PRIVACY POLICY

This Privacy Policy explains how hexxee.shop collects, uses, stores, shares, and protects personal data when individuals visit https://hexxee.shop, place an order, create an account, contact us, subscribe to marketing, request a return, or otherwise use our services.

This policy is intended to provide information required under the General Data Protection Regulation, Regulation (EU) 2016/679 (“GDPR”), applicable Italian data-protection legislation, and other applicable privacy laws.

1. Data Controller

For the processing activities described in this policy, the operator of hexxee.shop acts as the data controller unless otherwise stated.

Store: hexxee.shop
Website: https://hexxee.shop
Email: info@hexxee.shop
Telephone: +39 3798992141
Business Address: Via dell'Orsa Maggiore, N. 10, Palermo (PA), Italy

Privacy questions and requests may be sent to info@hexxee.shop.

2. Personal Data We Collect

Depending on how an individual interacts with our store, we may collect:

Identity and contact data

This includes name, email address, billing address, delivery address, telephone number, account details, and preferred language.

Order and transaction data

This includes products ordered, selected sizes and colours, order number, order value, discounts, payment status, delivery information, returns, refunds, complaints, and customer-service history.

Payment information

Payments are processed through payment providers made available during checkout. We generally receive transaction status, payment method, limited payment identifiers, billing information, and fraud-screening results rather than complete card information.

Technical data

This may include IP address, browser type, device type, operating system, cookie identifiers, approximate location, time zone, language settings, and website activity.

Communications

This includes information contained in emails, return requests, complaints, reviews, surveys, telephone communications, and other messages sent to us.

Marketing data

This includes subscription status, consent records, marketing preferences, email engagement, and withdrawal of consent.

Security data

This may include transaction patterns, account activity, device signals, delivery information, and risk indicators used to detect fraud or unauthorized activity.

3. How We Collect Personal Data

We collect personal data:

• Directly from customers and website visitors;

• Automatically through cookies and similar technologies;

• From Shopify;

• From payment providers;

• From delivery and fulfilment partners;

• From security and fraud-prevention providers;

• From analytics and advertising providers where permitted; and

• From another person who places an order on behalf of the recipient.

A person providing another individual’s information must have lawful authority to do so.

4. Purposes and Legal Bases

We process personal data only where an appropriate legal basis applies.

Performance of a contract

We process information to:

• Operate the cart and checkout;

• Accept and fulfil orders;

• Process payments;

• Deliver products;

• Send order notifications;

• Manage customer accounts;

• Provide customer support;

• Process cancellations, returns, and refunds; and

• Handle contractual complaints.

Compliance with legal obligations

We process information to:

• Maintain accounting and tax records;

• Comply with consumer-protection obligations;

• Respond to lawful government requests;

• Meet product-safety obligations;

• Comply with data-security requirements; and

• Establish legally required transaction records.

Legitimate interests

Subject to applicable balancing requirements, we may process information to:

• Prevent fraud and misuse;

• Protect customers and the website;

• Improve our services;

• Measure website performance;

• Manage inventory;

• Handle complaints;

• Establish or defend legal claims; and

• Send limited permitted communications to existing customers.

Consent

Where legally required, we rely on consent for:

• Promotional emails;

• Advertising cookies;

• Non-essential analytics;

• Personalized advertising; and

• Other optional processing explained when consent is requested.

Consent may be withdrawn at any time without affecting processing lawfully carried out before withdrawal.

5. Shopify

Our store is hosted through Shopify, which supplies the e-commerce platform used to display products, operate checkout, process store interactions, and support website security.

Depending on the processing activity, Shopify may act as our processor, service provider, independent controller, or in another legally recognized role.

Customers should review Shopify’s applicable privacy documentation for information about Shopify’s independent processing practices.

6. Sharing Personal Data

We may share necessary personal data with:

• Shopify and e-commerce technology providers;

• Payment processors, banks, and card networks;

• Warehousing and fulfilment providers;

• Postal services and delivery carriers;

• Customer-support providers;

• Cloud hosting and information-technology providers;

• Cybersecurity and fraud-prevention providers;

• Analytics and advertising providers where permitted;

• Accountants, insurers, auditors, lawyers, and advisers;

• Government authorities, regulators, or courts where legally required; and

• A buyer or successor involved in a lawful business reorganization.

