PRIVACY POLICY

Last updated: [DD Month YYYY]

1. Who We Are and Who Is Responsible for Your Personal Data

This Privacy Policy explains how personal information is collected, used, stored and shared when you visit our website, place an order, contact us or otherwise interact with Matteo Velmont.

The data controller responsible for your personal information is:

Legal entity or sole trader: [Full legal name]
Trading name: Matteo Velmont
Company or business registration number: [●]
Registered or business address: [Full address]
Email: info@matteovelmont.com
Website: www.matteovelmont.com
UK representative, where applicable: [Name and contact details]

Throughout this Privacy Policy, “Matteo Velmont”, “we”, “us” and “our” refer to the business identified above.

By using this website or purchasing products from us, you acknowledge that you have been informed about how we process your personal information in accordance with this Privacy Policy.

2. Personal Information We May Collect

Depending on how you interact with our store, we may collect and process the following categories of personal information:

• Your first name and surname.
• Your email address.
• Your telephone number.
• Your billing and delivery addresses.
• Information relating to orders, purchases, returns, exchanges, refunds and customer service enquiries.
• Transaction details and payment status information.
• Information required to process payments through secure payment service providers.
• Website browsing information, including your IP address, browser, device, operating system and approximate location.
• Information about how you use the website, including pages viewed, products visited, items added to your basket and interactions with advertisements.
• Marketing and communication preferences.
• Information you voluntarily provide through forms, subscriptions, reviews, emails, WhatsApp or customer service communications.

Payment-card information is normally processed directly by our secure payment providers. Matteo Velmont may receive limited transaction information but does not ordinarily receive or store your complete payment-card details.

We do not intentionally request special-category personal information, such as information concerning health, religion, political opinions, sexual orientation, ethnicity or biometric data.

Please avoid sending this type of information unless it is genuinely necessary.

3. How We Collect Personal Information

We may collect personal information:

• Directly from you when you place an order, create an account, complete a form, subscribe to marketing communications or contact us.
• Automatically through cookies, pixels and similar technologies when you use our website.
• From payment providers when a payment is authorised, rejected, refunded or disputed.
• From delivery, logistics and fulfilment providers.
• From Shopify and other technology providers used to operate the store.
• From advertising, analytics and social media platforms, where permitted by law and your consent preferences.
• From fraud-prevention, identity-verification or payment-risk services.
• From publicly available sources where legally permitted.

Where we receive personal information from another source, we will use it only for purposes compatible with the reason for which it was originally collected or as otherwise permitted by law.

4. How We Use Your Personal Information

We may process your personal information for the following purposes:

• To process orders, payments, deliveries, returns, refunds and exchanges.
• To provide customer support and respond to questions or complaints.
• To create and manage customer accounts where this option is available.
• To send order confirmations, delivery updates and other service-related communications.
• To identify and prevent fraud, unauthorised transactions and misuse of the website.
• To verify payment and delivery information.
• To improve our website, products, customer experience and marketing communications.
• To understand how customers use our website.
• To remember products added to your basket.
• To send abandoned-basket reminders where legally permitted.
• To send newsletters, offers, product launches and promotional communications.
• To personalise website content and advertising where consent is required and has been obtained.
• To measure the performance of advertising campaigns.
• To protect our legal rights and respond to disputes or chargebacks.
• To comply with legal, tax, accounting, consumer-protection and regulatory obligations.

5. Lawful Bases for Processing

We process personal information only where we have a valid lawful basis under applicable UK data-protection legislation.

Depending on the circumstances, we may rely on:

Performance of a Contract

We process information needed to:

• Accept and fulfil your order.
• Process payment.
• Deliver products.
• Provide customer service.
• Manage returns, exchanges and refunds.
• Take steps at your request before entering into a contract.

Consent

We may rely on your consent for:

• Email or SMS marketing where consent is required.
• Certain cookies, pixels and advertising technologies.
• Optional forms or communications.
• Personalised advertising where applicable.

You may withdraw your consent at any time by contacting info@matteovelmont.com or using the unsubscribe or privacy controls provided.

