Privacy Policy

Maglieria piegata su un tavolo in legno chiaro nella boutique XO
Privacy Policy

Information notice provided pursuant to Articles 13-14 of Regulation (EU) 2016/679 ("GDPR").

Data Controller

xo boutique di piera guerrini — Largo San Nicola 5, 66043 Casoli (CH), Italy — VAT ID IT02860680699 — email: pieraguerrini998@gmail.com.

Data Processed

  • Contact and Personal Data: name, shipping and billing address, email, phone number.
  • Purchase Data: orders, transactions, preferences. Payment data is processed directly by payment providers; the Data Controller does not store full card details.
  • Browsing Data: IP address, device, cookies, and similar technologies.

Purposes and Legal Bases

  • Management of orders, shipments, returns, and customer service — performance of a contract (Art. 6.1.b GDPR).
  • Tax and legal compliance — legal obligation (Art. 6.1.c).
  • Sending promotional communications (newsletter) — consent (Art. 6.1.a), revocable at any time via the unsubscribe link.
  • Fraud prevention and website security — legitimate interest (Art. 6.1.f).

Recipients

Data is processed through the Shopify platform (e-commerce hosting) and may be disclosed to couriers, payment providers, tax consultants, and technical service providers, acting as processors or independent controllers. Shopify may transfer data to non-EU countries based on Standard Contractual Clauses.

Retention

Data related to orders is stored for the time required by tax obligations (10 years); data for marketing purposes until consent is revoked.

Data Subject Rights

Pursuant to Articles 15-22 GDPR, you have the right to access, rectification, erasure, restriction, portability, and objection, as well as to withdraw consent. You can exercise these rights by writing to pieraguerrini998@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Cookies

The website uses technical cookies necessary for operation and, with prior consent, measurement and marketing cookies. You can manage your preferences via the cookie banner.

Minors

The website is not intended for children under 16 years of age and does not knowingly collect their data.

Last updated: August 2026