Privacy Policy
We are committed to protecting your privacy and processing your personal data in accordance with Regulation (EU) 2016/679 ("GDPR"), the Italian Personal Data Protection Code (Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018), and any other applicable data protection legislation.
1. Data Controller
The Data Controller is:
Alexandra Cameos S.r.l.
Registered office: [Full Address, City, Postal Code, Italy]
VAT number: IT[xxxxxxxxxx]
Email: privacy@alexandracameos.com
Telephone: [+39 xxx xxx xxxx]
For any questions regarding your personal data, you may contact us at the above details or write to our Data Protection contact at dpo@alexandracameos.com.
2. Personal Data We Collect
2.1 Data You Provide Directly
- Identity data: first name, last name
- Contact data: email address, telephone number, postal address
- Account data: username, password (stored in encrypted form), purchase history
- Payment data: billing address, payment method details (processed by our payment providers; we do not store full card numbers)
- Order data: items purchased, delivery address, order notes
- Communications data: messages, enquiries, or feedback you send us
- Marketing preferences: whether you opt in or out of marketing communications
2.2 Data We Collect Automatically
When you visit our Website, we automatically collect certain technical data through cookies and similar technologies, including:
- IP address and approximate geolocation
- Browser type and version, operating system, device type
- Pages visited, time spent on pages, referring URLs
- Clickstream data and interaction with Website features
Please refer to our Cookie Policy for further details.
2.3 Data from Third Parties
We may receive personal data about you from third parties such as payment processors, shipping carriers, or analytics providers, solely for the purposes described in this Policy.
3. Purposes and Legal Bases for Processing
Processing your orders and managing the contract (Legal basis: Art. 6(1)(b) GDPR)
We process your identity, contact, and payment data to receive and fulfil your order, manage returns, and handle after-sales enquiries.
Compliance with legal obligations (Legal basis: Art. 6(1)(c) GDPR)
We process certain data to comply with Italian and EU legal obligations, including tax and accounting requirements and consumer protection laws.
Customer account management (Legal basis: Art. 6(1)(b) GDPR)
If you create an account, we process your data to manage your profile, order history, and preferences.
Marketing communications (Legal basis: Art. 6(1)(a) GDPR)
With your explicit consent, we may use your email address to send you newsletters, promotional offers, and new collection launches. You may withdraw your consent at any time.
Improvement of our Website and services (Legal basis: Art. 6(1)(f) GDPR)
We process aggregated and anonymised usage data to improve our Products and services and prevent fraud.
Prevention of fraud and security (Legal basis: Art. 6(1)(f) GDPR)
We may process certain data to detect and prevent fraudulent transactions and ensure the security of our Website.
4. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with the following categories of recipients, only to the extent necessary for the purposes described above:
- Payment processors (e.g. Shopify Payments, PayPal, Stripe)
- Shipping and logistics providers
- IT and platform service providers (e.g. Shopify Inc.)
- Marketing and analytics providers (e.g. Google, Meta, Klaviyo)
- Legal, accounting, and compliance advisors
- Public authorities, where required by law
5. International Data Transfers
Some of our service providers are based outside the EEA. Where we transfer your data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions under Article 45 GDPR.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Order and transaction data is typically retained for 10 years in accordance with Italian tax law. Marketing data is retained until you withdraw consent.
7. Your Rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15): to obtain a copy of your personal data
- Right to rectification (Art. 16): to correct inaccurate or incomplete data
- Right to erasure (Art. 17): to request deletion of your data
- Right to restriction of processing (Art. 18): to limit how we use your data
- Right to data portability (Art. 20): to receive your data in a machine-readable format
- Right to object (Art. 21): to object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent (Art. 7(3)): at any time, without affecting prior processing
To exercise any of these rights, please contact us at privacy@alexandracameos.com. We will respond within 30 days. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.
8. Children's Privacy
Our Website and Products are not intended for children under the age of 18. We do not knowingly collect personal data from children under 18. If you believe we have collected data from a child, please contact us at info@alexandracameos.com.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration, including TLS/SSL encryption and access controls. In the event of a personal data breach likely to result in high risk to your rights, we will notify you in accordance with Article 34 GDPR.
10. Cookies and Tracking Technologies
Our Website uses cookies and similar technologies. For full details, please refer to our Cookie Policy.
11. Third-Party Links
Our Website may contain links to third-party websites. This Privacy Policy applies solely to our Website. We are not responsible for the privacy practices of third-party sites.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on the Website with a revised "Last updated" date. For significant changes, we will notify you by email or by a prominent notice on the Website.
13. Contact Us
Alexandra Cameos S.r.l.
[Full Address, City, Postal Code, Italy]
Email: info@alexandracameos.com