---
title: Privacy Policy | IAM Fashion
description: How IAM Fashion collects, uses, shares and protects personal information, including cookies, marketing consent and your privacy rights.
---

[IAM Fashion](https://iamfashion.ca/?hsLang=en-ca)

[Home](https://iamfashion.ca/?hsLang=en-ca)[Off-price](https://iamfashion.ca/off-price?hsLang=en-ca)

# Privacy Policy — IAM Fashion

**Effective date:** 22 October 2026  
**Last updated:** October 22, 2026

This Privacy Policy explains how IAM Fashion ("IAM Fashion", "we", "us") collects, uses, shares and protects personal information when you visit **iamfashion.ca**, contact us, request offers, register as a B2B buyer, or otherwise do business with us. IAM Fashion is a business-to-business (B2B) wholesaler of premium and luxury off-price fashion. We have hubs in Toronto (Canada) and Bratislava (Slovakia) and offices in Prague (Czech Republic) and Munich (Germany).

## Summary

| Section | In short |
| --- | --- |
| 1. Who we are | IAM Fashion s.r.o. (Slovakia) and IAM Fashion Consulting (Canada) are the controllers of your personal data. |
| 2. Data we collect | Business contact details; buyer, account and offer-request data; meeting bookings; chat messages; emails; transaction data; analytics and cookie data; technical logs. |
| 3. Purposes & legal bases | To answer enquiries, run the B2B relationship, process orders and payments, send offers (with consent where required), and secure and improve the site. |
| 4. Retention | Only as long as needed. Typical periods are listed below. |
| 5. Sharing | Service providers (HubSpot, Google, Cloudflare, Stripe, KROS and others listed), logistics partners and advisers. We do not sell personal information. |
| 6. International transfers | Data may move between Canada, the EU/EEA, the UK and the US, with appropriate safeguards (adequacy decisions, SCCs, the EU-US Data Privacy Framework). |
| 8. Your rights | Access, correction, deletion, objection, portability, withdrawal of consent, and the right to complain in your region (EU/EEA, UK, Canada, US states). |
| 9. Cookies | Necessary cookies always; analytics and advertising cookies only with your consent where required. |
| 10. Marketing emails | Sent under CASL, GDPR and ePrivacy rules. You can unsubscribe at any time. |
| 11–14 | Children, security, changes to this policy, and how to contact us. |

## 1. Who we are (data controller)

IAM Fashion operates through two companies:

- **IAM Fashion s.r.o.**, Jesenského 194/12, 811 02 Bratislava – Staré Mesto, Slovakia. IČO 50532391 · DIČ 2120361540 · VAT ID SK2120361540. Phone +421 902 920 908.
- **IAM Fashion Consulting**, a partnership registered in Ontario, 34 Andrea Lane, Vaughan, ON L4L 1E7, Canada. Business Number (BIN) 1001061725 · HST 79994 1364 RT0001. Phone +1 647 496 4351.

Offices: Prague — Seifertova 16, Czech Republic, +420 702 235 861; Munich — Willstätterstraße 23, Germany. These offices are not separate legal entities and act on behalf of IAM Fashion s.r.o.

**Which company is your controller:** IAM Fashion s.r.o. for visitors, customers, suppliers and partners in the EU/EEA and the UK, and for business invoiced by IAM Fashion s.r.o. IAM Fashion Consulting for those in Canada, the United States and the rest of North America, and for business invoiced by IAM Fashion Consulting. For the website and our shared CRM, the two companies act as joint controllers. You may exercise your rights with either company at the contact details below. The two companies have agreed between themselves how they share these responsibilities (Art. 26 GDPR), and the essence of that arrangement is set out in this policy.

**Contact for privacy matters:** info@iamfashion.ca  
**Data Protection Officer:** Not appointed. We are not required to appoint one. Privacy questions are handled by the Privacy Officer below.  
**Privacy Officer (Canada, PIPEDA accountability; responsible for privacy for both companies):** Alexander Montchovsky, President of IAM Fashion Consulting and Managing Director of IAM Fashion s.r.o. — info@iamfashion.ca  
**EU representative (Art. 27 GDPR):** Not required. IAM Fashion s.r.o. is established in the EU (Slovakia).  
**UK representative:** Not appointed. Our processing of UK residents' data is occasional and low-risk, so the exemption in Art. 27(2) UK GDPR applies.

## 2. Personal information we collect

Because we serve businesses, most of the data we handle relates to people acting for a company: buyers, owners and staff of retailers, brands and suppliers.

