Privacy Policy

PRIVACY POLICY

Last updated: 09/09/2026

This policy describes how GI Collection collects, uses, stores, and protects the personal data of users who visit the site, make a purchase, contact customer support, or use the services provided.

1. DATA CONTROLLER

The data controller is:

Federica Castiello

C.so Vittoria Colonna 41

Ischia (NAPOLI)

Email: info@gicollection.it
Tel: +39 331 4417339

2. WHAT DATA MAY WE COLLECT

Depending on how you use the site, we may process:

first and last name;
email address;
phone number;
billing and shipping address;
order-related information;
payment-related data, within the limits managed by the payment providers;
communications sent to customer support;
technical data relating to your device and browsing;
marketing preferences and cookies;
any information voluntarily provided by you.

3. WHY WE USE THE DATA

Order Management

We use the data to:

process purchases, receive payments, prepare orders, arrange shipping, manage returns, and provide customer support.

Legal basis: performance of the contract and pre-contractual measures.

Administrative and Tax Obligations

Some data must be stored to comply with tax, accounting, and administrative obligations.

Legal basis: legal obligation.

Customer Support

We use the data necessary to respond to inquiries about products, orders, shipping, returns, and other services.

Legal basis: performance of the contract, pre-contractual measures, or legitimate interest, depending on the inquiry.

Newsletter and Marketing

If you have given your consent, we may use your data to send you communications about new collections, offers, initiatives, and GI content.

Legal basis: consent.

You can withdraw it at any time.

Analytics and Advertising

With your prior consent, where required, analytics, advertising, and profiling tools may be used to understand how the site is used and to improve or personalize promotional activities.

4. WHO WE MAY SHARE THE DATA WITH

The data may be disclosed, only to the extent necessary, to providers that support GI in managing its e-commerce, such as:

e-commerce platform and hosting providers;
payment providers;
couriers and logistics operators;
email and communication services;
technology providers;
tax, accounting, or legal advisors;
analytics and advertising tools, if authorized;
public authorities when required by law.

5. SHOPIFY

The GI Collection website uses Shopify as its e-commerce management technology platform.

Data processed through the store may therefore also be processed through the infrastructure and services provided by Shopify, in accordance with their respective privacy roles and the applicable terms.

6. INTERNATIONAL TRANSFERS

Some providers may process data outside the European Economic Area.

When international transfers occur, the safeguards provided for by applicable law are used, such as adequacy decisions or appropriate safeguards, where required.

The GDPR notice must indicate any transfers to third countries and the safeguards used.

7. HOW LONG WE STORE THE DATA

The data is stored for the period necessary to fulfill the purposes for which it was collected and subsequently for any periods required by law.

Retention periods may vary depending on the type of data and the purpose of processing.

For marketing and profiling, retention periods must be consistent with your consent and applicable law.

8. YOUR RIGHTS

In the cases provided for by the GDPR, you may request:

access to your data;
rectification;
deletion;
restriction of processing;
objection;
data portability;
withdrawal of consent, without affecting the lawfulness of processing based on consent before its withdrawal.

You may also lodge a complaint with the Italian Data Protection Authority.

Information about purposes, legal bases, recipients, storage, transfers, and rights is part of the information the GDPR requires us to provide to data subjects.