This Privacy Policy describes how EXPERTMILL SRL, headquartered at Calea Ion Zăvoi Nr.8, Bucharest, Romania (“we”, “us”, or “our”), collects, uses, and protects the personal information of users who access our website (www.racebox.com).

By using our website, you agree to this Privacy Policy.

1. Who We Are

Company Name: EXPERTMILL SRL
Company ID (CUI): 14641390
Trade Register No.: J23/1920/2018
Email: contact@racebox.com
Phone: +40 (747) 859 859

2. What Data We Collect

We may collect the following categories of personal data:

• Contact details: name, email, phone number
• Billing & shipping information
• Order history and preferences
• IP address and browser/device data
• Messages and interactions with us

We do not collect sensitive personal data (such as medical, biometric, political, or religious information).

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and deliver your orders
• To contact you regarding your purchases or inquiries
• To send marketing emails (only with your explicit consent)
• To improve the functionality and performance of our website
• To comply with legal and fiscal obligations (e.g. invoicing)

4. Legal Grounds for Processing

Your data is processed based on:

• Contractual obligations (when you place an order)
• Legal obligations (e.g. invoicing, accounting)
• Legitimate interest (website functionality, fraud prevention)
• Your consent (for newsletter subscription)

5. Who We Share Your Data With

We may share your data with:

• Couriers or delivery partners
• Payment processors (e.g. card payment providers)
• Accountants and legal service providers
• IT service providers and hosting platforms
• Authorities, when legally required

We do not sell your personal data to third parties.

6. Data Storage & Security

We store your data on secure servers located within the European Union. We implement appropriate technical and organizational security measures to protect your information.

7. Data Retention

We retain your data for as long as necessary to fulfill the purposes listed above or as required by law (e.g. 10 years for invoicing records).

8. Your Rights

According to GDPR (EU Regulation 2016/679), you have the right to:

• Access your data
• Correct or update your data
• Request data deletion (“right to be forgotten”)
• Object to processing
• Withdraw consent at any time (if applicable)
• File a complaint with the data protection authority

To exercise any of these rights, please contact us at contact@racebox.com.

9. Cookies

We use cookies to enhance the user experience and analyze website traffic. For more details, please refer to our [Cookie Policy].

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. The latest version will always be available on our website with the effective date indicated.