PRIVACY POLICY

This Privacy Policy explains how Epigenhair SRL with registered office in Piazza Cadorna 6 Milan , VAT number 13884110969, processes the personal data collected from users of the Epigenhair.com website (the "Site"), in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Italian laws.

1.    Data controller

The data controller is Epigenhair SRL, based in Milan, Italy. You can contact us by email at hello@epigenhair.com with any questions or requests regarding your personal data.

2.    Personal data we collect

We collect and process the following types of personal data:

• Identification data : name, surname, billing and shipping address, telephone number, email.
• Purchase information : order history, payment method (note: we do not store credit card details).
• Technical data : IP address, browser type, cookies, and browsing activity on the Site.
• Marketing preferences : newsletter subscriptions, consent to receive promotional messages.

3.    Purpose of data processing

We collect your data for the following purposes:

• Manage your orders and deliver products
• Provide customer service and support
• Manage your account on the Site
• Send newsletters and promotional emails (with your consent)
• Improve our Site and user experience
• Comply with legal obligations (e.g., invoicing)

4.    Legal basis for processing

We process your data based on:

• Performance of a contract (e.g. purchase and delivery)
• Legal obligations
• Your consent (for marketing activities)
• Legitimate interest (e.g., website security, fraud prevention)

5.    Data retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, and to comply with legal, tax, or reporting obligations.

6.    Data sharing

We may share your data with:

• Payment providers (e.g., PayPal, Stripe)
• Shipping and logistics companies
• IT service providers (e.g., hosting, CRM)
• Legal or public authorities, if required. All third-party providers are contractually obligated to process your data securely and in compliance with the GDPR.

7.    Data transfers outside the EU

If we transfer your data outside the EU, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions from the European Commission.

8.    Your rights

As a data subject, you have the right to:

• Access your personal data
• Request correction or deletion
• Object to or limit processing
• Withdraw consent (for marketing)
• Request data portability

You can file a complaint with the Italian Data Protection Authority ( www.garanteprivacy.it ).
To exercise your rights, contact us at: hello@epigenhair.com

9.    Cookie

We use cookies to improve your browsing experience. For more information, see our [Cookie Policy].

10.          Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date.

Epigenhair
Epigenhair.com
hello@epigenhair.com