GDPR Compliance.
Information on how we handle EU citizen data in accordance with the General Data Protection Regulation.
Last updated: 16 July 2026
Many of the brands and buyers we work with are based in the European Union. We take the EU General Data Protection Regulation (GDPR) seriously and have built our data practices around it. This page explains, in plain terms, how we comply with GDPR and how you can exercise your rights. It works alongside our full Privacy Policy.
Data controller
For personal data collected through this website, the data controller is:
Hera Sweaters Limited
Pechain, Jampur, Sonargaon, Narayanganj, Bangladesh
Email: info@herasweaters.com
Phone: +880 1881-500051
What we process and why
We only process the personal data needed to respond to business inquiries and manage buyer relationships — typically your name, company, work email, country, order-volume range, and the project brief you send us. We explain each purpose and its legal basis in our Privacy Policy.
We do not sell personal data, share buyer briefs with third parties for their own use, or carry out automated decision-making or profiling.
Legal bases for processing
Under GDPR Article 6, we rely on:
- Steps prior to a contract — to respond to your inquiry and prepare quotes or samples at your request.
- Legitimate interests — to communicate with you, operate and secure the website, and improve our services, always balanced against your rights.
- Consent — for non-essential cookies and analytics, where required. You can withdraw consent at any time.
- Legal obligation — where we must process data to comply with the law.
Your rights under GDPR
If you are in the EU/EEA, you have the right to:
- Be informed about how your data is used
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Eraseyour data (“right to be forgotten”)
- Restrict processing of your data
- Object to processing based on legitimate interests
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time, where processing relies on consent
- Lodge a complaint with a supervisory authority
There is no charge to exercise these rights, and we will not treat you differently for doing so.
How to make a request
Email info@herasweaters.comwith the subject line “GDPR Request” and tell us which right you would like to exercise. To protect your data, we may ask you to verify your identity before we act.
We will respond within one month of receiving your request. If your request is complex, we may extend this period by up to two further months, and we will let you know if that is the case.
International data transfers
Hera Sweaters operates from Bangladesh, so responding to your inquiry involves transferring your data outside the EU/EEA. Where we do this, we put appropriate safeguards in place with our service providers to protect your data to a standard consistent with GDPR. Contact us for details of these safeguards.
Data retention
We keep your data only as long as necessary for the purpose it was collected, then securely delete or anonymize it. See the retention section of our Privacy Policy for details.
Right to complain
If you believe we have not handled your personal data properly, please contact us first at info@herasweaters.com so we can put it right. You also have the right to complain to your national data-protection authority. A list of EU authorities is available through the European Data Protection Board (edpb.europa.eu).
Contact
Hera Sweaters Limited
Email: info@herasweaters.com
Phone: +880 1881-500051
Pechain, Jampur, Sonargaon, Narayanganj, Bangladesh