Privacy Policy

Who We Are

SBS is a Dublin-based resale business selling pre-owned and new streetwear, trainers, accessories, and tech. We operate at thesbsofficial.com and via our iOS app.

Data controller: SBS, Dublin, Ireland.
Privacy contact: [email protected]

What We Collect

When you create an account or place an order we collect:

• Name, email address, phone number
• Delivery address (if applicable)
• Order details and communication history
• Account credentials (password stored as a secure hash)

When you use our iOS app we may collect:

• APNs device token (to send push notifications about your orders)
• App usage data (screens visited, actions taken) for improving the app

On our website we collect basic analytics (pages visited, referrer, country) via our own tracker and Cloudflare Web Analytics. We do not use Google Analytics, Facebook Pixel, or advertising cookies.

We do not sell your personal data to third parties.

Why We Use Your Data

We process your data under the following lawful bases (GDPR Art. 6):

• Contract performance — to process order requests, arrange payment, and handle delivery or collection
• Legitimate interests — fraud prevention, keeping our service secure, basic analytics to improve our site and app
• Legal obligation — retaining transaction records to meet Irish tax and accounting requirements
• Consent — push notifications (you can disable these in your device settings at any time)

How Orders Work

SBS does not process card payments online. When you submit an order request through the app or website, we receive your details and contact you to confirm the order. Payment is completed offline — cash or bank transfer at the point of delivery or collection in Dublin.

Push Notifications

If you allow notifications on our iOS app, we use Apple Push Notification service (APNs) to send you order updates. Your APNs device token is stored securely and used only for delivering notifications from SBS. You can withdraw consent at any time in your iPhone Settings → Notifications → SBS.

Customer Support

When you contact us through the in-app support chat or by email, we keep those records to help resolve issues. Chat history is visible to you in your account. If you want a conversation deleted, email [email protected] and we will remove it unless we need it to resolve a dispute or meet a legal obligation.

Who We Share Data With

We share your data only where necessary to run our service:

• Cloudflare — hosting, DNS, and web analytics (data may be processed in the US under Standard Contractual Clauses)
• Apple (APNs) — push notification delivery (only a device token is shared, no personal details)
• Resend — transactional email delivery (order confirmations, account emails)

No data is sold or shared with advertising networks.

International Transfers

Some providers (Cloudflare, Resend) are based in the US. Where data is transferred outside the EEA we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.

How Long We Keep Your Data

• Order and transaction records — 7 years (Irish tax / accounting obligations)
• Account data — while your account is active, or 2 years after last activity
• Support communications — while your account is active, or until you request deletion
• APNs device token — until you revoke notification permission or delete your account

Children

Our services are for individuals aged 16 and over (the digital age of consent in Ireland). We do not knowingly collect data from anyone under 16. If you believe we have, please contact us at [email protected].

Your Rights Under GDPR

As an Irish/EEA resident you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (subject to legal retention obligations)
• Restriction — ask us to pause processing while a dispute is resolved
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — e.g. turn off push notifications at any time

To exercise any right, email [email protected]. We will respond within one calendar month.

Complaints & Supervisory Authority

If you have a concern about how we handle your data, please contact us first at [email protected]. You also have the right to lodge a complaint with Ireland's data protection authority:

Data Protection Commission (DPC)
dataprotection.ie

Related Policies

Terms & Conditions — service usage rules, buying & selling, returns
Returns & Refunds — full returns and refund process