|
en
ItalianoEnglish
Login/Register

Privacy policy

Last updated: October 2026.

This policy explains how MIA Manifattura Italiana Artigiani S.r.l.s. handles the personal data of people who visit www.archetipi.store, create an account or make a purchase, under Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003).

Data controller

MIA Manifattura Italiana Artigiani S.r.l.s., Via Francesco Paolo Tosti 7, 65024 Manoppello (PE), Italy, VAT number 02193200686. For any request about your data, write to info@archetipi.store.

What data we process and why

Account

Name, email and password, which we store encrypted. If you sign in with Google, the name, email and profile picture Google shares with us. We use them to create and manage your account and to show your orders and addresses. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We keep this data until you ask us to delete your account.

Orders, payments and deliveries

Order details, shipping and billing addresses, email, phone number, products bought and amounts. We use them to conclude and perform the sales contract, deliver the products and handle withdrawals, returns and warranty claims. Legal basis: performance of a contract. Card details and other payment details are handled directly by Stripe: they never reach our servers and we do not store them.

The data needed for invoices and accounting records is kept for 10 years, as Italian law requires (Art. 2220 of the Civil Code). Legal basis: legal obligation (Art. 6(1)(c) GDPR).

Cart

When you add products to your cart, we save it so you find it again during your visit and when you sign in. Carts that are not completed are deleted within 90 days. Legal basis: steps taken at your request before a contract.

Messages and contact form

Name, email and the text of your message, to reply to you. Legal basis: steps before a contract or our legitimate interest in answering people who write to us. We keep messages for 24 months, unless they relate to an order or a dispute.

Statistics

To know which pages are visited we use Umami, an analytics tool that uses no cookies, stores nothing on your device and does not keep your IP address. It collects aggregate data (pages viewed, referring site, device and browser type, country) that does not identify you. Legal basis: our legitimate interest in improving the site.

Security and fraud prevention

Technical logs (IP address, date and time, pages requested) and Stripe’s fraud checks on payments. They protect the site, accounts and payments. Legal basis: our legitimate interest. Technical logs are kept for a limited time, normally no longer than 30 days.

Legal obligations and defence of rights

We may use the data needed to meet legal obligations or requests from authorities, and to defend our rights in a dispute. Legal basis: legal obligation and our legitimate interest.

Do you have to provide your data?

Data marked as required is needed to create an account or fulfil an order: without it we cannot do so. Everything else is optional.

Who we share data with

Data is handled by our authorised staff and by suppliers acting on our behalf as processors (Art. 28 GDPR):

  • Vercel, Neon and Cloudflare, to host the site, the database and the images;
  • Brevo, to send the site’s emails, such as order confirmations and password resets;
  • Umami, for statistics, on servers run on our behalf;
  • advisers and accountants, for accounting and tax obligations.

These handle data as independent controllers, under their own policies:

  • Stripe (Stripe Payments Europe Ltd.) and the providers of the other payment methods you choose at checkout;
  • couriers, for delivery (name, address and phone number);
  • Google, if you sign in with Google or open the boutique map;
  • public authorities, when the law requires it.

We do not sell your data and do not use it for personalised advertising.

Transfers outside the European Union

Some suppliers, such as Vercel and Google, are based in the United States or may process data outside the European Union. Such transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework or on the standard contractual clauses approved by the Commission.

Your rights

At any time you can ask us to:

  • access your data and receive a copy;
  • correct or update it;
  • delete it, except what we must keep by law;
  • restrict its processing;
  • receive it in a machine-readable format or transfer it to another controller;
  • object to processing based on our legitimate interest;
  • withdraw any consent you gave, without affecting earlier processing.

Write to info@archetipi.store: we reply within one month. You can also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of the country where you live.

Children

The site is not intended for children under 14. You must be an adult to buy.

Automated decisions

We make no decisions based solely on automated processing. Stripe may automatically block a payment it considers suspicious: if that happens, you can contact us to check it.

Cookies

The cookies and other tools used by the site are described in the Cookie policy.

Changes

We may update this policy, for example when we add a service. The version in force is always on this page, with the date of the last update.