Privacy Policy
Information on the processing of personal data
Last updated: August 14, 2026
1. Data Controller
Name: Giovanni Gallo
VAT no.: 13366750019
Address: Via Ceresole 2, 10022 Carmagnola (TO), Italia
WhatsApp: +39 379 215 1999
2. Data we process
The website is primarily an informational showcase and does not require account registration or direct online checkout. When you choose to contact ShadArtCustom through WhatsApp or other external channels, the information you voluntarily provide may be processed, such as your name, contact details, card or project information and, where required for an order, shipping or invoicing, the relevant administrative and delivery details.
Normal browsing also generates technical data required for the operation and security of the website, as well as aggregated statistical data about page usage.
3. Purposes and legal bases
Data voluntarily provided is used to answer enquiries, prepare quotes, manage orders and commissions, arrange payments, shipping and customer support, and comply with any related tax and administrative requirements.
Depending on the context, processing is based on steps taken at your request before entering into a contract, performance of a contract, compliance with legal obligations, and the controller's legitimate interest in maintaining website security, operation and aggregated usage statistics.
4. Analytics and cookies
ShadArtCustom uses Umami Analytics and Vercel Web Analytics solely for statistics about website operation and usage, such as page views, traffic sources, device type and interactions with certain website features.
These systems are configured with data minimisation in mind and are not used by ShadArtCustom for behavioural advertising, commercial profiling or tracking users across different websites. The current configuration does not use profiling or advertising cookies. Umami and Vercel Web Analytics state that their analytics tracking operates without cookies.
Umami is also configured to run only on shadartcustom.it, respect the browser's Do Not Track setting and exclude URL hash values from collection.
5. Technical providers and external services
Technical hosting, cloud infrastructure and security providers may be used to operate the website. These providers may process connection data and technical logs only to the extent necessary to deliver and protect the service.
Some website content may be delivered through third-party technical infrastructure. Buttons linking to WhatsApp, Instagram or other external services are simple links: the relevant service receives data only when the user chooses to open the link or use the external platform, under that provider's own privacy policy.
6. Recipients and international transfers
Data may be processed, to the extent necessary for their respective functions, by hosting, analytics, communications, payment, shipping and administrative service providers used to operate the website and manage orders. Some providers may also operate outside the European Economic Area; where this occurs, processing and any international transfers are subject to the safeguards required by applicable law and implemented by the relevant providers.
7. Data retention
Data relating to enquiries and quotes is retained for the time needed to handle the conversation and any subsequent relationship. Data relating to orders, payments and tax documentation is retained for the periods required by applicable legal obligations. Analytics data is retained according to the settings and retention periods of the services used, solely for statistical purposes and website improvement.
8. Your rights
Where provided by law, you may request access to your personal data, rectification, erasure, restriction of processing, data portability, or object to processing based on legitimate interests.
Requests may be submitted to the controller using the contact details shown on this page. You also have the right to lodge a complaint with the competent data protection authority.
9. Changes to this policy
This policy may be updated when website features, service providers or legal requirements change. The date of the latest update is shown at the top of this page.