Privacy policy

Last Updated: October 6, 2026

This Privacy Policy (the “Policy”) describes how STBRUNO GLOBAL TRADING – FZCO, operating 1StopFiller.com, collects, uses, shares, retains, and protects personal information in connection with our Website, sales activities, and customer-support services.

It applies to Website visitors, customers, representatives of businesses, delivery recipients, and anyone who contacts us or provides personal information through our services.

Personal information means information that identifies an individual or can reasonably be linked to them.

This Policy provides information about our data practices. Visiting the Website, placing an Order, or continuing to use our services does not, by itself, constitute consent to processing that requires separate consent under applicable law.

1. Who Is Responsible for Your Information?

1StopFiller.com is operated by STBRUNO GLOBAL TRADING – FZCO, a company registered in the United Arab Emirates.

References to “we,” “us,” and “our” in this Policy mean that company.

We act as a data controller where we determine the purposes and means of processing personal information for our business activities.

Our use of third-party manufacturers, suppliers, fulfilment partners, and administrative support does not remove our responsibilities for processing that we control.

Some providers, including payment providers, carriers, and Shopify for certain services, may act as independent controllers. Their own privacy notices apply to processing for which they are independently responsible.

Privacy contact	Details
Email	sales@1stopfiller.com
Telephone	+370 617 46717
WhatsApp	+370 617 46717

2. Personal Information We Collect

The information we process depends on how you interact with us, the services you request, and applicable legal requirements.

Information category	Examples	Main purposes
Contact and account information	Name, email address, telephone number, account information, and communication preferences	Account management, identification, and communication
Billing and delivery information	Billing address, delivery address, recipient information, and delivery instructions	Invoicing, fulfilment, transportation, and delivery assistance
Order and transaction information	Products, quantities, purchase history, payment status, transaction references, and discounts	Processing purchases, maintaining records, refunds, and dispute resolution
Payment and refund information	Payment confirmations, transfer receipts, and account details provided for refunds	Payment verification, reconciliation, and refund processing
Professional and business information	Business name, professional registration, licence information, and relevant authorisations	Eligibility assessment and regulatory compliance
Customs and shipment information	Required recipient identification, import documents, tracking information, and clearance correspondence	Shipping, customs procedures, and delivery investigations
Device and usage information	IP address, browser and device information, approximate location derived from IP address, and Website interactions	Website functionality, security, performance, and permitted analytics
Shopping activity	Viewed Products, cart activity, purchases, and interactions with offers	Shopping features, service improvement, and permitted personalisation
Communications and Claim records	Emails, messages, complaints, photographs, videos, and supporting documents	Customer service, investigations, remedies, and legal Claims
Submitted content	Reviews, testimonials, photographs, and videos	Publication or promotional use where authorised and lawful
Privacy and consent records	Cookie preferences, marketing choices, consent withdrawals, and privacy requests	Respecting preferences and documenting compliance

We seek to collect information relevant to the particular purpose. Please do not provide unnecessary identity documents, financial details, or sensitive information.

Payment Information

Where card payments are available, they are handled through payment providers.

Do not send complete payment-card numbers or card security codes through email, WhatsApp, or other customer-support channels.

We may receive transaction references, payment status, and limited payment information needed to confirm payment or resolve a dispute.

Bank account details supplied for refunds or payment verification form part of the information we process and protect. This Policy therefore does not state that we never hold banking information.

3. Where Information Comes From

Personal information may be obtained:

• directly from you when you purchase, create an account, contact us, or submit a Claim;

• from a purchaser who identifies you as a delivery recipient or business contact;

• automatically through Website interactions and related technologies;

• from payment providers, carriers, and fulfilment partners;

• from professional registers or relevant authorities when verification is necessary;

• from technology and service providers supporting our operations; and

• from social media or messaging platforms through which you interact with us.

If you provide another person’s information, disclose only what is necessary and ensure you are permitted to provide it.

Where appropriate, make this Policy available to that person so they understand how their information may be used.

4. How We Use Information and Our Legal Grounds

Where a legal basis is required, the appropriate basis depends on the processing purpose and the circumstances.

