferences in receiving marketing from us and your communication preferences.

We do not intentionally collect special categories of data (such as health or biometric data), and we ask that you do not provide such data to us.

How we collect your data

Directly from you — when you place an order, fill in a form or landing page, subscribe to our newsletter, or contact us.
Automatically — through cookies, pixels and similar technologies when you use our website (see our Cookie Policy).
From third parties — such as advertising and analytics platforms (e.g. Google, Meta), payment providers, and delivery/logistics partners who help us fulfil and confirm your orders.

Why we use your data and our legal bases

We only process your personal data where we have a lawful basis to do so under Article 6 GDPR. The table below summarises our main processing activities:

Purpose of processing	Data used	Legal basis (Art. 6 GDPR)
Processing, fulfilling and delivering your order, including cash-on-delivery collection	Identity, contact, order, payment data	Performance of a contract (Art. 6(1)(b))
Customer service, handling questions, returns, refunds and complaints	Identity, contact, order data	Performance of a contract; legitimate interests (Art. 6(1)(b)/(f))
Preventing fraud, abuse and non-genuine orders	Order, technical data	Legitimate interests (Art. 6(1)(f))
Accounting, tax and record-keeping obligations	Identity, order, transaction data	Legal obligation (Art. 6(1)(c))
Sending marketing communications and personalising offers	Contact, usage, marketing data	Consent, or legitimate interests where permitted (Art. 6(1)(a)/(f))
Website analytics, advertising and measuring campaign performance	Technical, usage data	Consent for non-essential cookies (Art. 6(1)(a))
Improving our website, products and services	Usage, order data	Legitimate interests (Art. 6(1)(f))

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You may object to such processing at any time (see Section 12).

Marketing communications

We may send you information about similar products and offers by email or other channels where permitted by law. You can withdraw your consent or opt out at any time by using the unsubscribe link in any marketing message, or by contacting us at support@bricoshop-europe.com. Opting out of marketing does not affect service messages relating to your orders.

Cookies and similar technologies

We use cookies, pixels and similar technologies to operate our site, remember your preferences, analyse traffic and deliver relevant advertising. Non-essential cookies are only set with your consent, which you give through our cookie banner and can change at any time. Full details, including the categories and providers involved, are set out in our separate Cookie Policy.

Who we share your data with

We do not sell your personal data. We share it only with service providers and other recipients where necessary for the operation of our business and the provision of our services, including:
- Marketing service provider — SBC Performance LLC, a company organised under the laws of the State of Wyoming, USA, which provides advertising, campaign management and marketing support services on our behalf. SBC Performance LLC acts as our marketing service provider and does not operate the store or act as the seller.
- Logistics and delivery partners — couriers and fulfilment providers who process and deliver your order and, where applicable, collect cash-on-delivery payments.
- Payment service providers — to process online payments securely.
- Technology and hosting providers — providers of website hosting, IT infrastructure, customer-service and communication tools.
- Advertising and analytics providers — such as Google and Meta, which help us measure, manage and improve our advertising campaigns, subject to your cookie preferences and consent where required.
- Professional advisers and authorities — including accountants, auditors, lawyers and public authorities where disclosure is required by applicable law.
Where a service provider processes personal data on our behalf as a processor, it does so under our documented instructions and, where required, under a written data-processing agreement requiring appropriate confidentiality and security measures.

International data transfers

Our company is established in Italy. However, some of our service providers may be located outside the European Union / European Economic Area (EU/EEA), which may involve the transfer or processing of personal data in countries outside the EU/EEA.

In particular, our marketing service provider, SBC Performance LLC, is established in the United States. Where personal data is transferred outside the EU/EEA, we ensure that appropriate safeguards required under applicable data-protection law are in place.

Where required, international transfers are protected through appropriate safeguards, including the Standard Contractual Clauses (SCCs) approved by the European Commission, together with additional technical and organisational measures where necessary. Where a recipient is certified under the EU-US Data Privacy Framework, transfers to that recipient may instead rely on the applicable adequacy decision.

You may contact us at support@bricoshop-europe.com for further information about the safeguards applicable to international transfers of your personal data.

How long we keep your data

Order and transaction data — retained for the duration of our relationship and afterwards for the periods required by tax, accounting and consumer-protection law.
Customer-service records — retained for as long as needed to handle your request and any related claim.
Marketing data — retained until you withdraw consent or object, after which we suppress your details to honour your choice.
Technical/cookie data — retained for the periods set out in our Cookie Policy.

When your data is no longer needed, we securely delete or anonymise it.

How we protect your data

We implement appropriate technical and organisational measures — including encryption in transit, access controls, and restricted staff access — designed to protect your personal data against unauthorised access, loss, misuse or alteration. While no method of transmission over the internet is completely secure, we work to protect your data and to notify you and the competent authority of any personal-data breach where required by law.

Your rights under the GDPR

If you are located in the EU/EEA, you have the right to:

access the personal data we hold about you and obtain a copy;
rectify inaccurate or incomplete data;
erase your data (“right to be forgotten”) in certain circumstances;
restrict or object to our processing, including objecting to direct marketing at any time;
data portability — receive your data in a structured, commonly used, machine-readable format;
withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at support@bricoshop-europe.com. We will respond within one month, as required by the GDPR. You also have the right to lodge a complaint with your local data protection authority (a list of EU/EEA authorities is available on the European Data Protection Board website, edpb.europa.eu). We would, however, appreciate the chance to address your concerns before you approach the authority.

Your rights under United States state privacy laws

If you are a resident of California or another US state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas or Oregon), you may have the right to: know what personal information we collect and how we use and disclose it; access and obtain a copy of that information; request correction or deletion; and opt out of the “sale” or “sharing” of personal information and of targeted advertising.

We do not sell your personal information for money. To the extent that the use of advertising cookies constitutes a “sale” or “sharing” under California law, you can opt out through our cookie banner or by contacting us at support@bricoshop-europe.com. We will not discriminate against you for exercising any of your privacy rights.

Children’s privacy

Our website and products are not directed at children, and we do not knowingly collect personal data from children under the age of 16 (or the applicable minimum age in your country). If you believe a child has provided us with personal data, please contact us and we will delete it.

Third-party links

Our website may contain links to third-party sites, plugins and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every site you visit.

Automated decision-making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Where we use automated tools to detect fraud or non-genuine orders, meaningful human review is available on request.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The “Last updated” date at the top shows when it was last revised. Material changes will be notified through our website or by other appropriate means.

Contact us

If you have any questions about this Privacy Policy, or wish to exercise any of your data-protection rights, please contact us:

Bricoshop Europe
Operated by CAPITALADV S.R.L.

Registered address: Corso Buenos Aires 64, 20124 Milano, Italy

VAT number: IT11892220960

Email: support@bricoshop-europe.com

Website: bricoshop-europe.com

Phone: +1 951 647-5902 (customer service line, operated on behalf of CAPITALADV S.R.L.)