Privacy policy
Last updated: 12 October 2026
This policy describes how Taglia17 Srls processes the personal data of people who visit and use the Sanì online store, create an account, place an order, request assistance or choose to receive promotional communications.
1. Data controller
Taglia17 Srls
Registered office: Via dell'Arte Bianca 6, 70056 Molfetta (BA), Italy
VAT number: IT07919830724
Email: info@taglia17.it
PEC: taglia17srls@pec.it
Phone and WhatsApp: +39 391 356 4046
No Data Protection Officer (DPO) has been appointed. Privacy requests can be sent to info@taglia17.it.
2. Data processed
- Identification and contact details, such as name, address, email and phone number;
- data relating to accounts, orders, purchased products, returns, refunds and support;
- payment data and transaction confirmations; full card details are processed by payment providers and are not stored directly by Taglia17 Srls;
- communications sent by email, phone, WhatsApp and website forms, including the B2B form;
- marketing preferences and consent for newsletters, SMS, WhatsApp and advertising;
- technical and browsing data, such as IP address, browser, device, online identifiers, usage events and cookie preferences;
- data needed to prevent fraud, protect the store and comply with legal obligations.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Managing accounts, orders, payments, shipping, returns, exchanges and support | Performance of the contract and pre-contractual measures |
| Complying with tax, accounting and administrative obligations and requests from authorities | Legal obligation |
| Preventing fraud, abuse and security issues; defending the controller's rights | Legitimate interest and, where necessary, legal obligation |
| Responding to general or B2B enquiries | Pre-contractual measures or legitimate interest in responding |
| Sending newsletters, promotions, cart recovery messages, promotional SMS or WhatsApp messages | Consent, withdrawable at any time |
| Sending requested product availability alerts | Fulfilling the user's request |
| Inviting customers to review their purchase | Legitimate interest in improving the service, respecting the right to object |
| Non-essential analytics, profiling and personalised advertising through Meta, Google or TikTok | Consent given through the cookie banner |
4. Collection methods
Data is collected directly from users, automatically during browsing or through providers supporting the store, payments, delivery, fraud prevention, communications and reviews. Providing data necessary for an order is required to conclude and perform the contract; promotional consent is optional.
5. Recipients and providers
To the extent necessary, data may be shared with Shopify and its affiliates; Shopify Payments and payment networks; PayPal, Apple Pay, Google Pay and Klarna when selected; Poste Italiane; Trustpilot for review features; technical, administrative and professional providers; and public authorities where required by law.
With consent, data and online identifiers may be processed by Meta Platforms, Google and TikTok for measurement, analytics and advertising. Actual use depends on the tools activated in the store and users' cookie choices.
6. Shopify
The store is hosted by Shopify. Shopify processes data to provide the platform, checkout, security and other store features. Some enhanced features may involve processing by Shopify as an independent controller. Further information is available in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
7. International transfers
Some providers may process data outside the European Economic Area. In such cases, transfers rely on adequacy decisions, Standard Contractual Clauses or other safeguards provided by the GDPR. The Shopify data storage hosting location configured for the store is in the European Union, although some services and subprocessors may operate in other countries.
8. Retention periods
- Documents relating to orders, payments and tax obligations: 10 years, subject to disputes;
- customer accounts: until account closure, except data retained by law;
- support, complaints and communications: up to 24 months after the enquiry is closed, subject to the need to defend legal claims;
- B2B contacts who do not become customers: up to 24 months after the last interaction;
- email, SMS or WhatsApp marketing: until consent is withdrawn and in any case no longer than 24 months after the last relevant interaction, unless consent is renewed;
- advertising profiling: until consent is withdrawn and in any case no longer than 12 months, or the shorter period specified by the tool;
- availability alerts: until the alert is sent and for no more than 30 days afterwards;
- technical and security logs: normally no longer than 90 days, except for security incidents or legal obligations;
- cookies and preferences: for the period specified in the Cookie Policy or until consent is withdrawn.
9. Cookies and similar technologies
The website uses necessary technical cookies and, only after consent where required, preference, analytics and marketing cookies. Optional categories are disabled by default. Users may accept, reject or customise their choices and change them at any time through the “Review cookie preferences” link in the footer. Further details are available in the Cookie Policy.
10. Marketing communications
Consent to newsletters and promotional SMS or WhatsApp messages is optional and separate from purchasing. It may be withdrawn using the link in emails or by contacting the controller. Withdrawal does not prevent communications necessary for accounts, orders, security and support.
11. Automated decisions and profiling
With consent, browsing and purchasing activity may be used to segment audiences and display more relevant advertising. These activities do not produce decisions with legal or similarly significant effects on users.
12. Minors
The store is not intentionally directed at anyone under 18 and does not knowingly collect their data. A parent or guardian may request deletion of data provided by a minor.
13. Data subject rights
Data subjects may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent in the cases provided by the GDPR. They may also object to direct marketing at any time and lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali). Requests may be sent to info@taglia17.it; reasonable verification of identity may be required.
14. Security and updates
We adopt proportionate technical and organisational measures to protect data. This policy may be updated to reflect regulatory, technical or organisational changes; the update date will be displayed at the top of the page.