Privacy policy

This English translation is provided for convenience; in case of discrepancy the Italian version prevails.

Last updated: 24 September 2026

This notice explains how Piacersi processes the personal data of people who visit piacersi.shop, create an account, place an order, subscribe to the newsletter, apply to become a partner or contact us. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018). Cookies are described in detail in the Cookie notice.

1. Data controller

Piacersi — Owner: Fratangelo Pina (sole proprietorship) — Viale XXIV Maggio 140, 86100 Campobasso (CB), Italy — VAT number and tax code 01541480701 — REA CB-116567.

E-mail: info@piacersi.shop — Phone: +39 0874 698703.

You can use these contact details for any question about this notice or to exercise your rights.

2. Data Protection Officer (DPO)

We have not appointed a DPO because none of the cases in Article 37 GDPR applies: we are not a public body, and our core activity does not consist of regular and systematic monitoring of individuals on a large scale, nor of large-scale processing of special categories of data.

3. What data we process, why, and for how long

3.1 Browsing and website security

  • Data: IP address, browser and device type, pages visited, date and time of requests, technical cookies.
  • Purpose: running the website, cart and checkout; protecting them against abuse, automated submissions and cyber attacks.
  • Legal basis: performance of a contract or pre-contractual steps taken at your request (Art. 6(1)(b)) and our legitimate interest in website security (Art. 6(1)(f)).
  • Retention: technical cookies for the duration stated in the Cookie notice; system logs for the period set by the Shopify platform.

3.2 Customer account

  • Data: first and last name, e-mail address, saved addresses, order history. You sign in with a one-time code sent to your e-mail address: we do not store passwords.
  • Purpose: giving you access to your account area, your orders and faster checkout.
  • Legal basis: performance of the service contract you accept when creating the account (Art. 6(1)(b)).
  • Retention: until the account is deleted, which you can request at any time at info@piacersi.shop. Order data we are legally required to keep is retained as described in 3.3.

3.3 Orders, payment, shipping and invoicing

  • Data: first and last name, shipping and billing address, e-mail, phone, products purchased, amounts, payment method and payment outcome; for business customers also company name, VAT number and e-invoicing details.
  • Purpose: concluding and performing the sales contract, collecting payment, preparing and shipping the order, sending shipping updates, issuing tax documents, handling withdrawals, returns and refunds.
  • Legal basis: performance of the contract (Art. 6(1)(b)) and compliance with tax and accounting obligations (Art. 6(1)(c)).
  • Payments: full card details never pass through us and are not stored by us; they go directly to the payment service provider. We only see the outcome, the amount and partial information (for example the card network and last digits).
  • Retention: accounting records and tax documents for 10 years (Art. 2220 of the Italian Civil Code and Art. 22 of Presidential Decree 600/1973); other order data for as long as needed to perform the contract and the legal guarantee of conformity, and in any case until the relevant limitation periods expire.

3.4 Customer service, returns and warranty

  • Data: order data, the content of your messages, any photos you send us (for example of a damaged parcel).
  • Purpose: answering support requests, handling complaints, withdrawals, returns, refunds and warranty claims, filing claims with the carrier.
  • Legal basis: performance of the contract (Art. 6(1)(b)) and legal obligations on consumer protection (Art. 6(1)(c)).
  • Retention: for the duration of the case and then 26 months from delivery (24-month legal guarantee plus the period for reporting a defect), unless a dispute is pending, in which case until it is settled.

3.5 Contact form and messages

  • Data: name, e-mail, phone, salon name if given, reason for contact and message text; the same applies if you e-mail or call us directly.
  • Purpose: answering your request.
  • Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b)) or, for requests not related to a purchase, our legitimate interest in replying to people who contact us (Art. 6(1)(f)).
  • Retention: 24 months from the last exchange, unless the request leads to an order, in which case 3.3 applies.

3.6 Partner programme (B2B) application

  • Data: company or salon name, VAT number, first and last name, e-mail and phone of the contact person, billing and shipping address.
  • Purpose: assessing the application, checking that the applicant is a business with a valid VAT number and, if approved, enabling partner pricing on the account.
  • VAT number check: we verify the VAT number against public sources, such as the European Commission's VIES service, the Italian Revenue Agency check, or the Business Register.
  • Legal basis: pre-contractual steps taken at the data subject's request and subsequent performance of the business relationship (Art. 6(1)(b)).
  • Retention: if the application is declined, 12 months from our reply; if approved, for the whole relationship and then as set out in 3.3 for order and invoice data.
  • The newsletter box in the form is optional: the application is assessed whether or not you tick it.

