Privacy Policy

1. Who is responsible for your data

The data controller for this website is Luca Agnelli, operating under the brand name KeepOrRelease.

For any questions regarding the processing of your personal data or to exercise your privacy rights, please contact us at keepmemoryshop@gmail.com.

Website: https://keeporrelease.com

2. What we process and why

• Order and delivery data (name, email, billing country, purchased items). Processed to perform the sales contract and deliver your digital files.
• Payment data. Card and payment details are collected and processed directly by Shopify and its payment providers on the Shopify checkout — we never see or store full payment credentials.
• Technical data (IP address, browser, timestamps) processed by our hosting provider in server logs, to keep the site available and secure.
• Your cookie choice (categories, date, policy version), stored to prove and honour your consent, as required by law.

3. Legal bases

Performance of a contract (Art. 6(1)(b) GDPR) for orders and delivery; legitimate interest (Art. 6(1)(f)) for site security and fraud prevention; consent (Art. 6(1)(a), and Art. 122 of the Italian Privacy Code for cookies) for any optional analytics or marketing cookies; legal obligation (Art. 6(1)(c)) for invoicing and tax records.

4. Who we share data with

We use the following processors that are actually in place today:

• Shopify — store back end, cart, checkout and payment processing.
• Lovable — website hosting and delivery.
• Google Fonts — the site loads the Inter typeface from Google's font servers, which means your IP address is transmitted to Google when the page loads. This request sets no cookies.
• Email delivery of your order confirmation: keepmemoryshop@gmail.com.

No advertising, analytics or profiling provider is currently installed on this website. If one is added, this policy and the Cookie Policy will be updated and your consent will be requested again.

5. Transfers outside the EU/EEA

Shopify, Lovable and Google are established or operate in part outside the EU/EEA. Transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Copies of the safeguards can be requested at [keepmemoryshop@gmail.com].

6. Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations.

Order and invoicing records are generally retained for 10 years where required by applicable Italian accounting and tax laws.

Cookie consent preferences are stored for 6 months, or until you change or withdraw your preferences, in accordance with our cookie consent system.

Technical and server logs are retained for the period necessary to maintain website security, troubleshoot technical issues, and ensure proper operation, according to the retention policies of our hosting providers.

For questions regarding data retention, please contact us at keepmemoryshop@gmail.com.

7. Your rights

You can request access, rectification, erasure, restriction, portability and object to processing, and withdraw consent at any time — for cookies, through Cookie settings in the footer. Write to Keepmemoryshop@gmail.com. You may also lodge a complaint with the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or your local supervisory authority.

8. Cookies

Details of every cookie and storage item used on this site are in the Cookie Policy.