Privacy policy

1. Who we are

This policy explains how vetrina.boutique (“Vetrina”, “we”) collects, uses and protects your personal data when you use the site or place an order. We are the data controller for the purposes of the General Data Protection Regulation (GDPR).

2. Data we collect

Order data. When you place an order we collect your name, shipping and billing address, email address, phone number (where provided), and the contents of your order. Payment is handled by our payment provider; we do not store full card numbers on our servers.

Contact data. If you write to us through the contact form or by email, we hold that correspondence and your name and email address.

Analytics (optional). With your consent via the cookie banner, we record anonymous usage data through Google Analytics 4: page views, referring domains, country-level location, browser and device type. No personal identifiers are included.

Local storage. Your cart contents are stored in your browser's localStorage and never leave your device.

3. How we use your data

• To process and deliver your orders.
• To reply to enquiries sent through the contact form.
• To understand site usage in aggregate, where you have given consent for analytics.
• To meet legal obligations — tax, accounting, and consumer-protection rules that require us to keep order records.

4. Legal basis

Order processing: performance of the contract you enter into when placing an order. Contact correspondence: our legitimate interest in responding to you. Analytics: your explicit consent, which you can withdraw at any time. Record retention: our legal obligations under Italian and EU law.

5. Sharing

We share your data only with the processors required to run the shop — our payment provider for charging your card, our courier for delivering your order, and our email provider for order confirmations. Each acts under a data-processing agreement and may not use your data for their own purposes.

We do not sell your data. We do not share it with advertising networks.

6. Retention

Order records are kept for ten years to satisfy tax and accounting obligations. Contact correspondence is kept for as long as needed to answer your query, then deleted on request. Analytics data is retained by Google Analytics per its own configuration (14 months by default).

7. Your rights

Under the GDPR you have the right to access your data, have it corrected or erased, restrict or object to processing, receive it in a portable format, and withdraw consent at any time (where processing is based on consent). You also have the right to lodge a complaint with your national data-protection authority.

To exercise any of these rights, write to info@vetrina.boutique.

8. Cookies

See the Cookie Policy for the categories of cookies used and how to manage your preferences.

9. Contact

For any privacy question or to exercise your rights, write to info@vetrina.boutique.