Privacy Policy

Privacy Policy – Ladra di Style

Last updated: May 2026

1. Data Controller

The data controller is Ladra di Style, based in Italy, reachable at the email address indicated in the Contact section of the website ladradistyle.com.

2. Data Collected

We collect the following categories of personal data:

  • Identification data: first name, last name, email address, phone number
  • Shipping and billing data: postal address, country
  • Browsing data: IP address, browser type, pages visited, cookies
  • Payment data: securely handled by third-party providers (e.g. Shopify Payments, Stripe); we do not store credit card details

3. Purposes of Processing

Your data is processed to:

  • Process and manage orders
  • Communicate shipping and return updates
  • Fulfil legal and fiscal obligations
  • Send commercial communications (only with explicit consent)
  • Improve the browsing experience on the website

4. Legal Basis

Processing is based on:

  • Performance of a contract (Art. 6(1)(b) GDPR) for order management
  • Legal obligation (Art. 6(1)(c) GDPR) for tax and accounting compliance
  • Consent (Art. 6(1)(a) GDPR) for marketing communications
  • Legitimate interest (Art. 6(1)(f) GDPR) for website security and fraud prevention

5. Recipients of Data

Your data may be shared with:

  • Shopify Inc. (e-commerce platform) – based in Canada, deemed adequate under GDPR
  • Couriers and shipping providers for order delivery
  • Payment providers (e.g. Stripe, PayPal)
  • Email marketing services (only if you have given consent)

6. Transfers Outside the EU

Some of our providers (e.g. Shopify) are based outside the EU. Transfers are carried out in compliance with GDPR safeguards (standard contractual clauses or adequacy decisions).

7. Retention Periods

Data is retained for the time strictly necessary for the purposes for which it was collected:

  • Order data: 10 years (Italian fiscal obligation)
  • Marketing data: until consent is withdrawn
  • Browsing data: maximum 13 months

8. Your Rights

Under Arts. 15–22 GDPR, you have the right to:

  • Access your personal data
  • Rectify or update it
  • Request erasure ("right to be forgotten")
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

To exercise your rights, contact us via the Contact page on the website. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Cookies

Our website uses technical cookies and, subject to consent, analytical and profiling cookies. For more information, please refer to our Cookie Policy.

10. Changes to This Policy

We reserve the right to update this Privacy Policy. Any changes will be published on this page with the date of the update indicated.