**a) Information you give us**

- **Contact and enquiry forms** on our website: first name, last name, business email and company name, plus any message you include.
- **Newsletter and offers sign-up:** first name, last name and email.
- **Offer requests and B2B buyer approval:** company name, contact person, business email and phone, country, business/tax or VAT number, type of business, sales channels, brands and categories of interest, order volumes and budget, and shipping and billing addresses.
- **Meeting bookings** (HubSpot Meetings): name, email, chosen time and any notes you provide.
- **Live chat** (where enabled): your messages and any contact details you share.
- **Correspondence** with our team by email, phone or messaging, and data from trade shows or business cards.
- **Transaction data:** purchase orders, invoices, payment status, delivery, customs and export details. Card and online payments are processed by Stripe; we do not store full card numbers. Invoices and accounting records are kept in KROS and Doklado.

**b) Information collected automatically**

- **Analytics and cookie data:** pages viewed, referring site, device and browser type, approximate location derived from your IP address, interactions with our emails and pages, and cookie identifiers (see Section 9).
- **Server and security logs:** IP address, date and time, requested URL, user agent and security signals. These are processed by our hosting and content delivery providers (HubSpot and Cloudflare) to deliver and protect the website.

**c) Information from other sources**

- Publicly available business information, such as company websites, business registers and professional networks like LinkedIn. We use it to verify buyers and to identify relevant business contacts.

We do not intentionally collect sensitive (special-category) data.

## 3. Why we use your data and our legal bases

| Purpose | Examples | GDPR / UK GDPR legal basis |
| --- | --- | --- |
| Responding to enquiries and meeting requests | Replying to forms, chat and emails; booking calls | Steps prior to a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) |
| Buyer onboarding and verification | Checking that you are a genuine trade buyer before we share offers and cost sheets; credit and KYC checks | Contract (6(1)(b)); legitimate interests (6(1)(f)); legal obligation where applicable (6(1)(c)) |
| Providing offers, processing orders, payments and deliveries | Stock lists, quotes, purchase orders, invoicing, payments, logistics and customs | Contract (6(1)(b)) |
| Accounting, tax and legal compliance | Bookkeeping, customs, VAT/HST | Legal obligation (6(1)(c)) |
| B2B marketing | Offer emails, newsletters, event invitations | Consent (6(1)(a)) or, for existing business customers where the law permits, legitimate interests (6(1)(f)) |
| Website analytics and improvement | Google Analytics, HubSpot analytics | Consent (6(1)(a)) |
| Advertising measurement | Google tags (if advertising features are enabled) | Consent (6(1)(a)) |
| Security, fraud prevention, site operation | Cloudflare bot protection, logs | Legitimate interests (6(1)(f)); strictly necessary cookies |
| Defending legal claims | Keeping records of agreements | Legitimate interests (6(1)(f)) |

Where we rely on legitimate interests, our interest is in running and growing a B2B wholesale business and keeping our services secure. You may object at any time (see Section 8). Under Canadian law, we collect, use and disclose personal information with your knowledge and consent, which may be express or implied as appropriate, and only for purposes that a reasonable person would consider appropriate.

## 4. How long we keep data

| Data | Typical retention |
| --- | --- |
| Enquiries and prospects with no business relationship | Up to 24 months after last contact |
| Customer, buyer and supplier account data | Duration of the relationship plus 3 years |
| Invoices, accounting and customs records | As required by law: 10 years for IAM Fashion s.r.o. (Slovak Accounting Act); 6 years from the end of the tax year for IAM Fashion Consulting (Canada Revenue Agency rules) |
| Marketing consent records and unsubscribes | As long as needed to prove consent or honour opt-outs |
| Analytics data | Google Analytics: 14 months; cookies as listed in Section 9 |
| Server and security logs | Per our providers' standard periods (generally short-term) |

When data is no longer needed, we delete or anonymise it.

## 5. Who we share data with

We do **not sell** personal information. We share it only with:

- **Our two companies and our offices** (Canada, Slovakia, Czech Republic, Germany), to serve you.
- **Service providers (processors)** acting on our instructions, including: 
    - **HubSpot, Inc.** (USA, with EU data processing options) — website hosting (CMS), forms, CRM, email marketing, meeting scheduling, live chat, cookie consent banner and analytics;
    - **Google LLC / Google Ireland Ltd.** — Google Workspace (business email and file storage), Google Analytics 4 and Google Tag Manager, Google Fonts (font delivery on certain pages) and YouTube (embedded videos);
    - **Cloudflare, Inc.** — content delivery, performance and security;
    - **jsDelivr** (open-source content delivery network) — delivers an image-gallery script on certain pages;
    - **Stripe** — online and card payments;
    - **KROS a.s.** and **Doklado** — invoicing and accounting software;
    - **Our banks** (including Tatra banka) — payments and bank transfers.
- **Logistics partners** — freight forwarders, carriers and customs brokers (for example DSV) — when we ship goods and file export declarations.
- **Suppliers and brand owners** — only the information needed to complete a transaction. We do not disclose our buyers' identities to suppliers unless this is needed for delivery or required by the brand.
- **Professional advisers** (our external accountant, lawyers and auditors), and **authorities** (tax, customs and law enforcement) where the law requires it.
- **A buyer or successor** in a merger, acquisition or sale of assets, subject to confidentiality.

