Privacy policy

PRIVACY POLICY

Last updated: 18 August 2026

Veymont & CO, Italy (“Veymont & CO”, “we”, “us” or “our”) operates this online store. This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit the store, place an order, create an account or communicate with us. We act as data controller for the processing described here, while Shopify and other providers may process data on our behalf or as independent controllers for their own services.

DATA WE COLLECT
Depending on how you interact with the store, we may collect:
• identity and contact data, including name, billing and shipping address, email and telephone number;
• order and transaction data, including products viewed or purchased, returns and communications;
• payment-related data, which is generally collected and processed by Shopify and payment providers rather than stored directly by us;
• account data and preferences;
• device, browser, IP address, cookie identifiers and usage data;
• customer-service messages, reviews and information you choose to provide.

SOURCES
We collect data directly from you, automatically through cookies and similar technologies, and from service providers and business partners such as Shopify, payment processors, analytics providers, advertising partners and delivery carriers.

PURPOSES AND LEGAL BASES
We process personal data:
• to perform a contract or take pre-contractual steps, including processing orders, payments, delivery, returns and customer accounts;
• to comply with legal obligations, including tax, accounting, consumer-protection and fraud-prevention requirements;
• for legitimate interests, including securing and improving the store, preventing abuse, managing customer service and understanding store performance, where those interests are not overridden by your rights;
• with consent where required, including certain marketing, advertising and non-essential cookie activities. You may withdraw consent at any time without affecting earlier lawful processing.

DISCLOSURE
We may share data only as reasonably necessary with Shopify, payment providers, delivery and fulfilment providers, IT and hosting services, analytics or marketing providers used by the store, professional advisers, insurers and public authorities where legally required. We may also disclose data in connection with a legitimate business reorganisation, subject to applicable safeguards. We do not sell personal data in the ordinary meaning of a sale for money.

SHOPIFY
The store is hosted by Shopify. Shopify processes information needed to provide the commerce platform and may act as a processor or independent controller depending on the activity. More information is available through Shopify’s privacy resources at privacy.shopify.com.

COOKIES AND MARKETING
We and our providers may use essential cookies to operate the store and, where permitted, analytics or advertising cookies. Where consent is required by law, non-essential technologies should not be activated until you consent. You can use the store’s cookie or privacy controls, where available, and browser settings to manage cookies. You may unsubscribe from promotional emails through the link in the message or by contacting us.

INTERNATIONAL TRANSFERS
Some providers may process data outside your country. For transfers from the EEA or United Kingdom, we rely on a lawful transfer mechanism where required, such as an adequacy decision, the European Commission Standard Contractual Clauses or equivalent safeguards.

RETENTION
We retain personal data only for as long as needed for the purposes described, including fulfilling orders, maintaining records, resolving disputes and meeting tax, accounting and legal obligations. Retention periods depend on the data type, our relationship with you and applicable law. Data is deleted or anonymised when no longer required.

SECURITY
We use reasonable technical and organisational measures appropriate to the risk. No internet transmission or storage system can be guaranteed completely secure.

YOUR RIGHTS
Subject to applicable law, you may request access to, correction of or deletion of your data; restrict or object to processing; receive portable data; and withdraw consent. You may also object to direct marketing at any time and may have rights concerning automated decision-making. We may need to verify identity and may retain information where legally required.

If the EU GDPR or UK GDPR applies, you may complain to the data-protection authority in your place of residence, work or the place of an alleged infringement. In Italy, the supervisory authority is the Garante per la protezione dei dati personali.

If Brazil’s LGPD applies to a particular processing activity, you may also exercise the rights granted under the LGPD, including confirmation of processing, access, correction, anonymisation, blocking or deletion where applicable, portability, information about sharing, and review of certain automated decisions.

CHILDREN
The store is not directed to children who cannot lawfully consent or contract under applicable law. We do not knowingly collect children’s data contrary to legal requirements. A parent or guardian may contact us about a concern.

CHANGES
We may update this policy to reflect operational, legal or regulatory changes. The updated version and revision date will be posted here.

CONTACT
Veymont & CO
Italy
Email: service@veymontco.com

To exercise a privacy right, email us with “Privacy Request” in the subject line. We will respond within the period required by applicable law.