Last updated: 7 October 2026
Dirty Brigada (“Dirty Brigada”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit or use the Dirty Brigada website, create an account, purchase products from our online shop, contact us, subscribe to our communications, participate in our community or interact with our services and content.
Dirty Brigada processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable European Union data protection legislation and applicable national legislation.
This Privacy Policy is intended to provide clear and transparent information about how and why your personal data is processed.
1. Data Controller
The data controller responsible for the processing of your personal data is:
Dirty Brigada
Legal name: [LEGAL COMPANY NAME]
Registered address: [FULL BUSINESS ADDRESS]
Tax/VAT number: [VAT NUMBER]
Email: info@dirtybrigada.com
Privacy email: [PRIVACY EMAIL]
If you have any questions about this Privacy Policy, the processing of your personal data or the exercise of your data protection rights, you can contact us using the details above.
Where a Data Protection Officer (“DPO”) is legally required and appointed, their contact details will be provided here:
Data Protection Officer: [DPO NAME / NOT APPLICABLE]
Email: [DPO EMAIL / NOT APPLICABLE]
2. What Personal Data We Collect
Depending on how you interact with Dirty Brigada, we may collect different categories of personal data.
We only collect information that is reasonably necessary for the relevant purpose.
2.1 Account Information
When you create an account on our website, we may collect:
- First and last name
- Email address
- Username or account details
- Password or authentication information
- Billing address
- Shipping address
- Telephone number
- Order history
- Account preferences
- Other information you voluntarily provide through your account
Passwords are stored and handled using appropriate security measures and are not stored by us in plain text.
2.2 Order and Purchase Information
When you purchase Dirty Brigada merchandise through our online shop, we may collect:
- First and last name
- Billing address
- Shipping address
- Email address
- Telephone number
- Details of the products purchased
- Order number
- Order value
- Transaction and payment-related information
- Delivery information
- Returns, refunds or exchange information
- Communications relating to your order
We process this information to receive, manage, fulfil and support your purchase.
2.3 Payment Information
Payments may be processed through third-party payment providers.
Where payment is handled by an external payment provider, payment card details may be collected and processed directly by that provider rather than being stored on our own servers.
We do not intentionally store complete payment card numbers or security codes on our website servers.
The relevant payment provider may process your personal and payment information according to its own privacy policy and terms.
2.4 Contact Information
If you contact us through a contact form, email or another communication channel, we may collect:
- Name
- Email address
- Telephone number, if provided
- The content of your message
- Any other information you voluntarily provide
We use this information to respond to your enquiry and provide customer support.
2.5 Newsletter and Marketing Information
If you choose to subscribe to Dirty Brigada newsletters or marketing communications, we may collect:
- Email address
- Name, where provided
- Subscription preferences
- Information relating to your interactions with our communications, where permitted
You can unsubscribe from marketing communications at any time.
2.6 Event and Community Information
If Dirty Brigada provides registration or participation functionality for rides, events or community activities, we may collect information necessary to manage your participation.
Depending on the specific event, this may include:
- Name
- Email address
- Telephone number
- Registration information
- Event preferences
- Information necessary for event administration
- Other information voluntarily provided in connection with the event
We will only collect information that is reasonably necessary for the organisation and administration of the relevant activity.
2.7 Technical and Usage Information
When you visit our website, certain technical information may automatically be collected, depending on the technologies and services enabled on the website.
This may include:
- IP address
- Browser type and version
- Device type
- Operating system
- Language and regional settings
- Date and time of access
- Pages visited
- Referring website
- General interaction information
- Technical information relating to website performance and security
Some of this information may be collected through cookies and similar technologies.
