Privacy Policy
Last updated: June 2026
This Privacy Policy explains how BAZZURINI S.r.l. Unipersonale, operating the ShopDecor online store, collects and processes personal data in connection with the website, orders, payments, shipping, customer support, marketing, the Statutory Right of Withdrawal & Complaints Form, warranty claims and related services.
This Policy is designed for an international ecommerce context and should be read together with the Cookie preferences banner and any market-specific information made available on the website.
1. Data controller
The data controller is BAZZURINI S.r.l. Unipersonale, with registered office at Via G. Donizetti, 14, 25046 Cazzago San Martino (BS), Italy, VAT number IT01620550986, REA Brescia number BS0331771.
For privacy-related requests, contact: privacy@shopdecor.com. For general customer support, customers may contact info2@shopdecor.com or info@shopdecor.com, depending on language and market.
ShopDecor has not appointed a Data Protection Officer. If this changes, the relevant contact details will be made available in this Privacy Policy.
2. Personal data we process
|
Category |
Examples |
|
Account, order and checkout data |
Name, company name, billing and shipping address, email, phone, order number, product details, amounts, VAT number, tax/invoicing details, SDI/PEC where applicable. |
|
Payment data |
Payment method information and transaction references. Full card details are handled by payment providers and are not stored by ShopDecor. |
|
Shipping and delivery data |
Delivery address, carrier, tracking, delivery status, customs/import information where applicable. |
|
Customer support data |
Messages, emails, chat content, support requests, complaint details and related communications. |
|
Withdrawal, complaints and warranty form data |
Full name/company name, email, order number, delivery country, products concerned, reason for form submission, request description, date/time of submission, submission ID, and optional supporting documents/photos. |
|
Marketing data |
Email address, marketing preferences, newsletter subscription, interaction with marketing communications where applicable. |
|
Technical and usage data |
IP address, device and browser information, cookie identifiers, log files, website interactions, analytics and advertising events, subject to consent where required. |
3. Purposes and legal bases
|
Purpose |
Description |
Legal basis |
|
Process orders and payments |
To sell products, process payments, confirm orders and manage fulfilment. |
Contract performance; legal obligations where applicable. |
|
Shipping and delivery |
To arrange delivery, tracking, customs/import handling and carrier communications. |
Contract performance; legal obligations; legitimate interests. |
|
Customer support |
To answer questions, manage requests, resolve issues and maintain records. |
Contract performance; legitimate interests; legal obligations. |
|
Withdrawal, returns, complaints and warranty claims |
To receive, confirm, assess and manage statutory withdrawal requests, returns, complaints, warranty claims, delivery issues, damaged, wrong, missing or non-conforming product claims. |
Contract performance; legal obligations; legitimate interests in managing and defending claims. |
|
Invoicing, accounting and tax compliance |
To issue invoices, keep accounting records, comply with VAT, customs, tax and business obligations. |
Legal obligations. |
|
Fraud prevention and security |
To prevent misuse, fraud, unauthorized access, chargebacks, harmful activity and security incidents. |
Legitimate interests; legal obligations where applicable. |
|
Marketing communications |
To send newsletters, offers and marketing communications where permitted. |
Consent or soft opt-in/legitimate interest where permitted by applicable law. |
|
Analytics and advertising |
To measure website performance, understand interactions and deliver or measure advertising. |
Consent where required; legitimate interests for strictly necessary or aggregated analytics where permitted. |
|
Legal claims and compliance |
To establish, exercise or defend legal claims and comply with requests by authorities. |
Legal obligations; legitimate interests. |
4. Statutory Right of Withdrawal & Complaints Form
ShopDecor uses Shopify Forms to provide the Statutory Right of Withdrawal & Complaints Form, available at https://www.shopdecor.com/pages/withdrawal-and-complaint-form. The form is used to submit statutory withdrawal requests, return requests, complaints, damaged product claims, defective or non-conforming product claims, delivery issues, missing, incomplete or incorrect product reports, wrong product reports and other order-related requests.
The form may allow customers to upload supporting documents or photos. Uploading supporting documents is optional and is not required to exercise a statutory right of withdrawal. Customers should avoid uploading documents or images that contain unnecessary personal data or data about third parties, unless relevant to the request.
ShopDecor uses Shopify Flow and the third-party app FlowMail - Flow email sender to send automatic confirmation emails after form submission. The confirmation email is sent to the email address entered by the customer in the form.
5. Service providers and recipients
Personal data may be shared with service providers and other recipients only where necessary for the purposes described in this Policy. These may include:
-
Shopify Plus and related Shopify services, including Shopify Forms, Shopify Flow and Shopify marketing tools;
-
FlowMail - Flow email sender for form-related email automation;
-
Tidio - Live Chat & Chatbots for live chat and customer support;
-
payment providers, including Shopify Payments/Stripe infrastructure, Apple Pay, Google Pay, PayPal and, for off-site transactions, Revolut Payments;
-
banks for bank transfer payments;
-
carriers and logistics providers, including FedEx/TNT, Poste Italiane, BRT, UPS, DHL, Schenker and other carriers where required by destination or shipment characteristics;
-
analytics and advertising providers, including Google Analytics 4, Google Ads, Meta Pixel and TikTok Pixel, subject to consent where required;
-
Cookiebot CMP by Usercentrics for cookie consent management;
-
professional advisers, accountants, legal counsel, insurers, authorities or courts where necessary.
