Informativa sul Trattamento dei Dati Personali
Privacy Policy
We collect the least we can get away with, we say what each field is for, and we do not bundle consent to marketing into consent to ship you a parcel. This notice is given under Articles 13 and 14 of the GDPR.
Last updated 15 August 2026/Governed by Italian law
1. Who is responsible
The data controller (titolare del trattamento) is:
S.C. MODA ITALIA S.R.L.
Via XX Settembre 11/1, 80047 San Giuseppe Vesuviano (NA), Italia
Email: support@scmodaitalia.shop
Telephone: +39 335 847 1906
We have not appointed a Data Protection Officer, as we are not required to. Privacy questions go to the address above and are answered by us directly.
2. What we collect
| When | What |
|---|---|
| You place an order | First and last name, email address, telephone number, delivery address, the products, sizes and colours ordered, the order total, and the age declaration made at checkout. Where the buyer is between 14 and 17, a parent or guardian email address. |
| You contact us | Name, email address, telephone number if you give one, country, the subject you chose and the message you wrote. |
| You ask about a group order | Name, organisation if you give one, email, telephone if you give one, country, and the details of the enquiry: quantity, weight, knit face, garment types, size spread, colour and timing. |
| You subscribe to emails | Email address and the fact and time of your consent. |
| You browse the site | The strictly necessary cookies described in the cookie policy, and server log data (IP address, request time, page requested, browser user agent) retained briefly for security and diagnostics. |
3. Why, and on what basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Taking, preparing, shipping and invoicing your order; handling returns, refunds and guarantee claims | Performance of a contract, or steps taken at your request before entering one — Art. 6(1)(b) |
| Answering a message you sent us, or a group order enquiry | Steps at your request before a contract — Art. 6(1)(b); otherwise our legitimate interest in answering people who write to us — Art. 6(1)(f) |
| Keeping accounting and tax records | Legal obligation under Italian tax law — Art. 6(1)(c) |
| Sending marketing emails | Your consent — Art. 6(1)(a). Withdrawable at any time. |
| Confirming with a parent or guardian where the buyer is a minor | Legal obligation and our legitimate interest in not contracting with a minor without consent — Art. 6(1)(c) and (f) |
| Keeping the site up, preventing fraud and abuse | Legitimate interest — Art. 6(1)(f) |
| Any cookie that is not strictly necessary | Your consent, given through the first-layer banner — Art. 6(1)(a) |
Providing the data marked as required at checkout is necessary in order for us to ship an order to you. Without it we cannot conclude or perform the contract. Everything else is optional and saying no costs you nothing.
4. What we do not collect
- We do not ask for, and have no use for, your date of birth, gender, marital status, income or occupation.
- We do not create accounts or passwords. There is no login on this site.
- We do not build profiles of you and we do not take automated decisions that produce legal effects concerning you. There is no automated profiling within the meaning of Article 22 of the GDPR anywhere on this site.
- We do not buy personal data from anyone, and we do not sell, rent or trade yours.
- We do not process any special category data. Please do not send us health information in a message.
5. Who else sees it
Only parties who need it in order for us to do the thing you asked for. Each is bound by a data processing agreement under Article 28 of the GDPR and may act only on our instructions:
- Hosting. The provider that runs this website and its database.
- Carriers. The shipping company delivering your parcel, which receives the name, address and phone number needed to deliver it.
- Payment. The payment provider configured for this store, which handles the payment step. We do not store full card details.
- Email. The provider that sends transactional messages such as order and dispatch confirmations, and, if you have consented, marketing emails.
- Accountants and tax authorities, to the extent required by law.
6. Transfers outside the EEA
We keep processing inside the European Economic Area wherever we can. Where a provider processes data outside it, that transfer is covered by an adequacy decision of the European Commission, or by the Standard Contractual Clauses adopted by the Commission together with any supplementary measures the transfer requires. You may ask us for a copy of the safeguards that apply.
7. How long we keep it
| Data | Kept for |
|---|---|
| Order and invoice records | 10 years from the end of the tax year, as Italian tax law requires |
| Delivery details held for customer service purposes | 24 months from the order, then deleted |
| Checkout details where payment was never completed | 12 months, so that we can follow up an unfinished order, then deleted |
| Contact and group order enquiries | 24 months from the last message between us |
| Marketing subscription | Until you unsubscribe, and at most 24 months after your last interaction with an email from us |
| Cookie consent record | 6 months, after which we ask again |
| Server logs | 30 days |
8. Your rights
Under Articles 15 to 22 of the GDPR you have the right to ask us for access to your data, to have it corrected, to have it erased, to have its processing restricted, to receive it in a portable format, and to object to processing carried out on the basis of our legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting what we did lawfully before you withdrew it.
Write to support@scmodaitalia.shop. We answer within one month, and we do not charge for it. We may ask you to confirm your identity, but only where we genuinely cannot otherwise tell that the request is yours.
If you are not satisfied with how we handle it, you may lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.
9. Marketing and consent
Marketing emails are sent only if you have ticked the box asking for them. That box is never pre-ticked, and it is always separate from the box that lets us process your order. Refusing marketing has no effect on your ability to buy anything here.
Every marketing email carries a working one-click unsubscribe link. You can also just reply and ask, or write to the address above.
Transactional messages are different: order acknowledgements, dispatch confirmations, and replies to your questions are part of performing the contract, and they are sent whether or not you have consented to marketing.
10. Children
This site is not directed at children. We do not knowingly collect data from anyone under 13. Where the checkout indicates the buyer is between 14 and 17, we ask for a parent or guardian email address and confirm with them before preparing the order.
If you believe a child has given us personal data, write to support@scmodaitalia.shop and we will delete it.
11. Security
The site is served over HTTPS. Access to order data is limited to the people who need it to fulfil orders and answer questions. Providers are chosen on the basis that they can offer appropriate technical and organisational measures under Article 32 of the GDPR.
Where a personal data breach is likely to result in a risk to your rights and freedoms, we notify the Garante within 72 hours and, where the risk is high, we tell you directly.
12. Changes
We update this notice when what we do changes. The date at the top of the page tells you when it last changed. Where a change materially affects how we use data you have already given us, we will tell you before it takes effect.
Contatti: support@scmodaitalia.shop·+39 335 847 1906