Informativa sulla privacy

This Privacy Policy explains how gingersuptown.shop collects, uses, stores, shares, and otherwise processes personal information when you visit our website, make a purchase, create or use website features, communicate with us, or otherwise interact with our services.

For privacy-related questions or requests, contact:

Email: info@gingersuptown.shop

EU data protection rules, including the GDPR, apply to the processing of personal data in circumstances covered by those laws and provide individuals with specific rights concerning their information.

1. Information We May Collect

Depending on how you use our website, we may collect information including:

Identification and Contact Information

This may include:

  • Name;
  • Billing address;
  • Shipping address;
  • Email address;
  • Telephone number where supplied.

Order Information

This may include:

  • Products ordered;
  • Order number;
  • Order value;
  • Purchase history;
  • Shipping status;
  • Return and refund information;
  • Customer service communications.

Payment Information

Payments may be processed through Shopify and/or payment service providers made available at checkout.

We may receive limited payment-related information necessary to confirm and manage transactions, while complete payment card details may be processed directly by authorized payment providers.

Device and Technical Information

Depending on website configuration and your privacy choices, information may include:

  • IP address;
  • Browser type;
  • Device type;
  • Operating system;
  • Referring pages;
  • Website interactions;
  • Cookie identifiers;
  • Approximate location derived from technical information.

Communications

If you contact us, we may process information contained in your messages and any attachments you choose to provide.

2. How We Use Personal Information

We may process personal information for purposes such as:

  • Processing and fulfilling orders;
  • Arranging delivery;
  • Processing payments;
  • Providing order updates;
  • Managing returns and refunds;
  • Providing customer support;
  • Detecting and preventing fraudulent or abusive transactions;
  • Maintaining website security;
  • Maintaining transaction and accounting records;
  • Complying with legal obligations;
  • Improving website functionality and customer experience;
  • Sending marketing communications where legally permitted;
  • Responding to legal claims or regulatory requests.

3. Legal Bases for Processing

Where the GDPR applies, processing may rely on one or more recognized legal bases, including:

Performance of a contract — where processing is necessary to process an order, deliver goods, manage returns, or provide requested services.

Legal obligations — where information must be retained or processed to satisfy accounting, tax, consumer protection, fraud prevention, or other legal requirements.

Legitimate interests — where necessary for appropriate business purposes such as preventing fraud, protecting website security, improving services, and defending legal claims, provided those interests are not overridden by applicable individual rights.

Consent — where consent is required, including for certain marketing or non-essential cookie activities.

These are among the legal bases recognized under EU data protection rules.

4. Shopify and Service Providers

Our online store is powered by Shopify.

To operate the store, personal information may be processed by Shopify and other service providers involved in:

  • Website hosting;
  • Payment processing;
  • Order processing;
  • Fraud prevention;
  • Delivery and logistics;
  • Analytics;
  • Customer support;
  • Marketing;
  • Information technology and security.

We only intend to share information when reasonably necessary for legitimate operational purposes or where required by law.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

  • Operate essential website functions;
  • Maintain shopping cart functionality;
  • Remember preferences;
  • Secure checkout;
  • Understand website performance;
  • Measure website usage;
  • Support analytics;
  • Support advertising where permitted.

Under EU privacy rules, non-essential cookies generally require appropriate consent, while certain cookies strictly necessary to provide a service requested by the user may not require the same consent.

Where required, users will be provided with privacy choices through the website's cookie or consent tools.

6. Marketing Communications

Where permitted by applicable law, we may send information about products, promotions, or store updates.

Where consent is the legal basis for marketing, customers may withdraw that consent.

You may unsubscribe using the unsubscribe functionality provided in marketing communications or contact:

info@gingersuptown.shop

Objections to direct marketing will be respected as required by applicable data protection law.

7. Sharing Personal Information

We may disclose relevant information to service providers including:

  • Shopify;
  • Payment processors;
  • Delivery and logistics providers;
  • Hosting and technology providers;
  • Fraud prevention and security providers;
  • Professional advisers;
  • Analytics or advertising providers where permitted;
  • Government, regulatory, law enforcement, or judicial authorities where legally required.

We do not intend to disclose personal information for purposes incompatible with those explained in this Policy without an appropriate legal basis.

8. International Data Transfers

Some technology, payment, logistics, or service providers may process information outside the country in which a customer resides.

Where GDPR requirements apply to an international transfer of personal information, appropriate safeguards will be used where required by law.

Such safeguards may include recognized adequacy mechanisms, contractual safeguards, or other legally approved transfer mechanisms.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

  • Fulfilling orders;
  • Providing customer support;
  • Maintaining transaction records;
  • Satisfying accounting and tax obligations;
  • Preventing fraud;
  • Resolving disputes;
  • Enforcing agreements;
  • Complying with applicable law.

Retention periods may therefore vary depending on the type of information and applicable legal requirements.

10. Your GDPR Rights

Where the GDPR applies, you may have rights including:

  • The right to obtain information about processing;
  • The right of access;
  • The right to correct inaccurate information;
  • The right to request deletion in qualifying circumstances;
  • The right to restrict processing in qualifying circumstances;
  • The right to object to certain processing;
  • The right to data portability where applicable;
  • The right to withdraw consent where processing is based on consent;
  • The right to lodge a complaint with a competent data protection authority.

EU guidance confirms rights including access, correction, deletion, portability, objection, and withdrawal of consent in applicable circumstances.

To exercise a privacy right, contact:

info@gingersuptown.shop

We may request reasonable information necessary to verify identity before responding to a request.

11. Complaints

If you believe your personal data has been processed unlawfully, please contact us first so that we can investigate the issue.

Where applicable, you may also lodge a complaint with the competent supervisory authority.

For individuals in Italy, the national supervisory authority is the Garante per la protezione dei dati personali.

12. Information Security

We use reasonable administrative, technical, and organizational measures intended to protect personal information.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers should protect their account credentials and should not share passwords or complete payment credentials by ordinary email.

13. Children's Privacy

Our store is intended for customers legally capable of entering into purchases or acting with appropriate parental or guardian authorization.

We do not knowingly seek to collect personal information from children for purposes inconsistent with applicable law.

14. Third-Party Websites

Our website may contain links to external websites or services.

We are not responsible for the privacy practices of independently operated third-party websites. Customers should review their privacy notices before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect operational, legal, technological, or regulatory changes.

The updated version will be published on our website with an appropriate effective date.

16. Contact

For questions about this Privacy Policy or personal data:

gingersuptown.shop
Email: info@gingersuptown.shop