Legal
Last updated: October 1, 2026
46.69° N · 10.55° E
Moraine · Lab 01
Template text. Replace the details and have it reviewed by a legal professional before publishing.
This policy explains what personal data we collect through this website, why we collect it and what rights you have. We collect as little as we can, and we never sell your data.
Who is responsible
The controller of your personal data is Moraine Alpine Skincare S.r.l. (demo), Moränenhof 4, 39020 Vinschgau (BZ), Italy. For any privacy question, write to privacy@moraine-skin.example.
What we collect and why
We only collect the data you give us through our forms, plus the technical data needed to deliver the website.
•
Newsletter. Your email address and the date and time you gave consent. We use them to send our monthly newsletter and your first-order code. Legal basis: your consent (Art. 6(1)(a) GDPR). We use double opt-in, so nothing is sent until you confirm your address.
•
Contact form. Your name, email address, topic, order number if you give one, and your message. We use them to answer you. Legal basis: our legitimate interest in replying to inquiries (Art. 6(1)(f) GDPR), or steps related to a contract when your message concerns an order (Art. 6(1)(b) GDPR).
•
Wholesale inquiries. In addition to your contact details: company name, website, city, country and your notes on where you would stock our products. We use them to assess and answer your inquiry. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
•
Technical data. When you visit the site, our hosting provider processes your IP address, browser type and the pages you request, so the site can be delivered and protected against abuse. Legal basis: our legitimate interest in running a reliable website (Art. 6(1)(f) GDPR).
Orders, cart and checkout
Our cart and checkout are run by the store provider connected to this website, Shopify or Stripe. When you check out, you enter your name, address, email and payment details on the provider’s pages. The provider processes this data to complete your order and payment under its own privacy policy, and shares with us what we need to pack, ship and support your order. We never see or store your full card details.
We keep order and invoice records for as long as tax and accounting law requires, which in Italy is generally ten years.
Cookies and local storage
This website doesn’t use advertising cookies. It saves a few small items in your browser’s local storage, which stay on your device:
•
Theme choice. Whether you prefer the Daylight or the Evening theme, so the page opens in the right colors on your next visit.
•
Bag. The products in your bag. In demo mode, the bag exists only in your browser. With a connected store, we keep a cart reference so your bag survives a page reload.
•
Checkout. When you go to checkout, the store provider may set its own cookies, which its privacy policy covers.
You can clear local storage at any time in your browser settings. If we add analytics or other tools that need your consent, we will ask for it first and list each tool here.
Who receives your data
We share data only with service providers that work for us under a data processing agreement: our website host, our email service provider, the connected store provider and our parcel carrier. They may only use your data to provide their service to us.
Some of these providers may process data outside the European Economic Area. In that case, the transfer relies on an adequacy decision of the European Commission or on the standard contractual clauses approved by it.
How long we keep it
•
Newsletter data: until you unsubscribe. We keep proof of your consent for three years after that.
•
Contact and wholesale messages: 24 months after our last exchange, unless they become part of an order or a business relationship.
•
Order and invoice records: as long as tax and accounting law requires.
•
Technical logs: up to 30 days.
Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time; this doesn’t affect processing that took place before. Every newsletter has an unsubscribe link.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. In Italy, this is the Garante per la protezione dei dati personali.
Contact and changes
To ask about this policy or to use any of your rights, write to privacy@moraine-skin.example or to our postal address above. We reply within one month.
We update this policy when our services change. The date at the top always shows the current version.