Privacy policy
Introduction
This Privacy Policy describes how palmavenuehomewares.shop collects, uses, discloses, retains, and protects personal data when you visit our online store, place an order, contact us, interact with our services, or otherwise provide information to us.
palmavenuehomewares.shop is operated using Shopify's ecommerce technology.
Where palmavenuehomewares.shop determines the purposes and means of processing your personal data, palmavenuehomewares.shop acts as the data controller for the purposes of applicable data protection law.
This Privacy Policy is intended to reflect applicable requirements of the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable Italian and European data protection rules.
Privacy enquiries may be sent to:
Personal Data We May Collect
Depending on how you interact with our store, we may collect information including:
- Name;
- Billing address;
- Shipping address;
- Email address;
- Telephone number where provided;
- Order information;
- Products purchased;
- Payment-related information;
- Transaction information;
- Customer service correspondence;
- Account information if customer accounts are enabled;
- IP address;
- Browser and device information;
- Website activity;
- Cookie identifiers;
- Shopping cart activity;
- Referral information;
- Marketing preferences; and
- Information you voluntarily provide when communicating with us.
Payment information may be processed through Shopify or enabled payment providers. We do not necessarily receive or retain complete payment card credentials.
How We Collect Personal Data
We may collect personal data:
Directly from you, such as when you place an order, create an account, contact customer service, subscribe to communications, or submit information through the website.
Automatically, through cookies and similar technologies when you browse the store.
From service providers, such as Shopify, payment processors, shipping providers, fraud-prevention providers, analytics providers, and apps or integrations used to operate the store.
Why We Process Personal Data
Depending on the circumstances, personal data may be processed for purposes including:
- Processing and fulfilling orders;
- Providing purchased products;
- Processing payments;
- Sending order confirmations;
- Providing shipping and delivery updates;
- Processing cancellations, returns, and refunds;
- Providing customer support;
- Maintaining customer accounts;
- Preventing fraud and abuse;
- Securing our website;
- Maintaining records;
- Meeting tax, accounting, legal, and regulatory obligations;
- Improving website functionality;
- Understanding store performance;
- Personalising customer experiences where appropriate;
- Sending marketing communications where legally permitted; and
- Establishing, exercising, or defending legal claims.
Legal Bases Under GDPR
Where GDPR applies, our processing may rely on one or more legal bases, including:
Contract: Processing necessary to enter into or perform a contract with you, including processing orders, payments, shipping, returns, and customer service.
Legal obligation: Processing necessary to comply with applicable legal, tax, accounting, consumer protection, or regulatory obligations.
Legitimate interests: Processing necessary for legitimate business interests, such as protecting the store against fraud, maintaining security, improving services, and managing our business, provided those interests are not overridden by your rights and freedoms.
Consent: Processing based on your consent where consent is required, including certain marketing or non-essential cookie activities.
The GDPR recognises consent, contractual necessity, legal obligations, and legitimate interests among the legal grounds on which personal data may be processed.
Shopify
Our store is hosted using Shopify.
Shopify provides the ecommerce infrastructure that allows us to operate our online store and may process personal data in connection with the services it provides to merchants and consumers.
Shopify maintains its own privacy information describing how it processes consumer and merchant data. Shopify's consumer privacy documentation was updated in March 2026.
Service Providers
We may disclose personal data to third parties where reasonably necessary for operating our store, including:
- Shopify;
- Payment processors;
- Shipping and fulfilment providers;
- Technology and hosting providers;
- Fraud-prevention and security providers;
- Analytics providers;
- Customer service tools;
- Professional advisers;
- Tax or accounting service providers; and
- Government authorities where disclosure is required by law.
Service providers are expected to process personal information according to their contractual responsibilities and applicable law.
International Data Transfers
Some service providers may process personal data outside Italy or outside the European Economic Area.
Where GDPR requires safeguards for international transfers, appropriate transfer mechanisms may be used, such as an adequacy decision, approved Standard Contractual Clauses, or another legally recognised mechanism.
The European Commission recognises mechanisms including adequacy decisions and Standard Contractual Clauses for transferring personal data to third countries.
Cookies and Similar Technologies
Our website may use cookies and similar technologies to operate the store, maintain shopping cart functionality, remember preferences, improve security, analyse website performance, and, where applicable and permitted, support advertising or marketing.
Technical cookies necessary for the operation of a website may be treated differently from non-essential tracking technologies.
Italian privacy guidance provides that non-technical cookies and tracking technologies generally require appropriate consent mechanisms, while necessary technical cookies are subject to different requirements.
Where required, non-essential cookies will not be used until appropriate consent has been obtained.
Users can also manage cookies through available consent settings and browser controls.
Marketing Communications
If you subscribe to marketing communications or otherwise provide valid consent, we may send information about products, promotions, or store updates.
Where required by law, marketing communications will only be sent with an appropriate legal basis.
You may withdraw consent or unsubscribe from marketing emails at any time using the unsubscribe mechanism included in the communication or by contacting:
Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including fulfilment of contractual obligations, customer support, accounting and tax obligations, dispute management, fraud prevention, and legal compliance.
Different categories of information may therefore be retained for different periods.
When information is no longer required, it may be deleted, anonymised, or otherwise securely disposed of, subject to applicable legal requirements.
Your GDPR Rights
Where GDPR applies, you may have rights including:
- The right to access personal data;
- The right to correct inaccurate personal data;
- The right to request deletion in applicable circumstances;
- The right to restrict processing;
- The right to object to certain processing;
- The right to data portability where applicable;
- The right to withdraw consent;
- The right to lodge a complaint with a competent supervisory authority; and
- Rights relating to certain automated decision-making where applicable.
Requests may be submitted to:
We may need to verify your identity before completing a request where permitted or required by law.
Italian Supervisory Authority
Individuals in Italy have the right, where applicable, to raise data protection concerns with the Garante per la protezione dei dati personali, Italy's data protection supervisory authority.
We encourage customers to contact us first where appropriate so that we have an opportunity to address the issue.
Children's Privacy
Our store is intended for individuals legally capable of entering into online purchases.
We do not knowingly seek to collect personal data from children in circumstances where parental consent or another legal basis would be required.
If you believe a child has submitted personal information improperly, contact us at info@palmavenuehomewares.shop.
Security
We use reasonable administrative, organisational, and technical measures intended to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse.
No internet transmission or electronic storage method can be guaranteed to be completely secure.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, technology, legal obligations, business practices, or regulatory requirements.
The current version will be published on palmavenuehomewares.shop.
Contact
For privacy-related questions or GDPR requests:
palmavenuehomewares.shop
Email: info@palmavenuehomewares.shop
- Choosing a selection results in a full page refresh.