Last Updated: September 15, 2025

This Privacy Policy describes how francescobarbato.com (the "Services") collects, uses, and discloses users' personal information. The Data Controller is Lisa Bano, who manages the online sale of "Francesco Barbato" branded products (brand name used under concession), with address: info@francescobarbato.com and postal address Carlo Marx,14 - 07052 San Teodoro (SS), Italy. By using the Services you accept this Policy.

Changes: we may update this Policy for operational, legal or regulatory reasons; we will post the updated version on the Site with the new "Last Updated" date.

Categories of data processed: master and contact data (first name, last name, billing and shipping addresses, email, optional phone), order data (products purchased, amounts, status), payment data handled by our payment processors (e.g., card/IBAN, billing address), account data (username, password, settings), content of communications with support. We also collect usage data via cookies and similar technologies (IP address, device/browser, pages visited, interactions, network). We may obtain data from third parties acting on our behalf (e.g. Shopify, payment providers, couriers, marketing/analytics tools).

Purposes and legal bases (Art. 6 GDPR): (a) provision of Services, order management, payment, shipping, returns and accounts (contract execution, Art. 6.1.b); (b) legal, tax and accounting compliance (Art. 6.1.c); (c) security, abuse and fraud prevention, rights protection (legitimate interest, Art. 6.1.f); (d) promotional communications and personalization of experience, where applicable (consent Art. 6.1.a or legitimate interest Art. 6.1.f, subject to local regulations). You can revoke consent at any time.

Cookies and tracking: we use technical, performance and, where applicable, profiling/marketing cookies; for Shopify-related cookies see their policy: https://www.shopify.com/legal/cookies. You can manage cookies from your browser; blocking may limit some functionality. We recognize the Global Privacy Control (GPC) signal as a valid opt-out request for the browser/device; other than GPC we do not respond to other "Do Not Track" signals.

Data Disclosure: We share data only as necessary with vendors acting as Data Controllers (Shopify for platform and hosting, payment providers, couriers/logistics, customer support, cloud storage, analytics, marketing), with business/marketing partners where applicable, with authorities where required, with group/affiliate entities, and in the case of corporate transactions. We do not disseminate data. We do not use or disclose special categories or sensitive data for inference purposes. Any "selling" or "sharing" activities under non-EU regulations are handled through applicable opt-out mechanisms.

Retention: we retain data for as long as necessary to deliver the Services and fulfill legal obligations (e.g., tax/accounting), handle disputes, and enforce rights; in general: order/billing data in accordance with legal terms; account data as long as the account remains active; marketing data until any consent is revoked or opt-out is exercised; technical logs for periods proportionate to security.

Non-EU/EEA transfers: where data is transferred outside the EEA, we apply appropriate safeguards (e.g. EU Commission Standard Contractual Clauses ) unless adequacy decisions are made.

Data Subject Rights: you can exercise your rights to access, rectification, erasure, restriction, objection, portability, as well as withdraw consent and object to marketing (including via "unsubscribe" link). To exercise your rights or for clarification, please write to. info@francescobarbato.com. We may request information to verify your identity or delegation to an authorized agent. You will not be discriminated against for exercising your rights.

Complaints: you have the right to file a complaint with theData Protection Authority(www.garanteprivacy.it) or the competent authority in your country of residence. We encourage you in any case to contact us first to attempt an amicable resolution.

Minors: the Services are not intended for minors; we do not knowingly collect data from children under the age of 16. If you believe a minor has provided us with data, please contact us for removal.

Contact: Data Controller: Lisa Bano - info@francescobarbato.com - Vico Carlo Marx, snc, 07052 San Teodoro (SS), Italy.