## 6. International transfers

We operate in Canada and the EU, and some of our providers are based in the US. Accordingly:

- Transfers from the EU/EEA/UK to **Canada** rely on the European Commission's adequacy decision for Canada (covering commercial organisations subject to PIPEDA) and the UK equivalent.
- Transfers to the **United States** rely on the EU-US Data Privacy Framework (and its UK Extension) where the recipient is certified. Otherwise they rely on the European Commission's **Standard Contractual Clauses** (and the UK Addendum), with supplementary measures where needed.
- Personal information handled by IAM Fashion Consulting may be processed outside Canada, including in the EU and the US, and may be accessible to authorities there under local law.

You can request a copy of the relevant safeguards at info@iamfashion.ca.

## 7. Wholesale offers and B2B marketing

IAM Fashion Consulting (34 Andrea Lane, Vaughan, ON L4L 1E7, Canada) sends wholesale and off-price offer emails on behalf of itself and its affiliate IAM Fashion s.r.o. (Bratislava, Slovakia). The two companies act as joint controllers for this processing; the essence of their arrangement is available on request at info@iamfashion.ca. We process business contact data (name, job title, company, business email and phone, and correspondence history). We obtain it directly from you, from your company's public website or professional profiles (including LinkedIn), from trade fairs and business referrals, and from prior business dealings. Legal basis: our legitimate interest in B2B marketing of relevant wholesale offers (Art. 6(1)(f) GDPR), or your consent where national law requires it. We keep this data for as long as we have an active business relationship, and delete it or stop using it for marketing after 2 years without engagement. You may object at any time, free of charge. Click UNSUBSCRIBE in any email, or write to info@iamfashion.ca. One unsubscribe or objection applies to both IAM Fashion Consulting and IAM Fashion s.r.o. and is honoured within 10 business days (immediately where EU law requires). You also have the rights described in "Your rights" below, including the right to lodge a complaint with a supervisory authority (in Slovakia: Úrad na ochranu osobných údajov SR).

## 8. Your privacy rights

To exercise any right, email **info@iamfashion.ca**. We may need to verify your identity first. We reply within the legal deadline: one month under GDPR, 30 days under PIPEDA and 45 days under US state laws, each extendable where the law allows. We will not discriminate against you for exercising your rights.

**EU/EEA and UK (GDPR / UK GDPR)**  
 You have the right to access your data, to have it rectified or erased, to restrict its processing, and to receive it in a portable format. You may object to processing based on legitimate interests and, at any time, to direct marketing. You may withdraw consent at any time; this does not affect processing that took place before you withdrew. You also have the right not to be subject to solely automated decisions with legal or similarly significant effects, and we do not make such decisions.  
 You may lodge a complaint with a supervisory authority, in particular in the country where you live or work. Our lead authority is the **Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR)**, Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk. Other authorities include the Czech ÚOOÚ (uoou.gov.cz), the competent German authority (e.g. BayLDA for Bavaria), and the ICO in the UK (ico.org.uk).

**Canada (PIPEDA and provincial laws)**  
 You may request access to, and correction of, your personal information, ask how it has been used and disclosed, and withdraw consent (subject to legal or contractual restrictions). You may complain to the **Office of the Privacy Commissioner of Canada** (priv.gc.ca) or the competent provincial commissioner.  
*Quebec (Law 25):* residents of Quebec also have rights to data portability and de-indexation, and to be informed of automated decisions. Our person in charge of the protection of personal information is Alexander Montchovsky, President (info@iamfashion.ca). Complaints may be made to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

**United States (California CCPA/CPRA and other state privacy laws)**  
 Depending on your state of residence (e.g. California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others) and whether those laws apply to us, you may have the right to know about and access the personal information we collect, to delete it, to correct it, and to obtain a portable copy. You may also have the right to opt out of the "sale" of personal information, of "sharing" for cross-context behavioural advertising, and of targeted advertising and profiling. You may use an authorised agent, and you may appeal our decision by replying to our response.