Withdrawing consent will not affect processing that was lawful before consent was withdrawn.

Legal Obligation

We may process information to comply with:

• Tax and accounting requirements.
• Consumer-protection laws.
• Regulatory obligations.
• Fraud-prevention and financial-compliance requirements.
• Requests from courts, regulators or competent authorities.

Legitimate Interests

We may process information where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.

These interests may include:

• Operating and improving our online store.
• Protecting the security of the website.
• Preventing fraud and misuse.
• Understanding store performance.
• Managing customer enquiries.
• Protecting or enforcing our legal rights.
• Sending marketing about similar products where legally permitted.
• Improving our products, services and customer experience.

Where we rely on legitimate interests, we assess the necessity of the processing and balance our interests against the potential impact on individuals.

6. Information Required to Complete a Purchase

Certain personal information is required so that we can enter into and perform our contract with you.

For example, we may need your name, contact details, delivery address and payment information to process and deliver an order.

If you do not provide required information, we may be unable to:

• Accept or complete your order.
• Process payment.
• Deliver the products.
• Provide a refund or exchange.
• Respond properly to your customer service request.

Other information, such as marketing preferences, is optional and is not required to make a purchase.

7. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, fraud-prevention and dispute-resolution requirements.

In particular:

• Order, payment and invoicing information will be retained for the periods required by applicable tax, accounting and commercial laws.
• Customer service information will be retained for as long as necessary to manage the enquiry, complaint or dispute.
• Marketing information will be retained until you withdraw consent, unsubscribe or object to the processing.
• Fraud-prevention and security information may be retained for as long as reasonably necessary to protect the business and its customers.
• Information connected with legal claims may be retained until the relevant limitation periods have expired.

When information is no longer required, it will be deleted, anonymised or securely restricted, where appropriate.

8. Marketing Communications

Where permitted by law, Matteo Velmont may send you communications concerning:

• New collections.
• Product launches.
• Promotions and discounts.
• Restocked products.
• Abandoned baskets.
• Products similar to those you previously purchased or considered purchasing.
• Brand news and other relevant updates.

We will send electronic marketing only where:

• You have given valid consent; or
• The existing-customer exception, commonly known as the “soft opt-in”, applies and we gave you a clear opportunity to opt out when your details were collected.

Every marketing email or text message will include a clear method for opting out. The UK soft opt-in can apply to similar products for existing customers, but customers must be offered an opt-out both when their details are collected and in every subsequent marketing message.

You may unsubscribe at any time by:

• Using the unsubscribe link included in our emails.
• Following the opt-out instructions included in an SMS.
• Contacting info@matteovelmont.com.

Marketing consent is not required to make a purchase.

We may retain limited information on a suppression list after you unsubscribe to ensure that we do not send you further marketing communications.

9. SMS, WhatsApp and Other Notifications

Where available, we may use SMS, WhatsApp or similar channels to send:

• Order confirmations.
• Delivery and tracking updates.
• Customer service messages.
• Payment or delivery issue notifications.
• Abandoned-basket reminders.
• Marketing communications where legally permitted.

Transactional communications necessary to fulfil an order are not promotional communications.

You may opt out of marketing messages at any time by following the instructions in the message or contacting:

info@matteovelmont.com

Opting out of marketing will not prevent us from sending essential communications relating to an existing order.

10. Abandoned Baskets and Personalised Advertising

Our website may use cookies, pixels and similar technologies to remember products added to your basket and identify purchases that were not completed.

Where legally permitted and subject to your consent preferences, we may use this information to:

• Send abandoned-basket reminders.
• Display relevant advertisements.
• Measure advertising performance.
• Limit how frequently advertisements are displayed.
• Understand whether an advertisement resulted in a website visit or purchase.

These reminders may be delivered through email, SMS, WhatsApp, social media advertising or other supported channels.

You can manage advertising and cookie preferences through our cookie-consent tool, where available.

