Privacy policy
Privacy Policy
Last updated: 23 September 2026
Data controller
Trade Lux Italia S.r.l., Via A. Manzoni 112/b, 80123 Naples (NA), Italy – VAT no. IT06700101212.
Contact for privacy matters: customercare@tluxy.it – Phone +39 081 7148338.
What data we process
- Browsing data: IP address, device and browser data, pages visited, technical logs.
- Data you provide: first and last name, e-mail, phone number, shipping and billing address, tax code where required, order details, messages sent to customer care.
- Payment data: handled directly by the payment providers; we only receive the outcome of the transaction and partial data (e.g. the last four digits of the card).
- Cookies and similar technologies: see our Cookie Policy and the consent banner.
Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Managing orders, payments, shipping, returns and customer care | Performance of the contract (art. 6.1.b GDPR) | Duration of the relationship + 10 years for tax obligations |
| Legal obligations (accounting, tax, requests from authorities) | Legal obligation (art. 6.1.c GDPR) | 10 years |
| Newsletter and promotional communications | Consent (art. 6.1.a GDPR), withdrawable at any time | Until consent is withdrawn |
| Fraud prevention and security of the website | Legitimate interest (art. 6.1.f GDPR) | Time strictly necessary |
| Legal defence | Legitimate interest (art. 6.1.f GDPR) | Until the limitation period expires |
| Analytics and marketing through non-essential cookies | Consent | See Cookie Policy |
Who we share data with
Your data is processed by our authorised staff and by suppliers appointed as data processors under art. 28 GDPR, in particular: Shopify (e-commerce platform, Shop Pay and e-mail tools), payment providers (Shopify Payments, PayPal, Scalapay, Apple Pay, Google Pay), carriers (DHL, UPS), our returns platform, and analytics and advertising providers where you have consented. Some of these act as independent controllers under their own privacy policies (for example PayPal, Scalapay, the carriers and the social platforms). We never sell your personal data.
Transfers outside the EU
Some providers may process data outside the European Economic Area (for example in the United States or Canada). Such transfers take place on the basis of an adequacy decision of the European Commission or of the Standard Contractual Clauses, with additional safeguards where required.
Children
Our products are for children, but the website is intended for adults: you must be at least 18 to place an order. We do not knowingly collect personal data from people under 18.
Your rights
You may ask for access, rectification, erasure, restriction and portability of your data, object to processing based on our legitimate interest, and withdraw your consent at any time, by writing to customercare@tluxy.it. We reply within one month. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your country.
Security
We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
Changes
We may update this policy; the current version is always published on this page.
