This Privacy Policy describes how Isabac.it (the "Site" or "we") collects, uses, and discloses your personal information when you visit or make a purchase on the Site.

Contact

After reviewing this policy, if you have any further questions, need more information about our privacy practices, or wish to file a complaint, please contact us via email at info@isabac.it or by mail using the details provided below:

Via Volturno 7/1, 50019 Sesto Fiorentino FI, Italy.

Collection of Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and the information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as "Personal Information." Please refer to the list below for more information on what Personal Information we collect and why.

• Device information
• Purpose of Collection: To load the Site correctly for you and perform usage analysis to optimize our Site.
  
• Source of Collection: Automatically collected when you access our Site using cookies, log files, web beacons, tags, or pixels.
• Disclosure for Business Purposes: Shared with our processor Shopify.
• Personal Information Collected: Web browser version, IP address, time zone, cookie information, which sites or products you view, search terms, and how you interact with the Site.

• Order Information
• Purpose of Collection: To provide you with products or services to fulfill our contract, process your payment information, arrange shipping, provide you with invoices and/or order confirmations, communicate with you, verify our orders for potential risks or fraud, and, in line with your preferences shared with us, provide you with information or advertisements related to our products or services.
• Source of Collection: Collected by you.
• Disclosure for Business Purposes: Shared with our processor Shopify.
• Personal Information Collected: Name, billing address, shipping address, payment information, email address, phone number, VAT number.

• Customer support information
• Purpose of Collection: To provide customer support.
• Source of Collection: Collected by you.

 

Sharing of personal information

We share your personal information with service providers who help us provide our services and fulfill our contracts with you, as described above. For example:

• We use Shopify to power our online store. You can read more about how Shopify uses your personal information here: https://www.shopify.com/legal/privacy.
• We may share your personal information to comply with applicable laws and regulations, respond to a subpoena, search warrant, or legal request for information received, or to protect our rights.

Behavioral Advertising

As described earlier, we use your personal information to provide you with targeted advertisements or marketing communications that we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your personal information here: https://www.google.com/intl/it/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
• We share information about your use of the Site, purchases made, and interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners and, in some cases, through the use of cookies or similar technologies (to which you may consent, depending on your location).
  
• We use Shopify Audiences to display ads on other websites with our advertising partners to shoppers who have made purchases with other Shopify merchants and may be interested in what we have to offer. We also share information about your use of the Site, purchases made, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may present you with offers that may interest you.

For more information on how targeted advertising works, you can visit the Network Advertising Initiative ("NAI") educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can choose to opt out of targeted advertising:

FACEBOOK - https://www.facebook.com/settings/?tab=ads

GOOGLE - https://www.google.com/settings/ads/anonymous

BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

 

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance opt-out portal at: https://optout.aboutads.info/.

Use of personal information

We use your personal information to provide you with our services, which include offering products for sale, processing payments, shipping and fulfilling your order, and keeping you updated on new products, services, and offers.

Legal Basis

Under the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA"), we process your personal information under the following legal bases:

• Your consent;
• Performance of the contract between you and the Site;
• Compliance with our legal obligations;
• Protecting your vital interests;
• Carrying out a task carried out in the public interest;
• For our legitimate interests, which do not override your fundamental rights and freedoms.

Retention

When you place an order through the Site, we retain your personal information for our records unless you ask us to delete such information. For more information on your deletion rights, please see the "Your Rights" section below.

Automated Decisions

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (including profiling) when such a decision has a legal or significant effect on you.

[We DO/DO NOT] make fully automated decisions that have a legal or otherwise significant effect using customer data.

Our processor, Shopify, uses limited automated decisions to prevent fraud that do not have a legal or otherwise significant effect on you. Services that include elements of automated decision-making include:

• Temporary blacklisting of IP addresses associated with repeated failed transactions. This blacklist persists for a short period of hours.
• Temporary blacklisting of credit cards associated with IP addresses on the blacklist. This blacklist persists for a short period of days.

 

Your Rights

GDPR

If you are a resident of the EEA, you have the right to access the personal information we have about you, transfer it to a new service, and request the correction, updating, or deletion of your personal information. If you wish to exercise these rights, please contact us using the contact information provided above.

