Privacy policy
This policy explains which personal data we collect when you use the website, buy from us or ask us for a made-to-measure jacket, why we use it and what rights you have. It is provided under Article 13 of Regulation (EU) 2016/679 (GDPR). This is a translation; if the two versions differ, the Italian text prevails.
Data controller
Italpak Leather New Designer S.a.s. di Muhammad Hamid
Via Ghibellina 137, 50122 Florence (FI), Italy · VAT IT06957030486 · REA FI-668964
Email newdesignerflorence@gmail.com ·
Phone +39 055 527 8346
We have not appointed a data protection officer (DPO): for any question, write to the email address above.
Which data we process
- Order data: name, email, phone, delivery and billing addresses, products bought, any initials to engrave, amounts, order status and any withdrawal requests.
- Payment data: handled by Shopify Payments. We only see the outcome of the payment and a few card details (for example the last digits), never the full number.
- Account data, if you create one: email, name, orders and saved addresses. You sign in with a code sent by email, no password.
- Made-to-measure requests: what you send us on WhatsApp or by email from the Bespoke page, that is your choices for the jacket, your body measurements (height, chest, waist, hips, shoulders, sleeve), your name, city and any notes or photos.
- Messages: what you write to us by email, phone or WhatsApp for help, returns and exchanges.
- Technical data: for security, the provider hosting the website logs data such as IP address, date and time of the request and browser type.
Why we use them and on what legal basis
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Handling your order: payment, shipping, delivery, withdrawal, returns and guarantee | Performance of the contract (point b) |
| Running your account, if you create one | Performance of the contract (point b) |
| Answering made-to-measure requests and preparing the quote | Pre-contractual steps at your request (point b) |
| Answering your messages | Performance of the contract or pre-contractual steps (point b) |
| Keeping accounts and meeting tax obligations | Legal obligation (point c) |
| Protecting the website and preventing payment fraud | Legitimate interest (point f) |
| Defending our rights in case of disputes | Legitimate interest (point f) |
Without the order data we cannot ship or invoice. We do not use your data for advertising or newsletters and we do not sell it. We do not make decisions based solely on automated processing.
Who we share them with
Data is processed by us and, on our behalf, by providers acting as processors (art. 28 GDPR):
- Shopify International Limited (Ireland): shop platform, payment, customer accounts and order emails;
- Cloudflare, Inc.: website hosting and protection against attacks;
- DHL: parcel delivery;
- Google (Gmail): our mailbox;
- our accountant, for tax obligations.
If you choose to write to us on WhatsApp, the message goes through WhatsApp Ireland Limited, under WhatsApp’s own terms and privacy policy. If you pay or sign in with Shop, Shopify’s service that remembers payment details, Shopify processes that data as an independent controller under its own privacy policy. Data may also be disclosed to the authorities where the law requires it.
Transfers outside the European Union
Some providers (Shopify, Cloudflare, Google, WhatsApp) may also process data outside the European Union, for example in Canada or the United States. In these cases the transfer is based on an adequacy decision of the European Commission (for the United States, the Data Privacy Framework) or on the standard contractual clauses approved by the Commission.
How long we keep them
- Order data and tax records: 10 years, as required by law (art. 2220 of the Italian Civil Code).
- Account: until you ask us to close it.
- Made-to-measure requests that do not become an order: 12 months from the last contact.
- Help messages: for as long as needed to handle the request and any dispute, then we delete them.
- Technical security data: for the period set by the hosting provider, usually a few days.
Your rights
You can ask us at any time to access your data, correct it, delete it, restrict its use, receive it in a machine-readable format (portability) or object to processing based on legitimate interest (arts. 15–22 GDPR). Write to newdesignerflorence@gmail.com: we reply within one month.
If you believe your data is not being processed lawfully, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live.
Cookies
To see how the website uses cookies and browser storage, read our cookie policy.
Changes
We may update this policy. The date of the last update is shown at the top of the page.