Privacy Policy

Privacy notice

This notice explains how we process personal data when you browse or shop on vestiti-firmati.it, contact us or use the shop's services. It is provided under Articles 12 and 13 of Regulation (EU) 2016/679 (GDPR) and Italian data protection law.

Who is responsible for your data

The controller is Life Smile S.R.L.S., Italian tax/VAT number 09544861215, registered office at Via Torre 1, 80036 Palma Campania (NA), Italy. The shop is at Via Circumvallazione 152 in the same town. For privacy questions or to exercise your rights, email [email protected].

What we use and why

  • Accounts, purchases and assistance: identification and contact details, addresses, ordered products, amounts, billing information, messages, returns and refunds. These are needed to handle your requests and purchase contract; tax records are also processed to meet legal obligations.
  • Payments and delivery: we provide payment services and carriers with the information necessary for their service. Payment options include Stripe, PayPal and Scalapay; carriers are GLS and UPS. We do not store your complete card number or security code.
  • Newsletters and promotions: contacts are used for the purposes for which you have given consent where required. You can withdraw it through the unsubscribe link or by contacting us. Messages necessary for an order or support request are separate from promotional messages.
  • Reviews and comments: we process the information you provide and what is needed to verify a purchase or manage publication. Do not put confidential information in content intended for publication.
  • Security and operation: systems may log your IP address, date and time, requested resource, request outcome and technical browser information. This supports delivery of the site, abuse prevention and troubleshooting, based on our legitimate interest in operating and securing the service.
  • Optional statistics: statistics consent enables Google Analytics and recognition across visits in the internal dashboard. Microsoft Clarity can analyse interactions and sessions and, in the current integration, also requires marketing consent.
  • Marketing and advertising measurement: with the required consent, tools configured through Google Tag Manager may measure campaigns and conversions and personalise advertising, using browsing information, online identifiers and purchase information. Services include Google and Microsoft Advertising; enabled integrations are listed in the Cookie Policy.
  • Zendesk/Zopim: visitors and chat. The service loads and connects automatically when you enter the site, including before a cookie choice and after refusal, to track visitor presence and navigation. It uses identifiers, cookies and browser storage and communicates with Zendesk; this tracking is independent of the banner switches. The window stays closed until you click Chat. The remembered opening request lasts 30 days and does not control tracking activation. Zendesk storage follows the durations in the Cookie Policy and can be removed by clearing site data in your browser; the service starts again on your next visit. Widget Google Analytics reporting is disabled. Messages and contact details you share are used to answer your assistance request. You can also contact us by email.
  • Internal visitor dashboard: we record the individual session journey across pages, date and time, referral source, country, device information and cart state. A random identifier and last update are stored in sessionStorage (lsv_sid, lsv_last); a new session starts after 30 minutes of inactivity or in a new tab. Collection operates before a choice and after refusal of external statistics. The dashboard is restricted to the controller and authorised persons; it does not receive your name, account ID or IP address. These are session browsing records, not anonymous aggregate totals. Operational state lasts up to two hours and history is retained for 90 days.

Banner choices govern Google Analytics, other optional statistics tags and marketing. The internal single-session collection and Zendesk/Zopim tracking described above are independent of these choices. Refusal does not prevent shopping or opening chat.

Cookies and consent choices

For authorised advertising conversions, identifiers derived from contact details through hashing may match purchases to campaigns and provider profiles, including across devices. These remain personal data subject to the consent choices described here.

The banner lets you accept, reject or select purposes separately. Cookie settings lets you change or withdraw choices. Google Analytics and recognition across visits require statistics consent; Google Ads and Meta require marketing consent. Microsoft UET/Clarity requires both. Server conversions check order consent evidence and withdrawals. The single-session journey in the internal dashboard is collected separately. See storage, purposes and durations in the Cookie Policy.

Who may receive data

Access may be given to authorised Life Smile S.R.L.S. staff and suppliers needed for hosting, technical support, email delivery, backups, payments, shipping and requested services. Infrastructure uses Serverplan, Cloudflare, Amazon Web Services for email and Backblaze for backups; optional services include those listed above. Each party acts according to its role and assigned activities. Data may be provided to authorities or professional advisers when necessary to meet legal obligations or protect rights.

International services

Advertising integrations may include Meta/Facebook. If you choose a WhatsApp or social-network link, you also use that platform's service, subject to the processing described in its privacy notice.

Some suppliers may process data outside the European Economic Area. Any transfers must use safeguards required by the GDPR, such as an applicable adequacy decision or standard contractual clauses. Suppliers' notices explain their processing; contact us for information about the safeguards relevant to the service you use.

Retention

  • Account and support data are retained to manage the relationship and requests, taking legal obligations and the establishment or defence of rights into account. Accounting documents follow statutory retention periods, ordinarily ten years.
  • Promotional contacts are used until consent is withdrawn or the relevant purpose ends. Information needed to document choices and respect an unsubscribe request is retained to prevent unwanted messages.
  • Internal statistical sessions have an operational lifetime of up to two hours after the last update and a 90-day history. Persistent internal and tracking-module identifiers are limited to 90 days.
  • Ordinary web-server logs rotate daily, keeping 14 rotations. Evidence of new cookie choices is retained for 13 months and includes the date, purposes, notice version and IP address.
  • Backups rotate, with monthly copies kept for up to six months. Data in backup copies are not used for new marketing activities and are removed as copies rotate out.

Your rights

Where the GDPR provides, you may request access, correction, erasure, restriction and portability and object to processing. Withdrawing consent does not affect the lawfulness of earlier processing. Email [email protected] to exercise your rights; we may request information necessary to verify your identity. You may also lodge a complaint with the Italian Garante per la protezione dei dati personali or the competent authority.

Data necessary for a purchase or request are required to provide that service; optional purposes can be refused. Material updates will be indicated here and fresh consent requested when necessary.

Updated: 11 October 2026.