Privacy Policy

DIM Brands International (“DBI”) is a socially responsible manufacturer and leading marketer of everyday clothing with strong apparel brands. In Europe, DIM Brands International markets brands such as Playtex, DIM, Nur Die, Bellinda, Abanderado, and Lovable.

At DBI, we respect our customers and recognize the importance of protecting your privacy and the security of your data. This Privacy Policy provides an overview of the practices of DIM Brands International, its subsidiaries, affiliates, and partners regarding the collection, use, and disclosure of personal data.

Information on the Handling of Personal Data

Name and Address of the Data Controller

DIM France SAS

2 rue des Martinets

92500 Rueil-Malmaison

France
Email the Data Protection Officer: DBI.privacy@dim.com

General Information on Data Processing

At DBI, we place great importance on data protection and the security of our customers’ data. Therefore, personal data is generally processed only when there is a legal basis for doing so. A legal basis may include, for example, the performance of a contract with you, compliance with a legal obligation to which we are subject, or your consent to the processing of personal data. The processing of personal data is carried out in accordance with the applicable provisions of the General Data Protection Regulation (GDPR).

Categories of Data Processed

Below you will find information on the main categories of personal data we may process, as well as the purposes for which we process them.

Master data (e.g., name, address, contact information)
Purpose: Identification, contract management, correspondence
Contract data (e.g., shopping cart contents, orders, invoices)
Purpose: Contract fulfillment, billing, warranty
Payment data (e.g., transactions from payment service providers)
Purpose: Billing, accounting, accounts receivable management
Usage data (e.g., IP address, pages visited, access times)
Purpose: Operation, security, website optimization, and analysis
Communication data (e.g., emails, contact form submissions, newsletters, customer relationship management (CRM))
Purpose: Processing inquiries, providing support, maintaining records, and sending information (only where there is a legal basis)
Other data that you voluntarily provide to us

We may use external service providers to perform certain services. For more information, see “Sharing Your Personal Data” and “Social Media Presence.”

Retention Period

We store the data until the specified purposes of processing have been fulfilled, but no later than 3 years if there has been no contact—i.e., for example, no related orders and no connection to the website—unless another legal basis requires a longer retention period.

Processing Operations

Visiting the Website

Our website is hosted by SHOPIFY International Limited, located at Victoria Building 1-2, Haddington Road, Dublin 4, D04XN32, Ireland.

The hosting provider acts as our data processor and processes data exclusively in accordance with our instructions. If personal data is transferred outside the European Economic Area (EEA), such transfers are protected by appropriate safeguards in accordance with applicable data protection laws. We use OneTrust as our Consent Management Platform (CMP). The platform allows you to view information on each cookie, including its category, purpose, provider and storage period, and to manage or withdraw your consent at any time.

Every time you visit our website, our system automatically collects data and information from your device.

The following data is collected in so-called server log files

Information about the browser type and version used
The user’s operating system
The user’s Internet service provider
The user’s IP address (accessing device)
Date and time of access
Websites from which the user’s system accesses our website, known as the referrer URL (previously visited website)
Web pages accessed by the user’s system via our website

The legal basis for the temporary storage of the data and log files is the company’s legitimate interest (Art. 6(1)(f) GDPR).

The server log files may be used, on the one hand, for security purposes—such as preventing server overload—and, on the other hand, to ensure server capacity and stability. Furthermore, the system’s temporary storage of the IP address is necessary to enable the website to be displayed on your computer in the first place.

Creating a Customer Account and Logging In to the Customer Account

On our website, we offer users the option to create a password-protected customer account by providing personal data. Creating a customer account is voluntary and is intended to provide you with the greatest possible convenience. The data is entered into a form, transmitted to us, and stored. The following data is collected as part of the registration process:

Guest account (optional)
Title (optional)
First Name and Last Name
Address
Email address
Password
Phone number (optional)
Date of birth (optional)

The following data is also stored during registration:

User’s IP address

Date of registration

Your data is used to set up and personalize your user profile as part of the provision of a contractual service. The legal basis for data processing is the performance of a contract. User registration is necessary to fulfill a contract with the user or to carry out pre-contractual measures.

If you wish to delete your account, please contact our customer service team.

Order Processing on the Website

If you place an order selecting France as the destination country, we process your personal data to fulfill your order. You can choose from various payment methods.

The following data is collected during the registration process:

Registration (email, name, etc.)
Shipping and billing addresses
Promo code (if applicable)
Payment methods

We process personal data on the legal basis of fulfilling the contract entered into with the user.

Data regarding your name and address is processed for the purpose of fulfilling the sales contract and processing your order.

