Privacy Policy

Privacy Policy

Last updated: 30/04/2026

This policy is provided in accordance with EU Regulation 2016/679 (GDPR) and describes how the personal data of users visiting sulcuore.com is processed.

1. Data Controller

Group Henrrys LLC
EIN 32-0818149
Orlando, Florida (USA)
Email: support@sulcuore.com

2. Types of Data Collected

  • Contact details: name, surname, email, phone number, shipping and billing address
  • Payment data: processed directly by Stripe and PayPal — we do not store card data
  • Personalization data: name or initials to be engraved on the product
  • Technical data: IP address, browser type, device, pages visited, cookies
  • Marketing data: email open rate, ad clicks (with consent)

3. Purposes and Legal Basis

Purpose Legal Basis
Execution of the sales contract Art. 6.1.b GDPR
Fulfillment of tax obligations Art. 6.1.c GDPR
Marketing communications Art. 6.1.a GDPR (consent)
Statistical analysis and service improvement Art. 6.1.f GDPR (legitimate interest)

4. Data Recipients

Data is communicated to:

  • Ownprint B.V. (Netherlands) — production supplier, receives personalization name and shipping address
  • Shopify Inc. (Canada) — e-commerce platform
  • Stripe / PayPal — payment processors
  • Google LLC — analytics, ads (only with cookie consent)
  • Microsoft (Clarity) — behavioral analysis (only with consent)

5. Extra-EU Transfer

Some data is transferred to the United States (Group Henrrys LLC, Shopify, Google). The transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission.

6. Retention Period

  • Purchase and invoice data: 10 years (tax obligation)
  • Marketing data: until consent is withdrawn
  • Technical data/cookies: max 12 months

7. Data Subject Rights

You have the right to:

  • Access your data (Art. 15 GDPR)
  • Rectify it (Art. 16 GDPR)
  • Erase it (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw consent at any time

To exercise your rights, please write to support@sulcuore.com.

8. Complaints to the Supervisory Authority

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): www.garanteprivacy.it

9. Cookies

For details on the cookies used, please see our Cookie Policy and manage your preferences via the banner at the site entrance.