3. How We Use Your Personal Data
We may process your personal data for the following purposes:
- To provide and operate the Dirty Brigada website
- To create and manage user accounts
- To process and fulfil orders
- To process payments
- To arrange delivery of purchased merchandise
- To manage returns, refunds and exchanges
- To provide customer service
- To respond to enquiries
- To manage event or ride registrations where applicable
- To communicate with you about your account or orders
- To send service-related communications
- To send newsletters and marketing communications where permitted
- To maintain and improve our website
- To monitor website performance
- To protect the website and our users from fraud, abuse and security threats
- To detect and prevent unauthorised or malicious activity
- To comply with legal, accounting and tax obligations
- To establish, exercise or defend legal claims
- To protect our rights, property and legitimate business interests
We will not use your personal data for purposes incompatible with the purposes described in this Privacy Policy unless we have a lawful basis to do so and, where required, provide you with appropriate information.
4. Legal Bases for Processing
Under the GDPR, we process personal data only where there is a valid legal basis for doing so.
Depending on the circumstances, the legal basis may include:
4.1 Performance of a Contract
We may process your personal data where processing is necessary to enter into or perform a contract with you.
For example, this applies when you purchase Dirty Brigada merchandise and we need your name, delivery address and contact details to process and deliver your order.
4.2 Legal Obligations
We may process personal data where necessary to comply with legal obligations applicable to us.
This may include accounting, taxation, consumer protection, financial record-keeping and other statutory requirements.
4.3 Legitimate Interests
We may process personal data where this is necessary for our legitimate interests or those of a third party, provided that these interests are not overridden by your rights and freedoms.
Our legitimate interests may include:
- Maintaining website security
- Preventing fraud and abuse
- Protecting our systems and services
- Improving website functionality
- Managing our customer relationships
- Protecting our legal rights
- Understanding and improving our services
- Operating and developing the Dirty Brigada brand and community
Where we rely on legitimate interests, we consider the impact of the processing on your rights and interests.
4.4 Consent
Where required by law, we will rely on your consent.
This may include certain marketing communications or non-essential cookies and similar technologies.
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Online Shop and Orders
The Dirty Brigada Shop is an online store offering Dirty Brigada branded merchandise.
When you place an order, we use the personal information you provide to:
- Process your order
- Confirm your purchase
- Process payment
- Prepare and dispatch your products
- Arrange delivery
- Communicate with you about your order
- Provide customer support
- Handle returns, refunds and exchanges
- Meet applicable accounting and legal obligations
The information required to complete an order is necessary for us to fulfil the purchase contract.
If you do not provide information that is necessary to process an order, we may be unable to complete the transaction.
6. User Accounts
You may have the option to create a personal account on the Dirty Brigada website.
Your account may allow you to:
- View your orders
- Manage your personal information
- Manage shipping and billing information
- Access account-related features
- Use other services made available to registered users
You are responsible for keeping your account credentials confidential and for notifying us if you believe your account has been accessed without authorisation.
You may request deletion of your account, subject to information that we are legally required to retain.
7. Payments
We may use third-party payment service providers to process online payments.
When you make a payment, the relevant payment provider may process information such as:
- Name
- Email address
- Billing information
- Transaction information
- Payment card or other payment credentials
- Fraud-prevention information
Payment information may be processed directly by the relevant payment provider.
Third-party payment providers operate under their own terms and privacy policies.
Where appropriate, we recommend reviewing the privacy policy of the payment provider used for your transaction.
8. Shipping and Delivery
To fulfil your order, we may share the information necessary for delivery with shipping companies, courier services, postal operators or other logistics providers.
Depending on the delivery service, this may include:
- Name
- Delivery address
- Telephone number
- Email address
- Order or shipment information
Only information reasonably necessary to fulfil the delivery will be shared.
9. Customer Communications
We may contact you by email or other appropriate communication methods regarding:
- Orders
- Payments
- Delivery
- Returns or refunds
- Account activity
- Customer service requests
- Website or service-related matters
- Security issues
- Important changes affecting our services
These communications are considered service-related and may be sent where necessary to perform a contract, comply with legal obligations or pursue our legitimate interests.
10. Marketing Communications
Where permitted by applicable law, Dirty Brigada may send newsletters, product updates, event information, offers or other marketing communications.
Where consent is required, we will only send such communications after obtaining the appropriate consent.
