Privacy policy
Last updated: March 2026
Table of Contents
Welcome to our Privacy Policy. We know that reading legal documents can be tedious, but protecting your personal data is a genuine priority for us, not just a bureaucratic formality.
In short: Saimai.it only collects your personal information (such as your name, address, and email) when it is strictly necessary to prepare and ship your products, issue invoices, or answer your enquiries. If you give us your explicit permission, we also anonymously analyse how you use our website to help us show you social media advertisements that match your interests. We rely on Shopify’s highly secure infrastructure to manage our store and payments; this means no one at Saimai.it will ever see or store your credit card number. We never sell your data to anyone. You have the right to view, modify, or delete your data at any time simply by sending us an email. Below, you will find all the comprehensive legal details required under the European General Data Protection Regulation (GDPR) and the Italian Privacy Code (D.Lgs. 196/2003, as amended).
1. Who We Are (The Data Controller)
Table of Contents
- Who We Are (The Data Controller)
- What Data We Collect and Why (Legal Bases)
- Who We Share Your Data With (Shopify & Third Parties)
- International Data Transfers
- Data Retention (How Long We Keep Your Data)
- Your Rights (Access, Rectification, Erasure)
- Cookie Management
Welcome to our Privacy Policy. We know that reading legal documents can be tedious, but protecting your personal data is a genuine priority for us, not just a bureaucratic formality.
In short: Saimai.it only collects your personal information (such as your name, address, and email) when it is strictly necessary to prepare and ship your products, issue invoices, or answer your enquiries. If you give us your explicit permission, we also anonymously analyse how you use our website to help us show you social media advertisements that match your interests. We rely on Shopify’s highly secure infrastructure to manage our store and payments; this means no one at Saimai.it will ever see or store your credit card number. We never sell your data to anyone. You have the right to view, modify, or delete your data at any time simply by sending us an email. Below, you will find all the comprehensive legal details required under the European General Data Protection Regulation (GDPR) and the Italian Privacy Code (D.Lgs. 196/2003, as amended).
1. Who We Are (The Data Controller)
The Data Controller (the entity that decides how and why your personal data is processed) for data collected via www.saimai.it is:
Laura Alfonsi
Registered Office: Via T. Tasso 24, 35027 Noventa Padovana (PD), ItalyVAT No. (P.IVA): 05751370288 | Tax Code (C.F.): LFNLRA90T46G224U
REA Number: PD - 489916
For any privacy-related questions or to exercise your legal rights, you can contact me directly at any time via email: hello@saimai.it.
Laura Alfonsi
Registered Office: Via T. Tasso 24, 35027 Noventa Padovana (PD), ItalyVAT No. (P.IVA): 05751370288 | Tax Code (C.F.): LFNLRA90T46G224U
REA Number: PD - 489916
For any privacy-related questions or to exercise your legal rights, you can contact me directly at any time via email: hello@saimai.it.
2. What Data We Collect and Why (Legal Bases)
We only collect the data necessary to provide you with the best possible service. Our processing activities comply with the legal conditions set out in Article 6 of the EU General Data Protection Regulation (GDPR):-
To Fulfil Your Order: We collect your first name, surname, delivery address, and email address. This data is essential to execute the sales contract and ship your items. (Legal basis: Performance of a contract – Art. 6(1)(b) GDPR).
-
For Tax and Accounting Compliance: If you request an invoice, we collect your Tax Code (Codice Fiscale) or VAT Number. This information is legally required under Italian law to maintain accurate financial accounting. (Legal basis: Compliance with a legal obligation – Art. 6(1)(c) GDPR).
-
To Process Payments & Prevent Fraud: Your IP address and transaction history are automatically monitored by our payment gateways to ensure IT security and prevent fraudulent activities. (Legal basis: Legitimate interest – Art. 6(1)(f) GDPR). All payments are processed through encrypted gateways (Shopify Payments); the Data Controller does not store any sensitive financial information.
-
For Traffic Analytics & Advertising (Pixels & Tracking): We gather data regarding your interactions with our website using tools such as Google Analytics 4 (GA4), Meta Pixel, and Pinterest Pixel. This helps us measure the success of our campaigns and display relevant advertisements to you. We only do this if you give your explicit consent via our cookie banner. (Legal basis: Consent of the data subject – Art. 6(1)(a) GDPR). You can withdraw this consent at any time.
