1. Data We Process

• Purchase data: name, email, billing details (limited), order info.

• Technical data: IP, device, browser, cookies, coarse location, analytics.

• Communications: emails/support; marketing preferences (if opted-in).

2. Purposes & Legal Bases

• Contract (Art. 6(1)(b) GDPR): process payment, deliver files, customer support.

• Legitimate interests (Art. 6(1)(f)): site security, fraud prevention, product improvement, basic analytics.

• Consent (Art. 6(1)(a)): newsletters and non-essential cookies/analytics.

• Legal obligation (Art. 6(1)(c)): tax and accounting records.

3. Retention

Order/tax records are kept for the period required by law; support records for a reasonable period; marketing data until you unsubscribe or withdraw consent.

4. Processors & Transfers

We use vetted processors (e.g., payment gateways, hosting, email service, analytics). Data may be transferred outside the EEA/UK using adequacy decisions, SCCs, or equivalent safeguards.

5. Your Rights

You can request access, rectification, erasure, restriction, portability, and objection; and you can withdraw consent at any time for marketing/cookies. You may lodge a complaint with your local supervisory authority. Contact: alloro.studio@gmail.com.

6. Cookies & Consent

We use necessary cookies and, with consent, analytics/marketing cookies. You can manage or withdraw consent at any time via our cookie banner/settings and your browser.

7. Security

We employ reasonable technical and organizational measures. No method is 100% secure, but we aim to protect against unauthorized access, alteration, or disclosure.

8. Children

This Site is not directed to children under 16, and we do not knowingly collect their personal data.

Last updated: October 2025