Processing purpose	Legal basis, where applicable
Processing an individual customer’s purchase, payment, delivery, or refund	Performance of a contract or requested steps before entering a contract
Communicating with representatives of business customers	Legitimate interests in managing business relationships
Performing legally required checks and maintaining statutory records	Compliance with applicable legal obligations
Conducting proportionate additional eligibility and fraud checks	Legitimate interests in lawful trading, security, and fraud prevention, where permitted
Responding to support requests, complaints, and disputes	Contract performance, legal obligations, or legitimate interests, depending on the circumstances
Protecting accounts, systems, and transactions	Legitimate interests in security and fraud prevention, together with applicable legal obligations
Improving services through processing that does not require consent	Legitimate interests in understanding and improving our services, subject to applicable law
Using optional cookies, analytics, tracking, or advertising technologies	Consent where required, or another basis expressly permitted by applicable law
Sending promotional messages	Consent or a specific legal permission for direct marketing
Publishing identifiable testimonials or promotional material	Consent or another appropriate permission and legal basis
Establishing, exercising, or defending legal Claims	Legitimate interests, together with any additional conditions required for sensitive information

When relying on legitimate interests, we assess the effect on individuals and whether their interests or fundamental rights override our interests.

This table does not replace consent or any additional legal condition where required.

If you do not provide information necessary for a service, we may be unable to process your Order, verify eligibility, complete Delivery, or fulfil another request. We will explain the relevant requirement where appropriate.

5. Shopify and Shopify Network Intelligence

Our online store uses Shopify to support shopping, checkout, and related services.

Shopify processes personal information associated with access to and use of the store, including information provided during browsing, purchasing, and checkout.

Where Shopify Network Intelligence or related enhanced services are enabled, Shopify may combine information from interactions with our store with information from interactions with Shopify and other merchants.

Depending on the enabled features, this processing may support personalisation, analytics, store improvements, and advertising-related services.

For certain enhanced services, Shopify acts independently and is responsible for handling privacy requests concerning its processing.

Further information and available choices can be found through:

• Shopify Consumer Privacy Policy

• Shopify Privacy Portal

Applicable consent requirements and opt-out choices must be respected when these services are used.

6. Service Providers and Other Disclosures

We may disclose personal information where necessary and lawful for the purposes described in this Policy.

Relevant recipients may include:

• Technology and service providers: Hosting, software, account management, communications, customer support, analytics, and operational assistance.

• Payment and financial providers: Payment processing, verification, reconciliation, refunds, and fraud prevention.

• Fulfilment and logistics partners: Order preparation, transportation, Delivery, and shipment investigations.

• Manufacturers, suppliers, and qualified specialists: Assessment of Product quality, authenticity, safety, or conformity concerns.

• Customs and regulatory authorities: Clearance, verification, reporting, and legal compliance.

• Professional advisers and insurers: Accounting, legal advice, insurance administration, and disputes.

• Marketing and advertising partners: Where relevant features are used and disclosure is permitted by applicable law and your privacy choices.

We seek to disclose only information relevant to the recipient’s role and the processing purpose.

Providers processing information on our behalf must be subject to appropriate contractual protections. Independent controllers process information under their own legal obligations and privacy notices.

Information may also be disclosed where reasonably necessary to:

• comply with binding legal requirements;

• protect people against harm;

• investigate suspected fraud or unlawful activity;

• establish, exercise, or defend legal Claims; or

• support a genuine business transfer or restructuring, subject to appropriate safeguards and any required notice.

7. Sale, Sharing and Advertising Choices

We do not sell customer lists or personal information in exchange for money.

However, some privacy laws define “sale,” “sharing,” or “targeted advertising” more broadly than a financial transaction.

Depending on the features used, certain disclosures through advertising technologies or Shopify’s enhanced services may fall within those definitions.

Where such processing occurs and an applicable law provides an opt-out right, you may exercise that right through relevant privacy controls or by contacting us.

These disclosures do not mean that unrelated businesses have unrestricted access to your account or complete Order records.

8. Cookies and Similar Technologies

Our Website and relevant technology partners may use cookies, pixels, local storage, and similar technologies.

These may support:

• Essential functionality: Cart operation, checkout, account access, security, and recording privacy choices.

• Preferences: Remembering selected settings and improving convenience.

• Analytics: Measuring Website usage and performance.

• Marketing and personalisation: Campaign measurement, personalised content, and relevant advertising.

