PRIVACY POLICY

This Privacy Policy describes how trickortreatstudiosl.shop collects, uses, stores, shares, and protects personal data when customers and visitors access https://trickortreatstudiosl.shop, place an order, create an account, contact us, subscribe to marketing, or otherwise use our services.

This policy is intended to provide information required under the General Data Protection Regulation, Regulation (EU) 2016/679 (“GDPR”), applicable Italian data-protection legislation, and other applicable privacy laws.

1. Data Controller

For the processing described in this policy, the operator of trickortreatstudiosl.shop acts as the data controller unless otherwise stated.

Store: trickortreatstudiosl.shop
Website: https://trickortreatstudiosl.shop
Email: info@trickortreatstudiosl.shop
Telephone: +39 3542747223
Address: Via Asiago, N. 11, Romano d'Ezzelino (VI), Italy

Privacy questions and requests may be sent to info@trickortreatstudiosl.shop.

2. Personal Data We Collect

Depending on the customer’s interaction with our store, we may collect:

Identity and contact information

This includes name, billing address, delivery address, email address, telephone number, account information, and preferred language.

Order information

This includes products purchased, order number, selected sizes and styles, transaction value, discounts, delivery status, return history, refund history, and customer-service records.

Payment information

Payments are processed through payment providers available at checkout. We generally receive transaction status, limited payment identifiers, payment method, billing information, and fraud-screening results rather than complete card information.

Technical information

This may include IP address, browser type, device type, operating system, device identifiers, approximate location, time zone, language settings, cookie identifiers, and website activity.

Communication information

This includes information contained in emails, telephone communications, reviews, return requests, complaints, surveys, and messages sent through our website or social-media pages.

Marketing information

This includes marketing preferences, subscription status, consent records, email engagement, and withdrawal of consent.

Fraud and security information

This may include transaction patterns, account activity, delivery information, device signals, and risk indicators used to prevent unauthorized activity.

3. How We Collect Data

We collect personal data:

• Directly from customers;

• Automatically through cookies and similar technologies;

• From Shopify;

• From payment processors;

• From delivery and fulfilment providers;

• From fraud-prevention and security providers;

• From marketing and analytics providers where permitted; and

• From a person placing an order on behalf of another recipient.

A person providing another individual’s information must have lawful authority to do so.

4. Purposes and Legal Bases

We process personal data under one or more of the following legal bases.

Contract performance

We process information to:

• Operate the cart and checkout;

• Accept and fulfil orders;

• Process payments;

• Deliver products;

• Send order communications;

• Manage accounts;

• Provide customer service;

• Process returns and refunds; and

• Handle contractual complaints.

Legal obligations

We process information to:

• Maintain tax and accounting records;

• Comply with consumer-protection requirements;

• Respond to lawful government requests;

• Meet product-safety obligations;

• Protect data and systems; and

• Establish legally required transaction records.

Legitimate interests

Subject to applicable balancing requirements, we may process information to:

• Prevent fraud and misuse;

• Protect the website and customers;

• Improve our services;

• Measure website performance;

• Manage stock and customer demand;

• Handle complaints;

• Establish or defend legal claims; and

• Send permitted communications to existing customers.

Consent

Where required, we rely on consent for:

• Promotional emails;

• Non-essential analytics cookies;

• Advertising cookies;

• Personalized marketing; and

• Other optional processing explained when consent is requested.

Consent can be withdrawn at any time.

5. Shopify

Our store is hosted through Shopify, which provides the e-commerce platform used to display products, operate checkout, process transactions, and support store security.

Shopify may process personal information as our service provider, processor, independent controller, or in another legally recognized role, depending on the particular activity.

Customers should review Shopify’s applicable privacy documentation for information about Shopify’s independent processing practices.

6. Sharing Personal Data

We may share necessary personal data with:

• Shopify and e-commerce service providers;

• Payment processors, banks, and card networks;

• Warehousing and fulfilment providers;

• Postal services and delivery carriers;

• Customer-support and communications providers;

• Cloud hosting and information-technology providers;

• Security and fraud-prevention providers;

• Analytics and advertising providers where permitted;

• Accountants, insurers, auditors, lawyers, and advisers;

• Government authorities or courts where legally required; and

• A buyer or successor involved in a lawful business transfer.

