← Back to home

Privacy Policy

Last updated: 14 September 2026

1. Who is responsible for your data

The data controller for this website is [TO BE COMPLETED BY THE OWNER: legal company name], [TO BE COMPLETED BY THE OWNER: registered address], VAT / tax number [TO BE COMPLETED BY THE OWNER: VAT number]. Privacy contact: [TO BE COMPLETED BY THE OWNER: contact email address].

2. What we process and why

  • Order and delivery data (name, email, billing country, purchased items). Processed to perform the sales contract and deliver your digital files.
  • Payment data. Card and payment details are collected and processed directly by Shopify and its payment providers on the Shopify checkout — we never see or store full payment credentials.
  • Technical data (IP address, browser, timestamps) processed by our hosting provider in server logs, to keep the site available and secure.
  • Your cookie choice (categories, date, policy version), stored to prove and honour your consent, as required by law.

3. Legal bases

Performance of a contract (Art. 6(1)(b) GDPR) for orders and delivery; legitimate interest (Art. 6(1)(f)) for site security and fraud prevention; consent (Art. 6(1)(a), and Art. 122 of the Italian Privacy Code for cookies) for any optional analytics or marketing cookies; legal obligation (Art. 6(1)(c)) for invoicing and tax records.

4. Who we share data with

We use the following processors that are actually in place today:

  • Shopify — store back end, cart, checkout and payment processing.
  • Lovable — website hosting and delivery.
  • Google Fonts — the site loads the Inter typeface from Google's font servers, which means your IP address is transmitted to Google when the page loads. This request sets no cookies.
  • Email delivery of your order confirmation: [TO BE COMPLETED BY THE OWNER: email provider actually used, e.g. Shopify notifications].

No advertising, analytics or profiling provider is currently installed on this website. If one is added, this policy and the Cookie Policy will be updated and your consent will be requested again.

5. Transfers outside the EU/EEA

Shopify, Lovable and Google are established or operate in part outside the EU/EEA. Transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Copies of the safeguards can be requested at [TO BE COMPLETED BY THE OWNER: contact email address].

6. Retention

Order and invoicing records are kept for the period required by tax law ([TO BE COMPLETED BY THE OWNER: retention period applicable to your jurisdiction]). Your cookie choice is kept for 6 months, or until you change or withdraw it. Server logs are kept for [TO BE COMPLETED BY THE OWNER: hosting log retention period].

7. Your rights

You can request access, rectification, erasure, restriction, portability and object to processing, and withdraw consent at any time — for cookies, through Cookie settings in the footer. Write to [TO BE COMPLETED BY THE OWNER: contact email address]. You may also lodge a complaint with the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or your local supervisory authority.

8. Cookies

Details of every cookie and storage item used on this site are in the Cookie Policy.