Privacy policy
Updated
We collect only the information we need to take your order, deliver it and look after you afterwards. This policy explains what that is, why we need it and what you can do about it.
What we collect
- Order details. Your name, email, delivery address and the products you buy.
- Account details. If you create an account, your password (stored encrypted) and your order history.
- Payment details. Card payments are handled by our payment provider. We only see the last four digits and the card type, never the full number.
- Messages. Anything you send us by email or through the contact form.
- Newsletter. Your email address, if you sign up.
- Site usage. Pages visited and the device and browser you use, collected only if you accept analytics cookies.
How we use it
- To process, pack and deliver your orders, and to handle returns and refunds.
- To answer your questions and help when something goes wrong.
- To send you the newsletter, if you asked for it. Every email has a link to unsubscribe.
- To understand which pages work and improve the site, if you accept analytics cookies.
We never sell your data, and we do not use it for advertising on other websites.
Who we share it with
We share your data only with the companies that help us run the shop, and only what each one needs:
- Couriers receive your name, address and phone number to deliver your parcel.
- Our payment provider processes your payment.
- Our email provider sends order confirmations and, if you signed up, the newsletter.
- Our hosting provider stores the website and its data within the European Union.
How long we keep it
We keep order records for ten years, as Italian tax law requires. Account details are kept until you delete your account. Newsletter addresses are removed as soon as you unsubscribe. Messages are deleted two years after the conversation ends.
Your rights
Under the General Data Protection Regulation you can ask us to:
- Show you the data we hold about you.
- Correct anything that is wrong.
- Delete your data, except order records we must keep by law.
- Stop using your data for the newsletter or analytics.
- Send your data to you in a format you can take elsewhere.
Write to us and we will reply within 30 days. You also have the right to complain to your local data protection authority.
Changes to this policy
If we change this policy, we will update the date at the top of the page. If the change is significant, we will also email customers with an account.
Contact
Questions about your data can be sent to privacy@kinfolk.test.