Where applicable law requires consent, optional technologies must not operate before that consent is provided.

You may manage available choices and withdraw consent through the Website’s cookie or privacy controls. Browser settings may also restrict or remove cookies, although some restrictions can affect Website functionality.

Rejecting optional cookies does not remove access to essential purchasing functions.

Information about the technologies in use, their providers, purposes, and durations should be available through the relevant cookie disclosures and controls.

9. Marketing Communications

Promotional messages may be sent where you have consented or another specific legal permission applies.

You can opt out by:

• using the unsubscribe link in a marketing email;

• following an available opt-out instruction in another communication channel; or

• contacting sales@1stopfiller.com.

Opting out of marketing does not prevent necessary communications about purchases, payments, Delivery, recalls, or requests you have submitted.

We may keep limited suppression records to ensure your marketing opt-out remains effective.

Marketing permission is separate from acceptance of our Terms and Conditions.

10. Professional Verification and Identity Documents

Where necessary, we may process professional registration details, business information, identity information, or authorisation documents to assess eligibility or satisfy legal requirements.

We aim to:

• request only information relevant to the verification;

• restrict access to personnel and providers who require it;

• avoid keeping complete document copies where a limited verification record is sufficient; and

• retain verification information only for an appropriate purpose and period.

You may redact unrelated information where it is not required. If an unredacted document is necessary, we will explain the relevant requirement.

11. Product Complaints and Sensitive Information

Some Product complaints may involve treatment photographs, medical reports, or other health-related information.

Please do not send identifiable patient records or unnecessary medical information through ordinary email or messaging. Contact us first so we can establish what is needed and an appropriate method of submission.

Where sensitive information is necessary, we will:

• identify an appropriate legal basis and any additional condition required by law;

• limit use to the relevant investigation, safety obligation, or legal matter;

• restrict access and disclosure; and

• seek anonymised or redacted information where it can fulfil the purpose.

A customer’s permission does not automatically authorise disclosure of another person’s medical information.

Where necessary and lawful, relevant evidence may be shared with a manufacturer, qualified specialist, insurer, legal adviser, or competent authority.

Complaint evidence will not be reused for marketing without separate appropriate permission.

12. Reviews, Photographs and Testimonials

Information included in content submitted for publication may become publicly accessible.

Do not include another person’s identifying or sensitive information without appropriate permission.

Before using identifiable photographs, videos, or testimonials for promotional purposes, we will obtain consent or another permission required by applicable law.

Where publication relies on consent, you may withdraw that consent by contacting us.

We will explain any practical limitations affecting material already lawfully distributed or independently reproduced by other parties.

13. International Processing and Transfers

Our business operates from the United Arab Emirates and uses international technology, service, and fulfilment arrangements.

Personal information may be accessed or processed outside your country of residence, including countries where Shopify, logistics partners, and other relevant providers operate.

Data-protection laws in those countries may differ from those in your country.

Where international transfers are subject to legal restrictions, an appropriate transfer mechanism must be used. Depending on the circumstances, this may include:

• a recognised adequacy decision;

• approved standard contractual clauses or other appropriate contractual safeguards; or

• another legally permitted mechanism or narrowly applicable exception.

Additional safeguards must be applied where required.

You may contact us for information about relevant transfer protections and how to obtain a copy or explanation, subject to necessary redactions.

14. How Long We Keep Information

Personal information is retained for as long as reasonably necessary for the relevant purpose and applicable legal requirements.

Record category	Factors affecting retention
Account and customer records	Account activity, continuing service needs, and recordkeeping obligations
Orders, invoices, payments, and refunds	Accounting, tax, transaction, and legal-Claim requirements
Professional verification records	Verification purpose, regulatory obligations, and the need for continued retention
Shipping and customs records	Delivery completion, clearance requirements, disputes, and mandatory records
Complaints and Product-safety records	Investigations, traceability, reporting obligations, and applicable Claim periods
Marketing preferences	Changes or withdrawal of permission, with limited records retained to honour opt-outs
Device and analytics information	Technology purpose, configured duration, and applicable consent requirements
Privacy requests	Evidence of appropriate handling and compliance with legal obligations

An active dispute, investigation, or binding legal requirement may justify longer preservation.

