Privacy Policy

Depending on your use of the site, we may process the following categories of data:

• identification data, such as first and last name;
• contact data, such as address, e-mail, and phone number;
• billing data and tax information, if provided;
• data relating to orders, purchased products, returns, and refunds;
• information related to shipping and delivery;
• customer account data and protected credentials;
• communications sent to customer service;
• preferences regarding newsletters and promotional communications;
• technical and browsing data, such as IP address, browser, device, logs, and online identifiers;
• information collected through cookies and similar technologies, according to your expressed preferences.

We do not directly collect or store full payment card details.

Data may be collected:

• directly from the user during a purchase or account creation;
• when a form is filled out or customer service is contacted;
• during a return, refund, or exchange request;
• automatically during site navigation;
• through payment providers, couriers, and parties involved in order fulfillment;
• through analytical or advertising tools, when permitted and subject to consent if required.

Personal data may be processed to:

• manage orders, payments, shipments, returns, and refunds: processing is necessary for the performance of the contract or pre-contractual measures requested by the user;
• create and manage customer accounts: processing is necessary to provide the requested service;
• respond to support requests: processing is necessary to handle the request and, when applicable, execute the contract;
• fulfill tax, accounting, and legal obligations: processing is necessary to comply with legal obligations;
• prevent fraud, abuse, and security issues: processing is based on the controller's legitimate interest in protecting their business and users;
• manage any disputes and protect rights: processing is based on the legitimate interest of exercising legal defense;
• send newsletters and promotional communications: processing is based on consent, when required;
• use non-technical analytical, advertising, or profiling cookies: processing is based on user consent.

Consent may be revoked at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Providing the data marked as mandatory at checkout is necessary to conclude and execute the order. Failure to provide such data could prevent purchase, payment, or delivery.

Providing data for newsletters, marketing, and profiling is optional. Refusal does not prevent you from browsing the site or making purchases.

Electronic payments are handled by the providers selected at checkout through secure links and encrypted protocols.

Full card details, such as number, expiration date, and security code, are transmitted directly to the payment service provider and are not viewed or fully stored by SOLE S.R.L.

Payment providers may process data as independent controllers, according to their own privacy policies and for security, fraud prevention, and regulatory compliance purposes.

Within the limits necessary for their respective activities, personal data may be communicated to:

• authorized personnel of SOLE S.R.L.;
• Shopify and e-commerce platform providers;
• hosting, technical support, and cybersecurity providers;
• management software, warehouse systems, and integration services;
• payment providers and anti-fraud services;
• couriers, logistics operators, and collection points;
• e-mail service, customer support, and communication providers;
• statistical, advertising, and marketing service providers, subject to consent when required;
• accountants, consultants, lawyers, and insurance companies;
• public, administrative, tax, or judicial authorities as required by law.

Providers who process data on behalf of the controller are appointed as data processors pursuant to Article 28 of the GDPR, when necessary. The updated list can be requested from the controller.

Some technology providers may process or store personal data in countries located outside the European Economic Area.

When necessary, such transfers are carried out based on an adequacy decision of the European Commission, standard contractual clauses, or another mechanism provided by Articles 44 and following of the GDPR.

Information on the applicable safeguards can be requested from the data controller.

Data is stored for the time necessary for the purposes for which it was collected and in compliance with legal obligations.

• data relating to orders, payments, invoices, and accounting documentation are stored for the period required by civil and tax law, generally ten years;
• account data is stored until a deletion request is made, barring legal obligations or the need to protect rights;
• support requests are stored for the time necessary for management and any disputes;
• data used for marketing is processed until consent is withdrawn or opposition is raised, barring periodic checks on its relevance;
• data relating to disputes is stored until the conclusion of the dispute and the expiration of the related limitation periods.

Once the applicable period has expired, the data is deleted, anonymized, or kept solely when required by law.

The site uses technical cookies necessary for operation, security, the shopping cart, checkout, and managing user preferences.

The site may also use analytical, advertising, or profiling cookies. When required by law, such tools are activated only after consent expressed through the preference panel.

The user can accept, refuse, or modify their preferences using the cookie management tool present on the site.

Continuing navigation or simply scrolling the page does not constitute consent to the use of non-essential cookies.

If the user provides consent, SOLE S.R.L. may use the e-mail address to send newsletters, promotions, product news, and commercial communications.

Consent is optional and can be withdrawn at any time via the unsubscribe link present in the communications or by contacting the controller.

Withdrawal does not affect the ability to make purchases or use other services on the site.

SOLE S.R.L. adopts technical and organizational measures appropriate to the risk to protect personal data from loss, destruction, modification, disclosure, or unauthorized access.

Measures may include secure connections, access restrictions, authentication, internal procedures, backups, and the selection of providers that offer adequate guarantees.

However, no computer system can guarantee absolute security. Users are encouraged to protect their credentials and not share them with third parties.

As a rule, the controller does not adopt decisions based solely on automated processing that produce legal effects or similarly significantly affect the user.

Payment providers and anti-fraud services may use automated systems to evaluate the security of a transaction or authorize a payment, according to their own policies and responsibilities.

The site and sales services are not intended for the knowing collection of personal data from minors lacking the capacity required to make a purchase.

If the controller becomes aware of data collected unlawfully from a minor, they will take the necessary measures to delete it, barring legal obligations.

The controller may update this policy to adapt it to regulatory, technical, or organizational changes.

The updated version is published on this page with the date of the last modification indicated.

In the event of substantial changes, when necessary, users will be informed via the site or through other available contact methods.