Your personal information will initially be processed in Ireland and subsequently transferred outside of Europe for storage and further processing, including Canada and the United States. For more information on how data transfers comply with GDPR, please refer to Shopify's GDPR whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

Cookies

A cookie is a small amount of information that is downloaded to your computer or device when you visit our Site. We use various types of cookies, including functional, performance, advertising, and social media or content cookies. Cookies enhance your browsing experience by allowing the website to remember your actions and preferences (such as login and region selection). This means you don't have to re-enter this information every time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, such as whether it is their first time visiting or if they are frequent visitors.

We use the following cookies to optimize your experience on our Site and provide our services.

Cookies necessary for the functioning of the store

Name	Function	Duration
_ab	Used in relation to administrative access.	2 years
_secure_session_id	Used in relation to browsing through a storefront.	24 hours
_shopify_country	Used in relation to the checkout.	session
_shopify_m	Used for managing customer privacy settings.	1 year
_shopify_tm	Used for managing customer privacy settings.	30min
_shopify_tw	Used for managing customer privacy settings.	2 weeks
_storefront_u	Used to facilitate the updating of customer account information.	1min
_tracking_consent	Tracking preferences.	1 year
c	Used in relation to the checkout.	1 year
cart	Used in relation to the shopping cart.	2 weeks
cart_currency	Used in relation to the shopping cart.	2 weeks
cart_sig	Used in relation to the checkout.	2 weeks
cart_ts	Used in relation to the checkout.	2 weeks
cart_ver	Used in relation to the shopping cart.	2 weeks
checkout	Used in relation to the checkout.	4 weeks
checkout_token	Used in relation to the checkout.	1 year
dynamic_checkout_shown_on_cart	Used in relation to the checkout.	30min
hide_shopify_pay_for_checkout	Used in relation to the checkout.	session
keep_alive	Used in relation to buyer localization.	2 weeks
master_device_id	Used in relation to merchant login.	2 years
previous_step	Used in relation to the checkout.	1 year
remember_me	Used in relation to the checkout.	1 year
secure_customer_sig	Used in relation to customer login.	20 years
shopify_pay	Used in relation to the checkout.	1 year
shopify_pay_redirect	Used in relation to the checkout.	30 min, 3 weeks or 1 year depending on the value
storefront_digest	Used in relation to customer login.	2 years
tracked_start_checkout	Used in relation to the checkout.	1 years
checkout_one_experiment	Used in relation to the checkout.	session
checkout_session_lookup	Used in relation to the checkout.	3 weeks
checkout_session_token_<<token>>	Used in relation to the checkout.	3 weeks
identity-state	Used in relation to customer authentication.	24 hours
identity-state-<<token>>	Used in relation to customer authentication.	24 hours
identity_customer_account_number	Used in relation to customer authentication.	12 weeks

Reporting and Analysis

Nome	Funzione	Durata
_landing_page	Track landing pages.	2 weeks
_orig_referrer	Track landing pages.	2 weeks
_s	Shopify analytics.	30min
_shopify_d	Shopify analytics.	session
_shopify_s	Shopify analytics.	30min
_shopify_sa_p	Shopify analytics related to marketing and referrals.	30min
_shopify_sa_t	Shopify analytics related to marketing and referrals.	30min
_shopify_y	Shopify analytics.	1 year
_y	Shopify analytics.	1 year
_shopify_ga	Shopify and Google Analytics.	session
customer_auth_provider	Shopify analytics.	session
customer_auth_session_created_at	Shopify analytics.	session

The duration of a cookie on your computer or device depends on whether it is a "persistent" or "session" cookie. Session cookies last until you stop browsing, while persistent cookies last until their expiration date or are deleted. Most of the cookies we use are persistent and expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please note that removing or blocking cookies may negatively impact your user experience, and some parts of our website may no longer be fully accessible. Most browsers automatically accept cookies, but you can choose whether to accept or reject cookies through your browser's controls, often found in the "Tools" or "Preferences" menu of your browser. For more information on how to change your browser settings or how to block, manage, or filter cookies, consult your browser's help file or visit websites like www.allaboutcookies.org.

Additionally, please be aware that blocking cookies may not completely prevent the sharing of information with third parties such as our advertising partners. To exercise your rights or opt out of certain uses of your information by these parties, follow the instructions in the "Behavioral Advertising" section above.

Do not track

Please note that as there is no consistent industry understanding of how to respond to "Do Not Track" signals, we do not change our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy periodically to reflect changes to our practices or for other operational, legal, or regulatory reasons.

Complaints

As mentioned earlier, if you wish to file a complaint, please contact us via email or by mail using the details provided in the "Contact" section above.

If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with the relevant data protection authority. 

Last modified: [09.10.2023]