If you use a promotional code when placing your order, we will process your data to verify that the code’s terms and conditions are met.

To process payments, we work with payment service providers. For this purpose, we transmit your order data to the payment service provider you have selected, which then processes the payment under its own responsibility. We may receive limited, transaction-related information from the payment service provider (e.g. confirmation that payment was successful, transaction ID, amount, timestamp). We do not receive full payment card details (e.g. card number, CVV) or other sensitive payment credentials unless explicitly stated elsewhere.

If you place an order for export countries (by selecting another country than France as destination), sales activities are handled by our partner Global-E. With regard to these processing activities, we and Global-E are independent data controllers.

Therefore, we recommend that you contact our partner directly if you wish to exercise any of your data protection rights:

Global-E France SAS

320 rue Saint-Honoré

75001 Paris

France

Data Protection Officer’s email: dataprotection@Global-e.com

Loyalty Program

If you have signed up for our loyalty program (DIM family), data may be processed online. For information on participating in our loyalty program and the processing of personal data, please read the terms and conditions provided there.

On our website and, in some cases, through our trusted wholesale or retail partners, you have the option to subscribe to a free newsletter, which you can receive via email. When you sign up for the newsletter, the data entered in the form is transmitted to us. The following data may be collected:

Last name, first name
Address
Email address
Cell phone number

In addition, the following data is collected during registration:

IP address of the device used to access the site
Date of registration

Providing personal data is voluntary. We will only contact you for promotional purposes if you have given your consent; your consent serves as the legal basis for this. You may withdraw your consent at any time and unsubscribe by following the instructions in the message or by contacting our customer service at service@dim.com. The lawfulness of data processing operations already carried out remains unaffected by the withdrawal.

The collection of the user’s email address is used to send the newsletter and other promotional communications. The collection of additional personal data as part of the registration process is intended to prevent misuse of the services or the email address provided.

Online Sweepstakes

From time to time, we offer free participation in contests, sweepstakes, or games—such as the “Wheel of Fortune”—collectively referred to as “contests,” in which users can win discount coupons, online store credit for our online store, or other prizes.

Depending on the scope of the sweepstakes, the personal data that may be processed in this context includes:

Name (first name, last name)
Contact information (email address)

Additional data that may be collected from the winner, depending on the scope of the sweepstakes, for the purpose of awarding the prize includes, among other things:

Mailing address

Participation is always voluntary. The legal basis for the processing is your consent.

We process personal data solely for the purpose of conducting the sweepstakes, selecting and notifying the winner, and awarding the prize. The scope of the data collected depends on the type of sweepstakes and the nature of the prize to be won. For more information, please see the respective terms and conditions.

Customer Service

We offer customer service that can be contacted via email, phone, or the contact form for questions about products, your order, changes to your information in your customer account, or other concerns. The personal data that may be processed in this context includes:

Name
Contact information (email / phone number)
Order number
Invoice number
Other information you voluntarily provide to us

The following data is also stored at the time the message is sent:

Date and time of contact

The legal basis for processing the data is your consent when you contact us on your own initiative and/or the fulfillment of (pre)contractual obligations.

Personal data is processed for the purpose of handling the inquiry submitted as part of the contact. Your feedback and comments also help us further develop and improve our product portfolio.

Customer Reviews and Reputation Management

We use third-party review platforms to allow customers to leave reviews.

If you have provided your prior consent, the data controller may send you an email inviting you to share your experience and leave a review of your purchase.

For the sole purpose of sending this invitation on our behalf, your email address and certain information related to your order (such as the date of purchase and the product category) may be shared with Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark, which acts as a data processor on behalf of DIM pursuant to a data processing agreement entered into in accordance with Article 28 of the General Data Protection Regulation (GDPR).

Trustpilot will process your personal data solely in accordance with our instructions and will not use it for any other purpose.

The legal basis for this processing is your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent at any time by clicking the unsubscribe link included in the emails, without this affecting the lawfulness of the processing carried out prior to such withdrawal.

If you decide to post a review on the Trustpilot platform, Trustpilot A/S will process your personal data as an independent data controller for the purposes of managing and publishing the review, in accordance with its Privacy Policy, available at:

https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms

Following an interaction with customer service, you may receive an invitation from SimpleSat to leave a review. SimpleSat processes customer feedback on our behalf and may act as independent controller for that feedback. Data shared with SimpleSat typically includes survey responses and ratings, contact details when provided and technical/usage metadata.

We use a product review and rating service called Judge.me. The service aggregates ratings, calculates average scores and rankings. Personal data processed typically includes review content, product identifiers, timestamps, basic account information (display name, email if provided) and limited technical data (IP address, device/browser). We are the data controller for data collected on the platform. Judge.me may process data as processor or separate controller under their own privacy terms.