3.7 Newsletter and welcome discount code

  • Data: e-mail address and possibly name; opens and clicks, recorded by the sending tool (Shopify Messaging) to measure interest in our messages.
  • Purpose: sending you news, offers and promotions from Piacersi by e-mail and, when you subscribe, the welcome discount code under the terms set out on the welcome offer terms page.
  • Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 130 of the Italian Privacy Code), given by ticking or completing a sign-up form (site footer, welcome pop-up, sign-in or checkout, partner form). The box is never pre-ticked. Consent is optional and does not affect your purchase.
  • Retention: until you withdraw consent. You can withdraw at any time using the link at the bottom of every e-mail or by writing to info@piacersi.shop; we keep only a record of the withdrawal so that we do not contact you again.

3.8 Cookies and similar technologies

  • Technical cookies: needed for the website, cart, sign-in and checkout to work; no consent required (Art. 122 Italian Privacy Code).
  • Preference, analytics and marketing cookies: set only if you accept them in the banner shown on your first visit (Art. 6(1)(a) GDPR and Art. 122 Italian Privacy Code). Declining does not prevent you from using the website.
  • You can change your choices at any time from the "Cookie preferences" link at the bottom of every page.
  • Duration: as stated for each cookie in the Cookie notice.

3.9 Third-party content: the map

  • Store map (Google Maps, provided by Google Ireland Limited): the map in the site footer does not load until you request it with its button or accept cookies in the banner. Only then does your browser connect to Google and send it your IP address. Legal basis: your consent (Art. 6(1)(a)).
  • The website fonts are hosted on the store's own servers: displaying them does not involve any connection to Google.

3.10 Facebook and Instagram (Meta)

The store is connected to the Facebook & Instagram sales channel of Meta Platforms Ireland Limited, which displays our products on those platforms. The Meta pixel is currently not active. If we enabled it in the future, it would send Meta information about your browsing and purchases on our website only after you consent to marketing cookies (Art. 6(1)(a)). For the collection and transmission of this data Piacersi and Meta are joint controllers (Art. 26 GDPR); Meta's further processing is under its own responsibility and is described in Meta's privacy policy. If you buy directly on Facebook or Instagram, the data collected by Meta is processed under Meta's terms.

3.11 Fraud prevention

  • Data: order and payment data, IP address, device data.
  • Purpose: detecting fraudulent orders and payments. The Shopify platform may flag an order as risky; the decision to cancel it is taken by us, not automatically.
  • Legal basis: our and our customers' legitimate interest in preventing fraud (Art. 6(1)(f) and Recital 47 GDPR).
  • Retention: as for order data (3.3).

3.12 Reviews shown on the website

The website shows reviews published on Google with their authors' names. This data was made public by the authors themselves; the legal basis is our legitimate interest in showing customer opinions (Art. 6(1)(f)). Authors can ask for removal from our website by writing to info@piacersi.shop.

3.13 Legal obligations and protection of rights

We may process data to comply with legal obligations or requests from authorities (Art. 6(1)(c)) and to establish, exercise or defend our rights in or out of court (Art. 6(1)(f)), for as long as necessary and in any case not beyond the applicable limitation periods.

3.14 Website error monitoring (Sentry)

  • Data: if a page of the website fails while you are using it, we collect only technical information about that error: the error message and where in the code it occurred, the page address, browser, operating system and device type and version, date and time, and the last technical events on the page before the error (for example clicks on elements and page loads). The tool is configured not to record your IP address, name, e-mail or other data that identify you; it does not record what you type in form fields, does not replay your session and does not set cookies. If no error occurs, nothing is sent.
  • Purpose: to detect and fix malfunctions of the website, the cart and the product pages, so that the site works properly and securely.
  • Legal basis: our legitimate interest in ensuring that the website works correctly and securely (Art. 6(1)(f) GDPR). You can object at any time by writing to info@piacersi.shop.
  • Provider: Functional Software, Inc. ("Sentry"), acting as data processor (Art. 28 GDPR). Data are stored on servers in the European Union (Germany).
  • Retention: up to 90 days, after which the data are deleted automatically.

4. What happens if you do not provide data

Fields marked as required in the checkout, contact and partner forms are needed to handle your request: without them we cannot fulfil the order, reply or assess the application. Consent to the newsletter and to non-technical cookies is optional and refusing it has no effect on your purchase.

