Privacy & Security Policy

Your trust is our most valuable asset. Therefore, we are committed to protecting your personal data with the utmost seriousness and transparency. This policy explains what data we collect, why we do it, and what your rights are, in accordance with the General Data Protection Regulation (GDPR - EU Reg. 2016/679).

1. Data Controller

The Data Controller of your personal data is:
GBRAND di Gionata Lenzi e C. SAS
Registered Office: Via Del Commercio, 28 - 57014 Collesalvetti (LI), Italy
Email: info@originaltuscany.com

2. What Data We Collect and Why

We collect different types of data exclusively for the purposes described below.

a) To Process Your Order (Performance of a Contract)

When you make a purchase, we collect the necessary data to complete the transaction and ship your products: name, surname, shipping and billing address, email, and phone number.

b) To Communicate With You (Legitimate Interest / Performance of a Contract)

We use your email and phone number to send you order confirmations, shipping updates, and to respond to any of your customer service requests.

c) For Marketing Activities (with Your Consent)

Only if you explicitly subscribe to our Newsletter, we will use your email address to send you news, promotions, and exclusive content. You can withdraw your consent at any time by clicking the "unsubscribe" link found in every email.

3. Who We Share Your Data With

We do not sell or transfer your data to third parties for marketing purposes. We only share information with strategic partners who are essential to providing our service:

Express Couriers (DHL, FedEx, BRT, etc.): to deliver your orders.
Payment Gateways (Stripe, PayPal): to securely process payments. We never see or store your full credit card details.

4. How Long We Keep Your Data

We retain your personal data for the time strictly necessary to fulfill the purposes for which it was collected. Data related to purchases is kept for at least 10 years, as required by Italian tax and civil law.

5. Your Privacy Rights

Under the GDPR, you have full control over your data. You can exercise the following rights at any time:

Right of Access: To ask what data we hold about you.
Right to Rectification: To correct your data if it is inaccurate.
Right to Erasure (Right to be Forgotten): To request the deletion of your data, subject to legal exceptions.
Right to Restriction of Processing: To request that we limit how we process your data.
Right to Object: To object to processing for marketing purposes.
Right to Data Portability: To receive your data in a structured, machine-readable format.

To exercise your rights, you can write to us at info@originaltuscany.com.

6. Cookie Policy

We use cookies to ensure the proper functioning of the site and to enhance your experience. For all detailed information on what cookies we use and how you can manage them, please consult our dedicated Cookie Policy.

7. Data Security

We take security very seriously. Our website uses the SSL (Secure Sockets Layer) encryption protocol to protect all communications and transactions, and we rely on technology partners who guarantee the highest security standards.