Service providers should receive only the information reasonably necessary to perform their services.

We do not sell personal data in the ordinary sense of exchanging personal information directly for money.

7. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, tags, and similar technologies to:

• Operate the shopping cart and checkout;

• Maintain secure sessions;

• Remember preferences;

• Prevent fraud;

• Measure website traffic;

• Understand website use;

• Improve performance;

• Personalize content; and

• Measure advertising where consent has been provided.

Strictly necessary technical cookies may be used without consent where permitted by law.

Non-essential analytics, personalization, and advertising cookies will be used only after obtaining any consent required by applicable law.

Visitors may manage available choices through the website’s cookie banner, privacy controls, and browser settings.

8. Marketing Communications

We send electronic marketing only where we have consent or another lawful basis.

Recipients may unsubscribe through the link in a marketing message or by contacting info@hexxee.shop.

Unsubscribing does not prevent necessary communications about orders, payments, deliveries, returns, refunds, security, or legal notices.

9. International Data Transfers

Some providers may process personal data outside Italy or the European Economic Area.

Where required, international transfers will be protected through:

• A European Commission adequacy decision;

• Standard Contractual Clauses;

• Appropriate supplementary safeguards; or

• Another legally recognized transfer mechanism.

Information about relevant safeguards may be requested at info@hexxee.shop.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purposes and legal obligations.

Retention periods depend on:

• Italian tax and accounting requirements;

• The customer relationship;

• Return and legal-guarantee periods;

• Fraud-prevention requirements;

• Applicable limitation periods; and

• Existing complaints or legal disputes.

When personal data is no longer required, it will be deleted, anonymized, or securely isolated unless continued retention is legally required.

11. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

Measures may include encrypted transmission, access controls, authentication procedures, platform security functions, backups, monitoring, and confidentiality obligations.

No internet or storage system can be guaranteed completely secure.

12. Children’s Privacy

Our store is not intended for children acting without the authorization of a parent or legal guardian.

We do not knowingly collect personal data directly from children who cannot lawfully consent to the relevant processing. A parent or guardian who believes that a child has provided information without authorization should contact us.

13. Automated Decision-Making

Payment and fraud-prevention providers may use automated tools to evaluate transaction or security risks.

Where a solely automated decision produces legal or similarly significant effects and applicable law grants relevant rights, the individual may request human intervention, express a point of view, and contest the decision.

14. Privacy Rights

Subject to applicable conditions and exceptions, individuals may have the right to:

• Access their personal data;

• Correct inaccurate or incomplete information;

• Request deletion;

• Restrict processing;

• Object to processing based on legitimate interests;

• Object to direct marketing at any time;

• Receive eligible data in a portable format;

• Withdraw consent;

• Request information about international-transfer safeguards;

• Exercise applicable rights concerning automated decisions; and

• Submit a complaint to a supervisory authority.

15. Exercising Privacy Rights

Requests may be sent to info@hexxee.shop.

We may request reasonable proof of identity before disclosing or modifying personal information.

We will respond within the period required by applicable law. Under the GDPR, this is generally one month, subject to lawful extensions for complex or numerous requests.

16. Complaints

Individuals may contact us first so that we can investigate a concern.

They may also submit a complaint to:

Garante per la protezione dei dati personali
Piazza Venezia 11
00187 Rome, Italy
Website: https://www.garanteprivacy.it

Individuals may also contact another competent EU or EEA supervisory authority.

17. Third-Party Links

Our website may contain links to payment providers, delivery carriers, social networks, or other external services.

These services operate independently and process information under their own privacy notices. We are not responsible for their independent privacy practices.

18. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, providers, technology, or legal obligations.

The updated version will be published with a revised effective date. Additional notice or renewed consent will be provided where required.

19. Contact Us

hexxee.shop
Website: https://hexxee.shop
Email: info@hexxee.shop
Telephone: +39 3798992141
Address: Via dell'Orsa Maggiore, N. 10, Palermo (PA), Italy