Privacy Policy

Wassim Sayeg and Leon Ak jointly operate Scrubs Wise and determine how visitor information is used.

We act as joint controllers for the personal data described in this policy. You may contact either operator through the address above to exercise your rights.

Before publication: agree and document your respective responsibilities for privacy requests, security, provider management, and deletion, and insert a short summary of that arrangement.

When you submit a request, we collect your full name, email address, university, selected product, colour, size, pickup location, and any optional telephone number or notes.

We use this information to respond, check availability, coordinate collection, and take steps towards a purchase at your request. Requests and their status are stored in our Convex database.

The legal basis is Article 6(1)(b) GDPR: steps requested before entering into a contract and, where applicable, performing that contract.

Fields marked as required are needed to process your request through the form. You may contact us by email if you need assistance. Optional fields may be left blank.

Submitting a product request does not subscribe you to marketing emails.

Our contact form collects your name, email address, and message. We use these to respond to your enquiry.

General enquiries are processed on the basis of our legitimate interest in responding to correspondence, under Article 6(1)(f) GDPR. Purchase-related enquiries may instead be processed under Article 6(1)(b).

Messages are delivered through our email system to our Gmail inbox. Although there is no separate contact-message database, message information can remain in email-delivery records and the mailbox.

Please do not submit health information or other sensitive information in free-text fields.

Subscription requires your email address; your first name is optional. We record your subscription status, signup source, consent timestamp, and information needed to confirm or cancel your subscription.

You must select the consent checkbox and confirm your email address before your subscription becomes active. Confirmation links expire after 24 hours.

We use this information to send Scrubs Wise updates based on your consent under Article 6(1)(a) GDPR.

Every newsletter includes an unsubscribe link. You can also withdraw consent by emailing us. Withdrawal does not affect processing that was lawful before withdrawal.

Unsubscribing stops newsletter delivery. It does not automatically delete the subscriber record.

We use hosting, database, image-delivery, and managed email services to operate the website and deliver messages.

Technical processing can include connection information, security records, and email-delivery information. Our email system retains delivery jobs and their status.

Necessary technical processing is based on our legitimate interests in providing a reliable, secure website under Article 6(1)(f) GDPR. Processing needed to deliver order-related messages also supports the purposes described in section 2.

The contact and subscription forms include a hidden anti-spam field used to discard automated submissions.

The website uses Macaly’s built-in platform analytics to understand traffic and website use. According to our current configuration, these analytics do not store cookies or other information on visitor devices.

We do not use Google Analytics, Meta Pixel, or advertising trackers.

Before publication: confirm what Macaly processes to generate analytics, including IP-address handling, visitor/session identification, retention, and whether personal data is involved. State the applicable legal basis after that review. Cookieless does not necessarily mean anonymous.

Our website uses the services below. Providers receive the information necessary for the services they perform. Their role may be that of a processor, subprocessor, or independent controller, depending on the service.

Our current Convex deployment is reported as using the EU region eu-west-1. This does not establish that all processing, support access, email delivery, backups, or subprocessors remain within the European Economic Area.

Before publication: identify applicable non-EEA processing, relevant providers and destinations, and the transfer mechanism actually covering each service. Explain how visitors can obtain information about the applicable safeguards.

Deletion is currently managed manually:

Subject to applicable conditions, you can request access, correction, deletion, restriction of processing, or data portability.

You can object to processing based on legitimate interests for reasons relating to your situation. You can object to direct marketing at any time and withdraw any consent you have given.

Contact scrubwise@gmail.com to exercise your rights. You may exercise your rights against either joint controller.

You may also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic: dataprotection.gov.sk/en/

We will revise this policy when our processing practices change and update the date above.