You can unsubscribe at any time by:
- Using the unsubscribe link included in marketing emails; or
- Contacting us using the details provided in this Privacy Policy.
After unsubscribing, you may still receive essential service-related communications, such as order confirmations or information relating to an existing transaction.
11. Cookies and Similar Technologies
The Dirty Brigada website may use cookies and similar technologies.
Cookies may be used for purposes including:
- Essential website functionality
- Shopping cart functionality
- User account functionality
- Security
- Remembering preferences
- Website performance
- Analytics
- Understanding how visitors use the website
- Marketing and advertising, where applicable
Some cookies are strictly necessary for the website to operate and may therefore be used without consent where legally permitted.
Non-essential cookies, including certain analytics and marketing cookies, may require your consent before being placed on your device.
Where applicable, you can manage your cookie preferences through the cookie consent mechanism provided on the website.
For more information, please refer to the Dirty Brigada Cookie Policy.
12. Third-Party Services
To operate our website and provide our services, we may use third-party service providers.
Depending on the services currently enabled on the website, these may include providers for:
- Website hosting
- Payment processing
- Email delivery
- Newsletter management
- Shipping and delivery
- Website security
- Analytics
- Cookie management
- Technical support
- Website performance
- Fraud prevention
- Other services necessary for operating the website
These providers may process personal data on our behalf or may act as independent controllers for certain processing activities.
Where a provider acts as our processor, we take appropriate steps to ensure that the processing is carried out in accordance with applicable data protection requirements.
13. Data Sharing
We do not sell your personal data.
We may disclose personal data to third parties where this is necessary for the purposes described in this Privacy Policy.
Recipients may include:
- Payment providers
- Shipping and courier providers
- Hosting providers
- IT and technical service providers
- Email and communication providers
- Analytics providers, where applicable
- Security and fraud-prevention providers
- Professional advisers
- Accountants, auditors or legal advisers where necessary
- Public authorities where legally required
- Other service providers necessary to operate our business
We only share information that is reasonably necessary for the relevant purpose.
14. International Data Transfers
Some third-party service providers may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer is carried out in accordance with the GDPR.
Depending on the circumstances, this may include:
- A European Commission adequacy decision
- Standard Contractual Clauses approved by the European Commission
- Other appropriate safeguards recognised under applicable data protection law
Where required, further information regarding applicable safeguards can be obtained by contacting us.
15. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods depend on the type of data and the reason for processing.
For example:
Account Data
Account information may be retained for as long as your account remains active.
Where you request account deletion, we may delete or anonymise your information, subject to data that we are legally required to retain.
Order Data
Order and transaction information may be retained for as long as necessary to:
- Complete the transaction
- Provide customer support
- Manage returns or disputes
- Meet accounting and tax obligations
- Comply with applicable legal requirements
Customer Communications
Communication records may be retained for as long as necessary to resolve the relevant request, maintain appropriate business records or protect our legal interests.
Marketing Data
Marketing subscription information is generally retained until you withdraw your consent or unsubscribe, unless another lawful basis applies.
Technical and Security Data
Certain technical, security or log information may be retained for a limited period where necessary for security, troubleshooting, fraud prevention or legal purposes.
When personal data is no longer required, it will be securely deleted or anonymised where appropriate.
16. Data Security
We take reasonable technical and organisational measures designed to protect personal data against:
- Unauthorised access
- Unauthorised disclosure
- Accidental loss
- Destruction
- Alteration
- Unlawful processing
- Other security risks
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
You should also take reasonable steps to protect your own account credentials and devices.
If you become aware of any suspected unauthorised access to your account, please contact us as soon as possible.
17. Your Rights Under the GDPR
Subject to the conditions and limitations provided by applicable law, you may have the following rights:
Right of Access
You have the right to request confirmation as to whether we process personal data relating to you and, where applicable, request access to that data.
Right to Rectification
You may request correction of inaccurate personal data or completion of incomplete personal data.
Right to Erasure
In certain circumstances, you may request that we delete your personal data.