- For Marketing (Newsletters): If you opt-in to our newsletter, we collect your email address to send you shop updates, exclusive discounts, or stories from the bookbinding studio. This only occurs with your explicit permission. (Legal basis: Consent of the data subject – Art. 6(1)(a) GDPR). You can unsubscribe at any moment.
3. Who We Share Your Data With (Shopify & Third Parties)
To ensure a fast, secure, and reliable website, we collaborate with external service providers who act as Data Processors (Art. 28 GDPR):- Shopify: Our e-commerce platform is hosted by Shopify. Shopify processes your data to enable us to run our online storefront and manage checkout processes. For merchants within the European Economic Area (EEA), data is managed by Shopify International Limited (based in Ireland) under a strict Data Processing Addendum (DPA). However, to support transactions, secure services, and detect fraud (e.g., Shopify’s Network Intelligence features), Shopify may also process some data as an independent Data Controller. For more details on their practices, please review the https://www.shopify.com/it/legal/privacy/consumers
- Logistics & Couriers: We share your name, delivery address, and email address (for tracking notifications) with the national and international courier services responsible for delivering your parcel.
- Analytics & Marketing Tools: Subject to your explicit consent, we use Google Analytics 4 (GA4) to evaluate site traffic, alongside Meta Pixel & Conversions API (Facebook & Instagram) and the Pinterest Pixel (provided by Pinterest Europe Ltd) to measure campaign performance. These platforms process browsing data and may act as joint or independent controllers, ensuring GDPR compliance for any data flows. Specifically, if the Meta Conversions API is active, our system may securely transmit certain identifiers (such as the email provided at checkout) to Meta in an encrypted, anonymised format (hashing). This connects actions taken on our site to your social media profile solely if you have consented to it.
4. International Data Transfers
The global nature of the internet and Shopify's infrastructure means your data may occasionally cross European borders. Shopify stores the data of European customers primarily within Data Centres located inside the European Economic Area (EEA).However, for technical support, processing needs, or when using analytical tools (such as Meta, Google, or Pinterest pixels), certain data might be transferred to Canada or the United States. We assure you that these transfers comply fully with European data protection laws: transfers to Canada are protected by the European Commission's Adequacy Decision. Transfers to the United States and other third countries rely on strict frameworks, including the EU-U.S. Data Privacy Framework or Standard Contractual Clauses (SCCs), ensuring a level of security equivalent to European standards.Furthermore, you can use the Shopify Privacy Portal to exercise specific rights regarding tracking controls, data erasure, and advertising transfers.5. Data Retention (How Long We Keep Your Data)
We do not hold onto your data indefinitely. We adhere to strict retention schedules:- Purchase and Billing Data: Retained for 10 years, as mandated by Italian tax and accounting legislation.
- Browsing Data (Cookies & Pixels): Retained in accordance with the specific expiration timelines of each platform, and never beyond legal limits.
- Newsletter Data: Stored until you choose to unsubscribe by clicking the link found at the bottom of any email we send. Once you opt out, your details are promptly removed from our active mailing lists.
6. Your Rights (Access, Rectification, Erasure)
The GDPR grants you complete control over your personal information. As an individual within the EU, you have the right to:- Access the personal data we hold about you.
- Request the rectification of incorrect or incomplete data.
- Request the erasure of your data (The Right to be Forgotten), provided it does not conflict with our legal obligations to retain financial and tax documentation.
- Request the restriction of processing or object to your data being used for marketing or profiling purposes.
- Request data portability in a structured, machine-readable format.
7. Cookie Management
Our website uses cookies—small text files saved on your device—to ensure the store functions correctly and to help us anonymously understand how visitors navigate our pages.- Technical and Essential Cookies: These are always active because they are indispensable for secure browsing, maintaining your shopping cart, and completing checkout. They do not require prior consent.
- Analytical and Profiling Cookies: We only deploy these tools (such as Google Analytics 4, Meta Pixel, and Pinterest Pixel) if you give us your explicit permission. They help us discover which notebooks are most popular or display tailored communication based on your interests.