5. Who we share data with

Data is processed by the controller and by people acting under its authority. We do not sell personal data. We share it only with the following, to the extent necessary:

  • Shopify International Limited (Dublin, Ireland), which provides the store platform, hosting, checkout and customer accounts, as processor (Art. 28 GDPR). For some features, such as Shop Pay, the Shop app and the Shopify Network Intelligence service, Shopify acts as an independent controller under its own privacy policy.
  • Payment service providers: Shopify Payments (a Shopify service, with card networks and digital wallets such as Apple Pay and Google Pay) and PayPal (Europe) S.à r.l. et Cie, S.C.A.; they process payment data as independent controllers or as processors, depending on the service.
  • GLS Italy S.p.A. and the GLS network, for delivery: they receive the recipient's name, address, phone and e-mail.
  • Zoho Corporation B.V. (the Netherlands), provider of the info@piacersi.shop mailbox; newsletters are sent with Shopify Messaging, a Shopify platform service.
  • TeamSystem S.p.A. (Fatture in Cloud), for issuing and storing invoices, received through the GetSync connector; 17TRACK, for shipment tracking (it receives the tracking number and the essential delivery details).
  • Tax and accounting adviser, for bookkeeping and tax compliance.
  • Google Ireland Limited, only in the cases described in 3.9.
  • Meta Platforms Ireland Limited, only in the cases described in 3.10.
  • Functional Software, Inc. ("Sentry"), for the website error monitoring described in section 3.14, as data processor; data are stored in the European Union.
  • Public and judicial authorities, where required by law.

6. Transfers outside the European Union

Some providers, or companies in their groups, may process data outside the European Economic Area. Shopify may transfer data to Shopify Inc. in Canada, a country covered by a European Commission adequacy decision, and to providers in the United States. Google and Meta may transfer data to the United States; 17TRACK processes essential shipment data with its own facilities outside the European Union. These transfers rely on the EU-U.S. Data Privacy Framework (Commission adequacy decision of 10 July 2023) where the recipient is certified, or otherwise on the Standard Contractual Clauses approved by the Commission (Implementing Decision (EU) 2021/914). You can ask about the safeguards in place by writing to info@piacersi.shop.

Sentry stores data in the European Union; as a US company it may access them from the United States for support and maintenance, on the basis of the standard contractual clauses included in its data processing agreement.

7. Retention periods at a glance

  • Tax and accounting records: 10 years.
  • Other order, support and warranty data: up to 26 months from delivery or until any dispute is settled.
  • Account: until deletion.
  • Newsletter: until consent is withdrawn.
  • Contact form messages: 24 months.
  • Declined partner applications: 12 months.
  • Technical data on website errors (Sentry): up to 90 days.
  • Cookies: as stated in the Cookie notice.

Once these periods expire, data is deleted or anonymised.

8. Your rights

At any time and free of charge you can ask us for:

  • access to your data and a copy of it (Art. 15);
  • rectification of inaccurate or incomplete data (Art. 16);
  • erasure (Art. 17), except for data we must keep by law;
  • restriction of processing (Art. 18);
  • portability of the data you provided, in a structured, machine-readable format, for processing based on consent or contract (Art. 20);
  • objection to processing based on our legitimate interest, on grounds relating to your particular situation, and at any time and without giving reasons to direct marketing (Art. 21).

We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22).

To exercise your rights, write to info@piacersi.shop. We reply within one month of the request, extendable by two further months for complex requests, in which case we will let you know (Art. 12 GDPR). We may ask for information to verify your identity.

9. Withdrawing consent

Where processing is based on consent you can withdraw it at any time: for the newsletter through the link at the bottom of every e-mail or by writing to us, for cookies through the "Cookie preferences" link at the bottom of every page. Withdrawal does not affect the lawfulness of processing carried out before it (Art. 7(3) GDPR).

10. Complaints to the supervisory authority

If you believe the processing of your data breaches the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, Italy — www.garanteprivacy.it — or with the supervisory authority of the EU country where you live or work or where the alleged infringement took place (Art. 77 GDPR). You may also bring the matter before the courts.

11. Minors

The store is intended for adults: you must have legal capacity to enter into a contract to buy. We do not knowingly collect data from minors. Newsletter sign-up requires a minimum age of 14 (Art. 2-quinquies Italian Privacy Code). If you are a parent or guardian and believe a minor has given us data, write to us and we will delete it.

12. Security

We take appropriate technical and organisational measures to protect data against loss, misuse and unauthorised access: encrypted connection (HTTPS) across the website, payments handled by certified providers, restricted and protected access to the store administration. No system is completely invulnerable: in the event of a personal data breach likely to result in a high risk to you, we will inform you as required by Art. 34 GDPR.

13. Changes to this notice

We may update this notice, for example when we introduce a new service or the law changes. The current version is always published on this page with its last-updated date. Where changes concern processing based on consent, we will ask for it again when required.