Privacy Policy

Last Updated: [Insert Date]

<SHOP NAME> is committed to protecting your personal data and ensuring transparency about how we collect, use, and store your information. This Privacy Policy explains our practices in compliance with the General Data Protection Regulation (GDPR).

1. Data Controller

  • Business Name: <SHOP NAME>
  • Owner: [Your Full Name]
  • Contact Information:
    • Email: [Insert Email Address]
    • Phone: [Insert Phone Number]
    • Address: [Insert Business Address]

2. Data We Collect

We may collect and process the following personal data:

  • Personal Information: Name, email address, phone number, and shipping address.
  • Payment Information: Payment details (processed securely via third-party payment gateways; we do not store payment information).
  • Website Usage Data: IP address, browser type, and activity on our website (via cookies).

3. How We Use Your Data

Your data is used for the following purposes:

  • Processing and fulfilling your orders.
  • Communicating updates, promotions, or issues related to your purchases.
  • Improving our website and user experience.
  • Complying with legal obligations (e.g., tax documentation).

4. Legal Basis for Processing

We process your data under these legal bases:

  • Contractual Obligation: To process your orders.
  • Legitimate Interests: To improve our services and address customer inquiries.
  • Legal Compliance: To comply with tax and accounting laws.

5. Data Sharing

We only share your data when necessary:

  • Shipping Providers: For delivering your orders.
  • Payment Processors: For securely handling payments.
  • IT Services: Hosting provider O2Switch for website operations.
  • Legal Authorities: If required by law or for legal claims.

6. International Transfers

As we ship worldwide, your data may be shared with delivery providers operating in your region. When such transfers occur, we ensure compliance with GDPR.

7. Data Retention

We retain your data as follows:

  • Order and payment records: 10 years (as required by Italian tax law).
  • Marketing communications: Until you opt out or withdraw consent.
  • Cookies: Refer to our Cookie Policy for specific retention periods.

8. Your Rights

You have the following rights under GDPR:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data (except where legally required).
  • Objection: Opt out of marketing communications.
  • Portability: Receive your data in a machine-readable format.

To exercise your rights, contact us via email: [Insert Email Address].

9. Cookies

We use cookies to improve website functionality and analyze usage. For more details, refer to our Cookie Policy.

10. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

11. Amendments

We may update this Privacy Policy to reflect changes in legal requirements or business practices. Updates will be posted on this page, with the effective date indicated.

12. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us:

  • Contact Form
  • Email: [Insert Email Address]
  • Phone: [Insert Phone Number]