Some providers may act as processors on behalf of ShopDecor; others may act as independent controllers depending on the service and applicable law. ShopDecor uses appropriate contractual and organizational measures where required.
6. Cookies and similar technologies
ShopDecor uses cookies and similar technologies to operate the website, remember preferences, measure performance, support marketing and improve services. Cookie categories may include strictly necessary cookies, preference cookies, analytics cookies and marketing cookies.
ShopDecor uses Cookiebot CMP by Usercentrics to collect and manage cookie preferences. Customers can accept, reject or customize cookie choices through the cookie banner and can change preferences later using the cookie preferences button available on the website.
Non-essential cookies, analytics tools and advertising pixels are used only where required consent has been obtained, unless applicable law permits a different legal basis. More detailed information is available in the cookie banner or cookie declaration shown on the website.
7. Marketing communications
ShopDecor may send marketing emails, newsletters and promotional communications through Shopify marketing tools where the customer has consented or where applicable law permits similar-product communications to existing customers. Customers can unsubscribe at any time using the unsubscribe link in marketing emails or by contacting ShopDecor.
Service emails related to orders, payments, shipping, customer support, statutory withdrawal, complaints, warranty claims and similar matters are not marketing communications and may be sent where necessary to provide services or comply with legal obligations.
8. International transfers
Because ShopDecor operates internationally and uses global service providers, personal data may be transferred to countries outside the European Economic Area. Where such transfers occur, ShopDecor relies on appropriate safeguards as required by applicable data protection law, such as adequacy decisions, Standard Contractual Clauses, transfer impact assessments and supplementary measures where necessary.
ShopDecor does not rely on the invalidated EU-US Privacy Shield as a transfer mechanism. Where a provider relies on the EU-US Data Privacy Framework or another adequacy mechanism, ShopDecor will assess whether that mechanism is applicable to the relevant provider and processing activity.
9. Data retention
ShopDecor keeps personal data only for as long as necessary for the purposes described in this Policy, including to fulfil contracts, comply with legal, tax, customs and accounting obligations, manage customer requests, and establish, exercise or defend legal claims. Retention periods may vary depending on the type of data, legal obligations and applicable limitation periods.
|
Data type |
Retention approach |
|
Order, invoice, tax and accounting records |
Generally up to 10 years or the longer period required by applicable tax, accounting or civil law. |
|
Withdrawal, return, complaint and warranty records |
For the time necessary to manage the request and for the applicable limitation period for contractual, consumer, warranty or legal claims, generally up to 10 years where relevant under Italian law, unless a shorter or longer mandatory period applies. |
|
Supporting documents and photos uploaded with requests |
For the time necessary to assess and manage the request and any related claim, dispute, warranty or defence need. Unnecessary documents should not be retained longer than needed. |
|
Customer support tickets and communications |
For the time necessary to provide support and manage contractual or legal claims, generally up to the applicable limitation period. |
|
Marketing data |
Until consent is withdrawn, the customer unsubscribes, or the data is no longer necessary for marketing purposes, subject to periodic review and applicable local rules. |
|
Cookie and analytics data |
According to the cookie banner, cookie declaration, provider settings and applicable law. |
|
Security logs |
For the period reasonably necessary for security, fraud prevention and incident management, unless a longer period is required for legal claims or investigations. |
Where data is no longer needed, ShopDecor will delete, anonymize or securely retain it only where legally required or permitted.
10. Data subject rights
Subject to applicable law and applicable conditions, individuals may have the right to request access to their personal data, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent where processing is based on consent.
Requests can be sent to privacy@shopdecor.com. ShopDecor may need to verify the identity of the requester before acting on a request. Individuals also have the right to lodge a complaint with a competent supervisory authority. For Italy, the supervisory authority is the Garante per la protezione dei dati personali.
11. Security
ShopDecor uses technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss or destruction. These measures include access controls, secure platforms, provider due diligence, internal procedures and appropriate contractual safeguards. No online service can be guaranteed to be completely secure, but ShopDecor takes reasonable steps to protect personal data.
12. Children
The website is not intended for children. Customers should be legally capable of entering into purchase contracts. Where applicable law requires parental or guardian consent for the processing of a minor's data, such consent must be provided before using relevant services.
13. Links to third-party websites
The website may contain links to third-party websites or services. ShopDecor is not responsible for the privacy practices of third parties. Customers should read the privacy information provided by those third parties.
14. Changes to this Privacy Policy
ShopDecor may update this Privacy Policy from time to time to reflect legal, technical or business changes. The updated version will be published on the website. Where required by law, ShopDecor will provide additional notice or request consent.