Privacy policy

Who processes your data

The data controller is Promessa, a manufacturer of wedding and evening dresses and the owner of mail.promessa.by (“we”, “us”).

Contact us about anything related to your personal data:

• e-mail: manager@promessa.by;
• phone: +375336601212;
• address: ул. Мира 10-3, Орша, Беларусь.

This policy follows the Law of the Republic of Belarus No. 99-Z of 7 May 2021 “On Personal Data Protection” and describes how the site actually works.

What data we receive

From the request form (wholesale price list, partnership):

• the contact person’s name;
• phone number and e-mail;
• a link to the boutique’s Instagram, Telegram or MAX (or an @username);
• the boutique or company name and city;
• your comment, if you wrote one;
• details of the request itself: site language, the page it was sent from, IP address and time.

On every visit the server receives the technical data the site cannot work without: IP address, browser and device details (user agent), the requested page and time.

Only with your consent — analytics and advertising data (see the cookie section): which pages you viewed, where you came from, how you used the site, approximate location by IP, device type.

If you contact us yourself — by e-mail, WhatsApp, Telegram, MAX, Viber or Instagram — we receive what you sent and the profile details that service shows us.

We do not collect special categories of personal data or payment details (there are no payments on the site), and visitors don’t register. The site is meant for business representatives and is not aimed at children.

Why we use it

• To answer your request: contact you, send the price list and terms, discuss and sign a supply agreement. The request is stored on the site and e-mailed to our work mailbox.
• To run and protect the site: keep your session, protect forms against request forgery and spam (a limit on requests per IP address, an “I’m not a robot” check), investigate errors.
• Advertising (with consent): to show Promessa ads on Instagram and Facebook to people who have visited the site, and to measure how well they work.

We do not sell personal data, do not share it for other companies’ advertising and do not make decisions with legal effects on you based solely on automated processing.

Legal grounds

We process the request form data on the basis of your consent, which you give by ticking the box before sending. The form cannot be sent without it, but you can always reach us by phone or messenger instead.

Analytics and advertising cookies are set only after you click “Accept” in the cookie notice. If you choose “Necessary only”, the counters are not loaded at all — the whole site still works.

Technical data and necessary cookies are processed without separate consent, as the site cannot be shown or protected without them, in the cases provided for by law. If we have an agreement with you, data is also processed to perform it.

Cookies and similar technologies

Cookies are small files a site stores in your browser. Below is the full list of what this site uses.

Fonts, images and the “I’m not a robot” check are served from our own server: until you click “Accept”, the site makes no requests to third-party services and they learn nothing about you.

Managing cookies. You can change your choice at any time with the “Cookie settings” link at the bottom of every page; if you decline, we delete the counters’ cookies set on our domain. You can also delete or block cookies in your browser settings — necessary cookies will then stop working too, and the request form may fail to send.

Who we share data with

Requests are available only to the Promessa staff who work with wholesale clients. Data is also processed by:

• the hosting provider whose servers host the site and its database;
• the e-mail service that delivers requests to our mailbox;
• Meta Platforms Ireland Ltd. / Meta Platforms, Inc. (Ireland, USA) — Meta Pixel, with your consent;
• public authorities — only when the law expressly requires it.

Analytics and advertising services also process data under their own policies: Yandex, Google, Meta.

Transfers abroad

The Meta services process data on servers that include ones in the USA, a country that is not on the list of states providing an adequate level of protection of data subjects’ rights. This carries risks: the law there may protect data less, foreign authorities may gain access to it, and exercising and defending your rights may be harder.

By clicking “Accept” in the cookie notice you consent to such transfer, taking these risks into account. Declining does not limit your use of the site in any way. Request form data is not shared with analytics or advertising services.

How long we keep data

• requests — while we are in contact or working together, and no longer than 3 years after the last contact; if you withdraw consent, we delete them sooner, except data we must keep under an agreement or the law;
• session data (IP address, browser details) — up to 2 hours after your last action on the site;
• the per-IP request limit record — 1 hour;
• web server logs — for the period set by the hosting provider; used only for diagnostics and protection against attacks;
• cookies — for the periods in the table above, or until you delete them.

How we protect data

The site works over HTTPS. Requests are available only in a closed admin panel that only authorised staff can sign in to. Forms are protected against request forgery, spam and automated submissions, and third-party scripts are not loaded without your consent.

Your rights

At any time you can:

• withdraw your consent to the processing of personal data;
• find out what data of yours we process, why and on what grounds;
• ask us to correct or complete inaccurate data;
• find out which data we have shared and with whom;
• ask us to stop processing and delete your data;
• complain about our actions to the National Personal Data Protection Center of the Republic of Belarus (cpd.by) or to a court.

To exercise your rights, write to manager@promessa.by from the address, or mention the phone number, used in your request, so we know it’s you. We reply within 15 days.

Changes to this policy

We update the policy when the way the site works changes, for example when a new service is added. The current version is always on this page, with its date at the top. If a change affects your consent to analytics and advertising, we will ask for it again.