- **Categories collected (last 12 months):** identifiers and business contact information; commercial information (offers, orders); internet and network activity; approximate geolocation; professional information (company and role). Sections 2–5 describe the sources, purposes and recipients, and Section 4 describes retention.
- **Sale/sharing:** We do not sell personal information for money. Some state laws may treat analytics or advertising cookies as "sharing" or "targeted advertising". These cookies run only after you consent, and you can opt out at any time through the cookie settings or by enabling **Global Privacy Control (GPC)**, which we honour as an opt-out request for that browser.
- We do not knowingly sell or share the data of consumers under 16, and we do not use sensitive personal information for purposes that would require an opt-out.

## 9. Cookies and similar technologies

Cookies are small files placed on your device. We use strictly necessary cookies to run and secure the site. Where you consent through our cookie banner, we also use analytics and advertising cookies. You can change your choice at any time via the "Cookie settings" link in the footer or through your browser settings. We use Google Consent Mode, so Google tags default to "denied" until you consent.

| Cookie | Provider | Purpose | Category | Duration |
| --- | --- | --- | --- | --- |
| `__cf_bm` | Cloudflare | Bot management / security | Strictly necessary | 30 minutes |
| `_cfuvid` | Cloudflare | Rate limiting / security | Strictly necessary | Session |
| `__hs_cookie_cat_pref`, `__hs_gpc_banner_dismiss`, `__hs_notify_banner_dismiss` | HubSpot | Remember your cookie choices | Strictly necessary | Up to 6 months |
| `__hssc`, `__hssrc` | HubSpot | Session tracking for analytics | Analytics | 30 minutes / session |
| `__hstc`, `hubspotutk` | HubSpot | Identify visitors; link form submissions to visits | Analytics | 6 months |
| `messagesUtk` | HubSpot | Recognise chat visitors | Functional | 6 months |
| `_ga`, `_ga_NHG655PM58` | Google Analytics 4 | Distinguish users; persist session state | Analytics | Up to 2 years |
| Google Tag Manager container `GTM-WW8ML29H` | Google | Loads tags (sets no cookies itself) | — | — |
| YouTube embed cookies (e.g. `YSC`, `VISITOR_INFO1_LIVE`) | Google/YouTube | Video playback and preferences | Functional / advertising | Session – 6 months |

Google Fonts and jsDelivr requests may transmit your IP address to those providers. This list may change as our site changes; the cookie banner always shows the current cookies.

## 10. Marketing communications (CASL and EU rules)

We send commercial electronic messages (offers, stock lists, newsletters) only with your express or implied consent, as permitted by Canada's Anti-Spam Legislation (CASL) and EU/UK ePrivacy rules. Each message identifies us, includes our contact details and has an **unsubscribe** link. We process opt-outs within 10 business days. You can also unsubscribe by emailing info@iamfashion.ca.

## 11. Children

Our services are for businesses and are not directed at individuals under 16 (or the applicable age in your jurisdiction). We do not knowingly collect their personal information. If you believe we have, contact us and we will delete it.

## 12. Security

We use appropriate technical and organisational measures to protect personal information, such as encryption in transit (HTTPS), access controls, providers' security certifications and staff confidentiality obligations. No system is completely secure. Where the law requires, we will notify you and the authorities of a breach.

## 13. Changes to this policy

We may update this policy. The "Last updated" date shows the latest version. We will highlight material changes on this page or tell you about them directly where appropriate.

## 14. Contact us

**IAM Fashion s.r.o.** — Jesenského 194/12, 811 02 Bratislava – Staré Mesto, Slovakia · IČO 50532391 · VAT ID SK2120361540 · +421 902 920 908  
**IAM Fashion Consulting** (Ontario partnership) — 34 Andrea Lane, Vaughan, ON L4L 1E7, Canada · BIN 1001061725 · +1 647 496 4351  
 Prague: Seifertova 16, Prague, Czech Republic · +420 702 235 861  
 Munich: Willstätterstraße 23, Munich, Germany  
 Email: info@iamfashion.ca · Web: iamfashion.ca

[Privacy Policy](https://iamfashion.ca/privacy-policy?hsLang=en-ca)Cookie settings[Terms](https://iamfashion.ca/iam-fashion-consulting-terms-and-conditions-expert-fashion-services?hsLang=en-ca)

© 2026 IAM Fashion

```json
{
  "@context" : "https://schema.org",
  "@type" : "WebPage",
  "dateModified" : "2026-10-22",
  "description" : "How IAM Fashion collects, uses, shares and protects personal information, including cookies, marketing consent and your privacy rights.",
  "inLanguage" : "en",
  "name" : "Privacy Policy | IAM Fashion",
  "publisher" : {
    "@type" : "Organization",
    "name" : "IAM Fashion",
    "url" : "https://iamfashion.ca/"
  },
  "url" : "https://iamfashion.ca/privacy-policy"
}
```