Privacy Policy

pursuant to Articles 13-14 of EU Regulation 2016/679 (GDPR)

Last updated: April 2026

This Privacy Policy describes how VPMDESIGN srl, owner of the Valentina Laganà brand (the "Site", "we", "us" or "our") collects, uses and discloses your personal information when you visit, use our services or make a purchase from us. www.valentinalagana.com or otherwise communicate with us (collectively, the "Services"). For purposes of this Policy, "you" and "your" mean you, the user of the Services.

Please read this Privacy Policy carefully.

1. Data Controller

VPMDESIGN srl
Piazza Maria Teresa 3, 10123 Torino (TO) – Italy
P.VAT/CF:11638010014
E-mail: info@valentinalagana.it

The Data Controller can be contacted for any matter relating to the processing of personal data.

2. Changes to this Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Policy on the Site and update the "Last Updated" date.

3. Personal Information We Collect

3.1 Information you provide to us directly

Personal and contact details: name, surname, address, telephone number and email
Order Information: billing address, shipping address, payment confirmation
Account Information: username, password, and other account security information
Customer Support Information: the information you choose to include in communications with us
Email address for the newsletter: if you choose to subscribe to our commercial communications

3.2 Information collected automatically

We may automatically collect certain information about your interactions with the Services ("Usage Data") through cookies, pixels, and similar technologies. Usage Data may include:

IP address and device and browser information
Pages visited, session duration and navigation path
Advertising campaign interaction data (Meta Pixel, Google Ads)
Anonymized browsing session logs and heat maps (Microsoft Clarity)

3.3 Information obtained from third parties

We may obtain information about you from third parties, including:

Shopify Inc., which powers our Site and Services
Our payment processors, who collect payment information to process your orders
Advertising platforms (Meta, Google) when you interact with our ads

4. How We Use Your Personal Information

a) Supply of products and services

Legal basis: performance of the contract (Article 6.1.b GDPR)
We use your information to process payments, fulfill orders, send notifications about your account and purchases, manage returns and refunds, and arrange shipping.

b) Legal and tax obligations

Legal basis: legal obligation (Article 6.1.c GDPR)
Billing data is retained to fulfill the tax and accounting obligations required by Italian law (10 years).

c) Newsletter and commercial communications

Legal basis: consent (Article 6(1)(a) of the GDPR)
With your explicit consent, we use your email address to send newsletters with updates on new collections, offers, and promotions. You can withdraw your consent at any time using the unsubscribe link in each email.

d) Statistical analysis of the site (Google Analytics)

Legal basis: consent (Article 6(1)(a) of the GDPR)
We use Google Analytics to analyze user behavior on the site in order to improve its content and usability. This processing occurs only with prior consent via the cookie banner.

e) Remarketing and advertising (Meta Pixel, Google Ads)

Legal basis: consent (Article 6(1)(a) of the GDPR)
Through Meta Pixel (Facebook/Instagram) and Google Ads, we collect data on user interactions with the site to display personalized ads. This processing occurs only with explicit consent via the cookie banner.

f) User behavior analysis (Microsoft Clarity)

Legal basis: consent (Article 6(1)(a) of the GDPR)
We use Microsoft Clarity to anonymously record browsing sessions (heatmaps, click logs, and mouse movements) to improve the user experience. The data does not allow direct user identification. This processing only occurs with prior consent via the cookie banner.

g) Security and fraud prevention

Legal basis: legitimate interest (Article 6.1.f GDPR)
We use your information to detect, investigate, or take action regarding possible fraudulent or malicious activity.

h) Communication and service improvement

Legal basis: legitimate interest (Article 6.1.f GDPR)
We use your information to provide you with customer support and improve our Services.