This right is not absolute and certain data may need to be retained where required by law or where another lawful ground for retention applies.
Right to Restriction of Processing
In certain circumstances, you may request that we restrict the processing of your personal data.
Right to Object
You may have the right to object to certain processing activities, particularly where processing is based on legitimate interests or where personal data is processed for direct marketing.
Where you object to direct marketing, we will stop processing your personal data for that purpose.
Right to Data Portability
Where applicable, you may request to receive personal data that you have provided to us in a structured, commonly used and machine-readable format, or request that it be transmitted to another controller where technically feasible and legally applicable.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Rights Relating to Automated Decision-Making
Where applicable, you have rights concerning decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects.
18. How to Exercise Your Rights
To exercise your data protection rights, please contact us:
Email: [PRIVACY EMAIL]
Please clearly describe your request and provide sufficient information for us to identify the relevant account or data.
For security purposes, we may need to verify your identity before fulfilling certain requests.
We will respond to valid requests within the timeframe required by applicable data protection law.
Under the GDPR, requests are generally handled without undue delay and, in principle, within one month of receipt. This period may be extended where legally permitted, particularly for complex or numerous requests.
19. Right to Lodge a Complaint
If you believe that our processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.
If you are located in the European Union, you may generally lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work or the place of the alleged infringement, subject to the applicable rules.
For users in Greece, the competent supervisory authority is:
Hellenic Data Protection Authority (HDPA)
Website: [OFFICIAL HDPA WEBSITE]
You may contact the relevant supervisory authority directly if you believe your data protection rights have not been respected.
20. Children’s Privacy
The Dirty Brigada website and services are not specifically directed at children.
We do not knowingly collect personal data from children where such collection is prohibited by applicable law.
If you believe that a child has provided personal data to us without the required legal basis or parental authorisation, please contact us.
If we become aware that we have collected personal data from a child in circumstances where such data should not have been collected, we will take reasonable steps to delete it.
21. Automated Decision-Making and Profiling
We do not currently make decisions producing legal or similarly significant effects on individuals based solely on automated processing, including profiling, unless this is specifically disclosed to you and carried out in accordance with applicable data protection law.
Where automated decision-making or profiling is used in a manner covered by the GDPR, we will provide the information required by applicable law, including information about the logic involved and the envisaged consequences where required.
22. Third-Party Websites and Links
The Dirty Brigada website may contain links to third-party websites, platforms or services.
These third-party websites operate independently from Dirty Brigada and may have their own privacy policies and terms.
We are not responsible for the privacy practices, security or content of third-party websites.
We recommend reviewing the privacy policy of any third-party service before providing personal information.
23. Social Media and Embedded Content
Dirty Brigada may use links, integrations or embedded content from third-party platforms, such as social media, video or other online services.
Depending on how these services are implemented, visiting a page containing embedded content may allow the relevant third party to collect technical or usage information.
Where applicable, such technologies will be handled in accordance with our cookie and consent mechanisms and the privacy policies of the relevant third-party providers.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services
- Changes to the website
- Changes to third-party services
- Changes in applicable legislation
- Changes in how we process personal data
- Improvements to our privacy practices
When we make changes, we will update the “Last updated” date at the top of this page.
Where required by law, we will provide additional notice or obtain consent before implementing material changes.
25. Contact Us
If you have any questions about this Privacy Policy, our privacy practices or the processing of your personal data, please contact us:
Dirty Brigada
Legal name: [LEGAL COMPANY NAME]
Address: [FULL BUSINESS ADDRESS]
Email: [CONTACT EMAIL]
Privacy email: [PRIVACY EMAIL]
Telephone: [PHONE NUMBER, IF APPLICABLE]
We are committed to handling privacy-related enquiries fairly, transparently and in accordance with applicable data protection law.
26. Applicable Law
This Privacy Policy is governed by the applicable European Union data protection framework, including Regulation (EU) 2016/679 (General Data Protection Regulation), together with applicable national legislation.
Where mandatory provisions of applicable data protection law provide additional rights or protections, those provisions will apply.