Last updated: November 1, 2026
1. Data Controller
Niccoli Davide, a sole trader operating under the name Therlyx, Via del Saccardo 71, 50041 Calenzano (FI), Italy. Email: therlyxstore@gmail.com. We process personal data in accordance with the General Data Protection Regulation (GDPR).
2. What data do we process?
Name, address, email address, phone number (if provided), order and payment details, and technical data such as IP address and cookies when you visit the website.
3. What do we use your data for?
To process, deliver, and invoice your order (performance of the contract); to provide customer service; to comply with legal obligations, such as tax record-keeping requirements; to prevent fraud and secure the website (legitimate interest); and, only with your consent, for newsletters and marketing.
4. Sharing with third parties
We only share data to the extent necessary with: Shopify (webshop platform), our payment service providers, shipping partners, and IT and accounting service providers. Agreements have been made with these parties regarding the protection of your data. When data is processed outside the EEA, it is done on the basis of appropriate safeguards, such as the European Commission's standard contractual clauses.
5. Retention period
We do not keep your data longer than necessary. We retain order and invoice details for 10 years in connection with the legal tax record-keeping requirements in Italy.
6. Cookies
We use necessary cookies for the operation of the webshop. We only place analytical and marketing cookies with your consent, which you can give or withdraw via the cookie banner.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing. You can withdraw your consent at any time. Send your request to therlyxstore@gmail.com. You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority in your own country.
8. Security
We take appropriate technical and organizational measures to protect your data against loss and unlawful use.