5. Data Retention Period

Order and billing data: 10 years, in compliance with Italian tax obligations
Newsletter data: until the user withdraws consent
Browsing data and analytical cookies (Google Analytics): maximum 26 months
Microsoft Clarity data (sessions and heatmaps): maximum 13 months
Remarketing data (Meta Pixel, Google Ads): maximum 180 days
Contact and customer support messages: 12 months from the closing of the communication

6. How We Disclose Your Personal Information

Under certain circumstances, we may disclose your personal information to the following categories of entities, appointed as Data Processors pursuant to Art. 28 GDPR:

Shopify Inc. – e-commerce platform (website and payment manager)
Meta Platforms Ireland Ltd. – advertising services (Meta Pixel, Facebook Ads, Instagram Ads)
Google LLC – statistical analysis (Google Analytics) and advertising (Google Ads)
Microsoft Corporation – user behavior analysis (Microsoft Clarity)
Newsletter service provider (e.g. Klaviyo, Mailchimp or equivalent)
Couriers and freight forwarders for order delivery
Accountants and tax consultants for legal compliance
Business and marketing partners to provide personalized advertising services, with your consent

The data is never sold to third parties.

7. Transfer of Data Outside the EU

Some of the recipients listed above (Shopify, Google, Meta, Microsoft) are entities established in the United States. The transfer is carried out in compliance with the safeguards provided by the GDPR, including the Standard Contractual Clauses (SCCs) approved by the European Commission and/or the EU-US Data Privacy Framework, where applicable.

8. Cookies and Tracking Technologies

Like many websites, we use cookies on our Site. The site uses the following categories of cookies:

Technical/necessary cookies: essential for the functioning of the site (shopping cart, session, language preferences). They do not require consent.
Analytical cookies (Google Analytics): They collect aggregate data on site usage. Activated only with consent.
Behavioral analysis cookies (Microsoft Clarity): They record anonymous browsing sessions and generate heatmaps. Activated only with consent.
Profiling/marketing cookies (Meta Pixel, Google Ads): Used for remarketing and personalized advertising. Activated only with explicit consent.

You can manage your cookie preferences at any time via the panel We consent present on the site or through your browser settings. Please note that removing or blocking cookies may negatively impact your user experience.

Our site also recognizes the signal Global Privacy Control (GPC)If you visit the Site with this signal enabled, we will treat this as a valid request to opt out of sharing/targeted advertising for the associated browser or device.

For more information, see our Cookie Policy.

9. Third Party Websites and Links

Our Site may provide links to websites or online platforms operated by third parties. We are not responsible for the privacy or security of these sites. We encourage you to review their privacy policies before providing any personal data.

10. Data of Minors

The Services are not intended for use by anyone under 18, and we do not knowingly collect personal information from minors. If you are the parent or guardian of a minor who has provided us with their information, you can contact us to request deletion.

11. Rights of the interested parties

Pursuant to Articles 15-22 of the GDPR, you have the right to:

Access: obtain confirmation that data concerning you is being processed and receive a copy of it
Correction: correct inaccurate or incomplete data
Cancellation ("right to be forgotten"): obtain the erasure of your data, except where required by law
Limitation: request the limitation of processing in certain cases
Portability: receive your data in structured format (CSV or PDF) and transfer it to another owner
Opposition: object to processing based on legitimate interest or for direct marketing purposes
Withdrawal of consent: revoke the consent given at any time, without prejudice to the lawfulness of the previous processing
Opt-out of targeted advertising: request not to "share" your information for personalized advertising purposes

You can exercise your rights by writing to info@valentinalagana.it or using the dedicated form on this page.

You will not be discriminated against for exercising any of these rights.

You also have the right to lodge a complaint with theItalian Data Protection Authority: www.garanteprivacy.it

12. Data Security

We take appropriate technical and organizational measures to protect your personal information. However, no security measure is perfect or impenetrable. We recommend that you do not use unsecured channels to communicate sensitive information to us and that you keep your account credentials confidential.

13. Contacts

If you have any questions about this Privacy Policy or would like to exercise your rights, please contact us:

VPMDESIGN srl – Valentina Laganà
Piazza Maria Teresa 3, 10123 Turin (TO) – Italy
E-mail: info@valentinalagana.it

Last updated: April 2026