Service providers should receive only the data reasonably necessary to perform their services and must process it according to applicable legal and contractual requirements.

We do not sell personal data in the ordinary sense of exchanging it directly for money.

7. Cookies

Our website may use cookies, pixels, local storage, tags, and similar technologies.

These technologies may be used to:

• Enable checkout and shopping-cart functions;

• Maintain secure sessions;

• Remember preferences;

• Prevent fraud;

• Measure traffic and performance;

• Understand website use;

• Personalize content; and

• Measure advertising where consent has been obtained.

Strictly necessary cookies may be used without consent where permitted by law. Non-essential analytics, personalization, and advertising technologies will be activated only after obtaining legally required consent.

Visitors can manage their choices through our cookie banner, available privacy controls, and browser settings.

8. Marketing Communications

We send electronic marketing only when we have consent or another lawful basis.

Recipients can unsubscribe by using the link in a marketing message or contacting info@trickortreatstudiosl.shop.

Unsubscribing from promotional messages does not prevent transactional communications concerning orders, payments, deliveries, returns, security, or legal notices.

9. International Transfers

Some service providers may process personal data outside Italy or the European Economic Area.

Where legally required, international transfers will be protected through:

• A European Commission adequacy decision;

• Standard Contractual Clauses;

• Appropriate supplementary safeguards; or

• Another recognized lawful transfer mechanism.

Information about applicable safeguards may be requested from info@trickortreatstudiosl.shop.

10. Data Retention

We retain personal data only for as long as necessary for the relevant purpose and applicable legal obligations.

Retention periods depend on:

• Italian tax and accounting requirements;

• The duration of the customer relationship;

• Return and legal-guarantee periods;

• Fraud and security needs;

• Applicable limitation periods; and

• Whether a dispute or legal claim exists.

When data is no longer required, it will be deleted, anonymized, or securely isolated unless continued storage is legally required.

11. Data Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

Measures may include encrypted transmission, access restrictions, authentication controls, secure platform features, monitoring, backups, and confidentiality obligations.

No internet system is completely secure, so absolute security cannot be guaranteed.

12. Children

Our store is not intended for children acting without the authorization of a parent or legal guardian.

We do not knowingly collect personal data directly from children who cannot lawfully consent to the relevant processing. A parent or guardian who believes that a child has provided data without authorization should contact us.

13. Automated Processing

Payment and fraud-prevention providers may use automated systems to evaluate transaction and security risks.

Where a solely automated decision produces legal or similarly significant effects and applicable law grants relevant rights, the individual may request human intervention, express a point of view, and contest the decision.

14. Privacy Rights

Subject to applicable conditions and exceptions, individuals may have the right to:

• Access their personal data;

• Correct inaccurate information;

• Request deletion;

• Restrict processing;

• Object to legitimate-interest processing;

• Object to direct marketing at any time;

• Receive eligible data in a portable format;

• Withdraw consent;

• Request information about international-transfer safeguards;

• Exercise rights concerning automated decisions; and

• Submit a complaint to a supervisory authority.

15. Exercising Your Rights

Requests should be sent to info@trickortreatstudiosl.shop.

We may request reasonable proof of identity to protect the individual’s information. We will respond within the period required by law. Under the GDPR, this is generally one month, subject to permitted extensions for complex or numerous requests.

16. Complaints

Individuals may contact us first so that we can investigate a concern.

They may also complain to:

Garante per la protezione dei dati personali
Piazza Venezia 11
00187 Rome, Italy
Website: https://www.garanteprivacy.it

An individual may also contact another competent EU or EEA supervisory authority.

17. Third-Party Links

Our website may link to payment services, carriers, social networks, or external websites. These services operate independently and process information according to their own privacy notices.

We are not responsible for independent third-party privacy practices.

18. Changes to This Policy

We may update this policy to reflect changes in our services, providers, technology, or legal obligations.

The updated version will be published with a revised effective date. Where required, we will provide additional notice or request renewed consent.

19. Contact Us

trickortreatstudiosl.shop
Website: https://trickortreatstudiosl.shop
Email: info@trickortreatstudiosl.shop
Telephone: +39 3542747223
Address: Via Asiago, N. 11, Romano d'Ezzelino (VI), Italy