Privacy Policy

Last updated: August 2026

Data Controller

GIULIA CARFORA — VAT no. 17098921004
Email: info@poppyvintagestore.com

Data Collected

We collect data you provide to us during browsing, registration, or purchase: first name, last name, email address, shipping address, and payment details (securely managed by Shopify Payments).

Purpose and Legal Basis for Processing

Order processing: necessary for the performance of the contract (Art. 6.1.b GDPR).
Purchase-related communications: necessary for the performance of the contract (Art. 6.1.b GDPR).
Newsletter and offers: only with your explicit consent (Art. 6.1.a GDPR), which can be withdrawn at any time.
Tax and legal obligations: legal obligation (Art. 6.1.c GDPR).

Data Transfer

Data is processed through Shopify Inc. (Canada/USA), which guarantees adequate protection measures under the GDPR. For more information: shopify.com/legal/privacy.

Data Retention

Your data is stored for the time necessary to provide the service and comply with legal obligations (generally 10 years for tax data).

Your Rights

Under the GDPR, you have the right to: access your data, rectify it, erase it, restrict its processing, object to its processing, request data portability. To exercise these rights, please write to info@poppyvintagestore.com.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority) (www.garanteprivacy.it) if you believe that the processing of your data violates the GDPR.