Privacy Policy
Who we are (Controller)
PORSCIA GROUP (“PORSCIA”, “we”, “us”) is the data controller for personal data processed via porscia.com.
Registered office: [Via Monte Napoleone 17, Milan, Italy]
Privacy contact: privacy@porscia.com
Legal inquiries: legal@porscia.com
Scope
This Policy explains how we collect, use, disclose, and safeguard personal data when you browse our website, purchase our products, contact us, or subscribe to our communications. It applies to services we control; it does not cover third-party sites or services we do not control.
1) Personal data we collect
a) Data you provide
Identification and contact details (name, email, phone, billing/shipping address); order and warranty details; returns/repairs; account/wishlist data; preferences and consents; messages to customer care; event/press inquiries (professional contact details).
b) Data collected automatically
Device and usage data (IP, browser, device identifiers, pages viewed, timestamps, referrers, language/currency settings) and information collected via cookies and similar technologies.
c) Data from third parties
Payment providers (transaction confirmation—we do not receive full card numbers); address verification and fraud-prevention tools; analytics/advertising partners (aggregate insights); social platforms if you interact with our official accounts.
2) Why we use personal data (lawful bases under GDPR/UK GDPR)
-
Contract: to take and deliver orders, process payments, provide customer care, handle returns/repairs, and administer our warranty.
-
Legitimate interests: to secure our site; prevent fraud; personalize experience (e.g., language/currency); analyze and improve services; measure performance; present relevant content.
-
Consent: to send newsletters/SMS and place non-essential cookies/marketing pixels where required. You can withdraw consent at any time.
-
Legal obligations: to comply with tax, accounting, and regulatory requirements.
3) Payments
Payments are processed by independent providers (e.g., Shopify Payments, PayPal, your card issuer) under their own privacy notices. We do not store full payment card numbers.
4) Cookies & similar technologies
We use essential (checkout, security, account), analytics/performance, and marketing cookies/pixels. You can manage choices at any time via our cookie banner or the Cookie Preferences link in the footer. Where supported by law, we honor Global Privacy Control (GPC) signals as an opt-out of sale/sharing for targeted advertising.
5) Shopify and service providers
Our store runs on Shopify. Data may be processed by Shopify and its subprocessors in the EU, Canada, the US, or other locations with appropriate safeguards. We also use carriers, payment processors, cloud hosts, email/SMS platforms, analytics/advertising, and fraud-prevention vendors. Depending on the activity, these parties act as our processors or independent controllers and are bound by contracts and security commitments.
6) Blockchain authenticity
Some products include a QR or digital record to verify authenticity on a public registry. These entries relate to the product (e.g., model and timestamps) and typically do not include your personal data. If you create an account with a verification partner, that partner processes your data under its own policy.
7) International transfers
When personal data is transferred outside the EU/EEA/UK (for example to the US or Canada), we use lawful safeguards such as EU/UK Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms, and apply supplementary measures where appropriate.
8) How long we keep data
We keep personal data only as long as needed for the purposes above, then delete or anonymize it. Indicatively:
-
Orders, invoices, and warranty records: 7–10 years (tax/accounting laws).
-
Customer service communications: up to 3 years after resolution.
-
Marketing contact data: until you unsubscribe or after 24 months of inactivity, unless a longer period is required by law.
9) How we share data
We share personal data with:
-
Service providers (hosting, checkout, payments, shipping, email/SMS, analytics, ad tech, fraud prevention).
-
Authorities where required by law or to defend legal claims.
-
Corporate transactions (e.g., merger, acquisition) where data remains protected under this Policy.
We do not sell personal data for money. In some jurisdictions (e.g., California), “sale” or “sharing” can include certain advertising disclosures—see “Regional rights” below.
10) Your rights
Depending on your location, you may have the right to access, rectify, erase, restrict or object to processing, port data, and withdraw consent. To exercise rights, email privacy@porscia.com. We will verify your identity and respond within legally required timeframes. You may lodge a complaint with your local authority (for Italy: Garante per la Protezione dei Dati Personali).
US (California and certain states)
If you are a California resident (CPRA) or live in states with similar laws, you may have rights to know, delete, correct, opt out of sale/sharing for targeted advertising, and limit use of sensitive data. Use our cookie preferences or the “Do Not Sell or Share My Personal Information” link in the footer to set your choices. We do not sell personal information for money.
Canada (PIPEDA) / Brazil (LGPD)
You may request access, correction, deletion, portability, and withdraw consent where applicable by contacting privacy@porscia.com.
11) Children
Our website is not directed to children. We do not knowingly collect personal data from individuals under 16 in the EU/UK or under 13 in the US. If you believe a child has provided data, contact us so we can delete it.
12) Security
We implement appropriate technical and organizational measures (encryption in transit, access controls, minimization and staff training). No system is 100% secure—please use strong, unique passwords and keep credentials confidential.
13) Changes to this Policy
We may update this Policy periodically. We will post the latest version here with an updated effective date.
Effective date: [insert date]
Contact
Privacy requests: privacy@porscia.com
Legal inquiries: legal@porscia.com