Privacy policy

PRIVACY POLICY

Last updated: February 23, 2026

1. Data Controller

Sunset Yogurt di Montavoci Cosima Ramo Domenico Gisberti 6, 30141 Murano, Venice, Italy VAT: IT04509410272 Email: info@sunsetyogurt.com

2. Introduction

This Privacy Policy describes how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR - Regulation 2016/679) and Italian privacy legislation (D.Lgs. 196/2003 as amended by D.Lgs. 101/2018).

3. Personal Data We Collect

When you visit our store or make a purchase, we collect the following personal information:

• Name and surname
• Billing and shipping address
• Email address
• Phone number (if provided)
• Payment information (processed securely by our payment providers)
• IP address and browsing data
• Order history and preferences

4. Legal Basis for Processing

We process your personal data based on:

• Contract performance: to process and fulfill your orders
• Legitimate interest: to improve our services, prevent fraud, and communicate about our products
• Consent: for marketing communications (you can withdraw consent at any time)
• Legal obligation: to comply with tax and accounting requirements

5. How We Use Your Data

We use your personal information to:

• Process and fulfill your orders
• Communicate with you about your orders
• Screen orders for potential fraud or risk
• Provide you with information about our products (with your consent)
• Improve our store and customer experience
• Comply with legal obligations (tax, accounting)

6. Data Sharing

We share your personal data only with:

• Shopify: Our e-commerce platform provider (data is stored on Shopify's secure servers)
• Payment processors: To process payments securely (PCI-DSS compliant)
• Shipping carriers: To deliver your orders
• Email service providers: To send order confirmations and communications (with your consent)

We do not sell or rent your personal data to third parties.

7. International Data Transfers

Some of our service providers (including Shopify) may be located outside the European Economic Area (EEA), including in the United States. When we transfer data internationally, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

8. Data Retention

We retain your personal data:

• Order data: 10 years (Italian tax and accounting requirements)
• Marketing data: Until you withdraw consent or request deletion
• Browsing data: As specified in our cookie policy

9. Your Rights Under GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal obligations)
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: For marketing communications at any time

To exercise these rights, contact us at info@sunsetyogurt.com

10. Cookies

We use cookies to enhance your browsing experience. Our website uses the following types of cookies:

• Essential cookies: Required for the website to function (e.g., shopping cart, checkout)
• Analytics cookies: To understand how visitors use our site
• Marketing cookies: To show relevant advertisements (with your consent)

You can manage cookie preferences through your browser settings.

11. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL encryption for data transmission
• Secure servers and databases
• PCI-DSS compliance for payment processing
• Regular security assessments

12. Minors

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from minors.

13. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali):

Website: www.garanteprivacy.it Email: garante@gpdp.it

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this policy.

15. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us at:

Email: info@sunsetyogurt.com Address: Ramo Domenico Gisberti 6, 30141 Murano, Venice, Italy

COOKIE POLICY

Last updated: February 23, 2026

1. What Are Cookies

Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit our website. They help us provide you with a better browsing experience and allow certain features to function properly.

2. Data Controller

Sunset Yogurt di Montavoci Cosima Ramo Domenico Gisberti 6, 30141 Murano, Venice, Italy VAT: IT04509410272 Email: info@sunsetyogurt.com

3. Types of Cookies We Use

3.1 Essential Cookies (Always Active)

These cookies are necessary for the website to function and cannot be disabled. They include:

• _session_id: Unique token to manage your shopping session
• cart: Stores information about items in your shopping cart
• cart_sig: Security token to verify cart integrity
• cart_ts: Timestamp of cart creation
• checkout_token: Unique token for checkout process
• secure_customer_sig: Customer authentication token

Legal basis: Legitimate interest (necessary for website functionality)

Duration: Session cookies (deleted when you close your browser) or up to 2 weeks

3.2 Analytics Cookies

These cookies help us understand how visitors interact with our website:

• _shopify_y: Analytics cookie to track user behavior
• _shopify_s: Session analytics cookie
• _shopify_sa_p: Analytics related to marketing campaigns
• _shopify_sa_t: Analytics timestamp

Legal basis: Consent (you can opt-out)

Duration: 30 minutes to 1 year

Provider: Shopify Inc.

3.3 Marketing Cookies

These cookies are used to show you relevant advertisements:

• _tracking_consent: Stores your cookie consent preferences
• Third-party cookies from advertising platforms (Google, Facebook, etc., if applicable)

Legal basis: Consent (you can opt-out)

Duration: Up to 1 year

4. Third-Party Cookies

Our website may use third-party services that set their own cookies:

• Payment processors (Stripe, PayPal, etc.): For secure payment processing
• Social media platforms: If you interact with social sharing buttons
• Analytics providers: To analyze website traffic

These third parties have their own privacy and cookie policies.

5. How to Manage Cookies

5.1 Cookie Banner

When you first visit our website, you will see a cookie banner allowing you to accept or reject non-essential cookies.

5.2 Browser Settings

You can control and delete cookies through your browser settings:

• Chrome: Settings > Privacy and security > Cookies
• Firefox: Settings > Privacy & Security > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Privacy > Cookies

Please note that disabling essential cookies may affect website functionality.

5.3 Opt-Out Links

• Google Analytics: https://tools.google.com/dlpage/gaoptout

6. Your Rights

Under GDPR, you have the right to:

• Withdraw consent for non-essential cookies at any time
• Access information about cookies we use
• Request deletion of cookie data

To exercise these rights, contact us at info@sunsetyogurt.com

7. Updates to This Cookie Policy

We may update this Cookie Policy from time to time. The updated version will be indicated by the "Last updated" date at the top.

8. Contact Us

For questions about our use of cookies, contact us at:

Email: info@sunsetyogurt.com Address: Ramo Domenico Gisberti 6, 30141 Murano, Venice, Italy