Privacy | Judge.me

Whistleblowing/Anti-Corruption Reporting System

We operate a whistleblowing and anti-corruption reporting system that enables employees and external parties to report suspected legal or compliance violations. The system is operated by an external service provider that acts as our data processor (NAVEX Global) in accordance with Article 28 of the GDPR.

Personal data submitted via the reporting system is processed solely for the purpose of receiving, investigating, and handling reports. Reports may also be submitted anonymously. Access to the information is restricted to authorized personnel and, where necessary, to competent authorities.

Disclosure of Your Personal Data

We may disclose personal data to selected recipients, such as other companies within our DBI Group (based on Article 6(1)(f) and (b) of the GDPR). To support our business operations, we engage carefully selected service providers. These primarily include marketing agencies, marketing software providers, IT service providers or software vendors, CRM system providers, hosting and content delivery services, as well as applicant tracking systems for managing the hiring process. These service providers act solely in accordance with our instructions (pursuant to Article 28 of the GDPR).

To fulfill and ship your order, we may also share your data with payment service providers and shipping service providers. Each of them acts as an independent data controller (pursuant to Article 6(1)(b) of the GDPR).

In addition, personal data may be disclosed to public authorities (e.g., tax authorities, police, public prosecutors, regulatory agencies) if we are required to do so (Article 6(1)(c) of the GDPR).

In the course of our business relationships, your personal data may be transferred to or disclosed to third-party companies, which may also be located outside the European Economic Area (EEA), i.e., in third countries. Such processing is carried out exclusively to fulfill contractual and business obligations and to maintain your business relationship with us. Even if recipients, such as service providers, are based within the EU or the EEA, it is possible that the recipient may transfer personal data to other recipients in a third country. Personal data is transferred to third countries only if adequate safeguards exist in accordance with applicable data protection laws. Transfers may be based on an adequacy decision by the European Commission or, if no such decision exists, on Standard Contractual Clauses (SCCs) and additional safeguards. This is intended to ensure an adequate level of protection. Where necessary, supplementary technical and organizational measures will be implemented.

Social Media Presence

We maintain corporate accounts on various social media platforms (e.g., Facebook, X, Instagram, YouTube, LinkedIn, TikTok). When you click on an external link, your browser establishes a connection to the respective platform. In doing so, technical information such as your IP address and the time of access may be transmitted to the provider.

Further processing of your personal data on the respective platform is the responsibility of the platform operator in accordance with its privacy policy.

We have only limited control over the data processing activities carried out by platform operators.

If you post a comment on our social media channels, your comment will be displayed publicly and will be accessible worldwide. You can delete your comment yourself at any time. Please note that publicly shared content may remain accessible to third parties even after it has been deleted.

Your Rights

If your personal data is being processed, you have the following rights, all of which you can exercise by contacting DBI.privacy@dim.com

Right of Access, Art. 15 GDPR

You may request confirmation as to whether we are processing personal data concerning you. In particular, you may request information via regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, and—if the data was not provided directly by you—the source of your data.

Right to Rectification, Art. 16 GDPR

You have the right to have your personal data rectified and/or completed if the personal data processed about you is inaccurate or incomplete.

Right to Withdraw Consent, Art. 7(3) GDPR

You have the right to withdraw your consent at any time. The withdrawal of consent applies only to the future and does not affect the lawfulness of processing based on consent up to the time of withdrawal.

Right to erasure, Art. 17 GDPR

You have the right to request the erasure of your personal data, provided that the conditions of Article 17 of the GDPR are met and no statutory retention obligations or other legal grounds require further storage.

Right to Restriction of Processing, Art. 18 GDPR

You have the right to request the restriction of processing under the conditions set forth in Article 18 of the GDPR.

Right to Data Portability, Art. 20 GDPR

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and, to the extent technically feasible, to transmit this data to another controller without hindrance.

Right to Object, Art. 21 GDPR

You have the right to object at any time to the processing of personal data concerning you that is based on Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If personal data is processed for direct marketing purposes, you have the right to object at any time and free of charge.

Right to lodge a complaint with a supervisory authority, Art. 77 GDPR

Without prejudice to any other administrative or judicial remedies, you have the right to lodge a complaint with a supervisory authority—in particular in the Member State of your residence, your place of work, or the place where the alleged infringement occurred—if you believe that the processing of your personal data violates the GDPR.

Last updated: September 2026

We reserve the right to change or amend this Privacy Policy at any time in compliance with applicable data protection regulations.