Privacy Policy
Privacy Policy
Pursuant to EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 and subsequent amendments.
1. Data Controller
Gaddi Isabella
Registered office: Via Andrea del Castagno 4 – 50132 Firenze (FI)
VAT number: 07555820484
Email: info@mylumerya.com
2. Data Collected
While using the site and purchasing products, we collect the following personal data:
- Personal data: first name, last name
- Contact data: email address, phone number
- Shipping data: delivery address
- Payment data: managed directly by payment providers (Shopify Payments, Stripe, PayPal) – we do not store credit card details
- Browsing data: IP address, browser type, pages visited (via technical and analytical cookies)
3. Purpose of Processing
Personal data is processed for the following purposes:
- Processing and managing purchase orders
- Shipping purchased products
- Order-related communications (confirmation, tracking, assistance)
- Statutory tax and accounting compliance
- Website improvement and statistical analysis (only with consent)
- Sending commercial communications and newsletters (only with explicit consent)
4. Legal Basis
Data processing is based on: performance of the sales contract (Art. 6.1.b GDPR), legal obligation (Art. 6.1.c GDPR), and consent of the data subject (Art. 6.1.a GDPR) for marketing purposes.
5. Recipients of Data
Personal data may be shared with:
- Shopify Inc. – e-commerce platform hosting the site (based in Canada, adequately protected under the GDPR)
- Couriers and shippers – for order delivery
- Payment providers – Shopify Payments, Stripe, PayPal for transaction management
- Email marketing services – only if you have consented to the newsletter
Data is not sold to third parties.
6. Data Retention
Order-related data is stored for 10 years in accordance with Italian tax obligations. Data for marketing purposes is stored until consent is revoked.
7. Data Subject Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request data erasure ("right to be forgotten")
- Object to processing for marketing purposes
- Request data portability
- Withdraw consent at any time
To exercise your rights, please write to: info@mylumerya.com
8. Cookies
The site uses technical cookies necessary for its operation and analytical/marketing cookies (only with consent). For more information, please consult our Cookie Policy.
9. Changes to the Privacy Policy
We reserve the right to update this policy. Changes will be published on this page with an indication of the update date.
Last updated: May 2026