When information is no longer needed, it should be deleted or anonymised. Backup copies may remain temporarily within established backup cycles and must not be restored to ordinary use without an appropriate reason.

A deletion request does not automatically require removal of information that we must lawfully retain.

15. Information Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

Measures must be proportionate to the information and risks involved and may include access restrictions, secure systems, confidentiality obligations, and service-provider safeguards.

No Website, communication channel, or storage system can be guaranteed completely secure.

Protect your account credentials and avoid sending full card details or unnecessary sensitive information through support channels.

If a personal data breach occurs, we will assess and meet applicable response and notification obligations.

16. Your Privacy Rights

Depending on applicable law and your location, you may have the right to:

• receive information about how your personal information is processed;

• request access to your information;

• correct inaccurate or incomplete information;

• request deletion;

• restrict certain processing;

• obtain eligible information in a portable format;

• object to processing based on legitimate interests;

• object to direct marketing;

• withdraw consent without affecting processing lawfully undertaken before withdrawal;

• opt out of qualifying sale, sharing, or targeted advertising;

• exercise applicable protections concerning significant automated decisions; and

• complain to a competent data-protection authority.

These rights are subject to applicable legal conditions and exceptions. Where required, we will explain why a request cannot be fulfilled or is subject to limitations.

Where EU or UK data-protection rules apply, objections to processing for direct marketing must be respected.

17. Additional United States Privacy Rights

Where a relevant US state privacy law applies to our business and your information, additional rights may include:

• knowing the categories and specific pieces of information collected;

• obtaining information about sources, purposes, and recipient categories;

• requesting correction or deletion of eligible information;

• opting out of qualifying sale, sharing, or targeted advertising;

• limiting specified uses of sensitive information where legally available;

• submitting requests through an authorised agent;

• appealing a request decision where required; and

• exercising privacy rights without unlawful discrimination.

Recognised opt-out preference signals, including Global Privacy Control, must be honoured where legally required.

The rights and procedures available depend on the law applicable to the request. This section does not state that every US privacy law applies to every customer or transaction.

18. How to Submit a Privacy Request

Use the following contact details:

Contact channel	Details
Email	sales@1stopfiller.com
Telephone	+370 617 46717
WhatsApp	+370 617 46717

Explain the right you wish to exercise and provide enough information for us to identify the relevant records.

We may use proportionate information to verify your identity or an authorised agent’s authority. Excessive documentation will not be requested merely to discourage a request.

Requests are normally handled without charge, subject to lawful exceptions.

Where EU or UK GDPR applies, we generally respond within one month. A permitted extension may apply to complex or numerous requests; notice and reasons will be provided within the initial period.

Where the CCPA applies, qualifying access, correction, and deletion requests generally have a forty-five (45) day response period, subject to a lawful extension. Some choices, including opt-outs, have different deadlines.

We will respect other applicable statutory deadlines.

If we cannot fulfil a request completely, we will explain the relevant reason and any available review or complaint procedure.

19. Children

Our Website and services are directed to adults and are not intended for individuals under eighteen (18).

If you believe a minor has provided personal information through our services, contact us.

We will assess the circumstances and take appropriate action, including deletion where required. Limited records may be retained only where a lawful obligation or safeguarding purpose justifies retention.

20. External Websites and Communication Platforms

External Website links and interactions through social media or messaging services may involve processing by those providers.

Their privacy notices apply to activities for which they act independently.

Review the relevant provider’s privacy information before supplying sensitive or unnecessary personal information through those services.

21. Changes to This Policy

We may revise this Policy to reflect changes in our processing practices, services, or legal requirements.

Each revised version will show an updated date. Additional notice of material changes will be provided where required.

Publishing an updated Policy or continued use of the Website does not replace obtaining consent where a new processing activity requires it.

22. Contact and Complaints

For questions about this Policy, personal-information handling, or privacy rights, contact:

Detail	Information
Website	1StopFiller.com
Data controller	STBRUNO GLOBAL TRADING – FZCO
Email	sales@1stopfiller.com
Telephone	+370 617 46717
WhatsApp	+370 617 46717

Please identify your message as a privacy enquiry where appropriate.

You may complain directly to a competent data-protection authority without first contacting us.

Where EU or UK rules apply, the relevant authority may include the authority in your place of habitual residence, your place of work, or the location of an alleged infringement.