1. Who is responsible for your data
The data controller is , , . For any privacy question or request, write to .
2. What we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name, email, phone, delivery and billing address, order contents | Processing and delivering your order; returns and guarantee claims | Performance of the contract (Art. 6(1)(b) GDPR) | 10 years for accounting and tax records; otherwise as long as needed for the order and any claims |
| Payment details | Taking payment. Card data is handled directly by our payment partner | Performance of the contract | As required by the payment partner and the law |
| Messages you send us (name, email, order number, message, any photos) | Answering your request, advising on sizes, handling returns and guarantee claims | Performance of the contract or our legitimate interest in answering you (Art. 6(1)(b) and (f)) | 24 months after the conversation ends |
| Reviews (name you choose, email, country, rating, text) | Publishing your review and checking whether you ordered from us. Your email is never published | Your consent, given when you submit the review (Art. 6(1)(a)) | Until you ask us to remove the review |
| Email for the first-order discount and the newsletter | Sending your discount code; news about new pieces and restocks only if you joined the list or ticked the box | Performance of your request; your consent for marketing (Art. 6(1)(a)), which you can withdraw at any time | Until you unsubscribe |
| Saved bag email (only if you ask us to save your bag) | Sending you the link to your bag | Your consent (Art. 6(1)(a)) | Until you unsubscribe, at most 30 days |
| Technical data (IP address, browser, pages requested) | Running the website securely and preventing abuse | Legitimate interest (Art. 6(1)(f)) | Server logs, up to 30 days |
Giving us your order details is necessary to buy: without them we cannot deliver. Everything else is optional.
3. Purchase notices on the website
The website may show a short notice such as "Someone in Milan bought …". It only uses the city of a recent order, never names, emails or addresses, and cannot identify you.
4. Who receives your data
We share data only with providers that help us run the store, under contracts that require them to protect it and use it only on our instructions:
- our hosting and database providers;
- the courier that delivers your parcel, which receives your name, address, phone number and email to deliver it and send you tracking updates;
- our payment partner, to process payments and prevent fraud;
- our email provider, to send order confirmations, replies and, if you joined the list, our news;
- accountants, tax advisers and authorities, when the law requires it;
- the advertising and analytics services listed in the Cookie policy, if any are active, which act as independent or joint controllers for the measurement of our ads.
5. International transfers
We deliver only within the European Union. When a provider is based outside the European Economic Area, we rely on an adequacy decision of the European Commission or the EU Standard Contractual Clauses.
6. Your rights
You can ask us at any time to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw any consent you gave (without affecting what we did before). Write to ; we answer within one month. You also have the right to complain to a data protection authority, in particular in the country where you live or work. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).
7. Cookies and local storage
Your browser stores a few items that make the store work, such as your bag. Any advertising or analytics services we use to measure our ads are listed too. Details are in the Cookie policy.
8. Security
The website uses an encrypted (HTTPS) connection. Access to customer data is limited to the people who need it to handle your order.
9. Children
Our store is not intended for children under 16 and we do not knowingly collect their data.
10. Changes to this policy
If we change this policy, we publish the new version here with its date. If the changes are significant, we tell you.