In compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Italian data protection laws, this Privacy Policy informs users about the processing of their personal data when accessing or using the La Cura website.

1. Data Controller

The data controller is La Cura — [insert company name / VAT number / address if needed].
For any questions regarding data protection, you can contact us via email: info@lacurapiercing.com

2. Types of Personal Data Collected

Depending on the actions performed, we may process:

Identification and contact data (name, surname, email, shipping address, phone)
Billing and shipping information
Order details (products ordered, order date, shipping status)
Voluntary data provided by the user (e.g. via contact forms)
Technical and browsing data: cookies, IP address, access logs, device/browser info, for site operation and analytics

3. Purpose and Legal Basis for Data Processing

Personal data is processed for these purposes:

Fulfillment of sales contracts (order management, shipping, invoicing)
Compliance with legal and fiscal obligations
Customer service and post-sale support
Sending promotional or informational communications, only with explicit consent
Technical maintenance of the website (cookies, security, hosting)
Improving user experience and analytics (with user consent)

Legal basis may include contract fulfilment, legal obligations, user consent, or legitimate interest as permitted by GDPR.

4. Processing Methods & Data Security

Data is processed using electronic and, where necessary, paper means, ensuring confidentiality and security pursuant to GDPR Article 32.
We store personal data only as long as needed for the purposes described. Specific retention periods apply for different data types:

Order and billing data: as required by law
Marketing data: until consent is withdrawn
Browsing data and cookies: according to our Cookie Policy

5. Data Sharing and Third-Party Processors

Data may be shared with third parties acting as processors, such as payment services, shipping/logistics providers, marketing or analytics platforms — always under GDPR-compliant agreements.
We do not sell or publicly disclose personal data.

6. International Data Transfers

Where necessary, data may be transferred outside the EU, always ensuring appropriate safeguards (e.g. standard contractual clauses) in line with GDPR requirements.

7. Data Subject Rights

Under GDPR, users have the right to:

access their personal data
request correction or completion
request deletion (“right to be forgotten”)
request restriction of processing
object to processing on legitimate grounds
obtain data portability
withdraw consent at any time
lodge a complaint with the competent supervisory authority

Requests can be sent via the contact email above.

8. Consent and Withdrawal

For processing that requires consent (e.g. marketing, analytics, non-essential cookies), user consent is obtained in a specific, informed, and explicit manner (e.g. via cookie banner or checkbox).
Users may withdraw consent at any time, without prejudice to lawful processing prior to withdrawal.

9. Cookies and Tracking Tools

We use essential cookies strictly necessary for site functionality.
For profiling, marketing, or analytics cookies, explicit consent is required.
Our Cookie Policy details the types of cookies used, purposes, and how users can manage their preferences.

10. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, and in compliance with applicable legal obligations.
Retention periods vary based on data category (order, billing, marketing, cookies) and legal requirements.

11. Changes to the Policy

La Cura may update the Privacy Policy at any time.
Any changes will be published on the website with the effective date. Users are encouraged to review the policy periodically.

12. Contact Information

For any questions or requests regarding personal data, please contact us at:

info@lacurapiercing.com