11. Who We Share Personal Information With

We may share personal information with carefully selected service providers where necessary to operate the business, including:

• Ecommerce platforms.
• Payment processors.
• Banks and financial-service providers.
• Warehouses, suppliers and fulfilment partners.
• Delivery and logistics companies.
• Email and SMS marketing providers.
• Customer support platforms.
• Website analytics providers.
• Advertising and social media platforms.
• Fraud-prevention and security providers.
• Hosting, maintenance and other technology providers.
• Accountants, tax advisers, insurers and legal advisers.
• Government bodies, regulators, courts or law-enforcement authorities where legally required.

These organisations may act as processors, independent controllers or joint controllers, depending on the services they provide.

We require service providers acting on our behalf to use personal information only as necessary to provide their services and to protect it in accordance with applicable contractual and legal requirements.

We do not sell personal information in exchange for monetary payment.

12. Shopify and Other Service Providers

Our online store may be hosted and operated using Shopify Inc. and related Shopify services.

Shopify may process personal information required to:

• Operate the website.
• Host product and customer information.
• Process orders.
• Manage checkout.
• Detect fraud.
• Support payments and store functionality.

Other third-party providers may also process information needed to operate the store, provide deliveries, send communications, measure website performance or display advertising.

These providers may process information in accordance with their own privacy notices and their contractual arrangements with us.

13. International Transfers

Some of our service providers, suppliers or business partners may be located outside the United Kingdom or may access personal information from other countries.

Where UK data-protection rules apply to an international transfer, we will seek to ensure that it is protected through an approved legal mechanism, which may include:

• UK adequacy regulations.
• The UK International Data Transfer Agreement.
• The UK Addendum to approved standard contractual clauses.
• Binding corporate rules.
• Another lawful exception or safeguard permitted under UK data-protection legislation.

Where required, we will also assess whether additional contractual, organisational or technical measures are necessary.

You may contact info@matteovelmont.com to request further information about the safeguards used for international transfers. The ICO treats access by a separate organisation outside the UK as an international transfer and requires restricted transfers to be covered by an applicable legal mechanism or safeguard.

14. Your Data-Protection Rights

Depending on the circumstances and lawful basis used, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Request restriction of processing.
• Object to certain processing.
• Receive certain information in a structured, commonly used and machine-readable format.
• Request that information be transferred to another organisation where applicable.
• Withdraw consent at any time.
• Object to direct marketing.
• Raise concerns about automated decision-making.
• Make a data-protection complaint.

These rights are not absolute and may be subject to legal conditions or exemptions.

Right to Object to Direct Marketing

You have the right to object at any time to the use of your personal information for direct-marketing purposes, including related profiling.

When you object, we will stop using your information for those purposes.

To exercise your rights, contact:

info@matteovelmont.com

Please clearly explain which right you wish to exercise.

We may request reasonable information to verify your identity before responding. This protects personal information from unauthorised access or disclosure.

Privacy notices should identify the controller, purposes, lawful bases, recipients, retention criteria, international transfers and applicable individual rights.

15. Automated Decision-Making and Profiling

We may use automated tools to support:

• Fraud detection.
• Payment-risk assessment.
• Website personalisation.
• Product recommendations.
• Advertising measurement and audience selection.

Where we use solely automated decision-making that produces legal or similarly significant effects, we will provide the information required by law, including meaningful information about how the decision is made and the consequences for you.

You may contact us if you have concerns about an automated decision or wish to request human review where such a right applies.

16. Data-Protection Complaints

If you believe that we have not handled your personal information properly, you may submit a data-protection complaint by contacting:

Email: info@matteovelmont.com
Subject line: Data Protection Complaint

Please include:

• Your full name.
• The email address connected with your account or order.
• Your order number, where relevant.
• A clear description of your concern.
• Any supporting information you consider relevant.

We will:

• Provide a clear way for you to raise a complaint.
• Acknowledge receipt within 30 days.
• Take appropriate steps to investigate the complaint without undue delay.
• Keep you reasonably informed about its progress.
• Inform you of the outcome.

These complaint-handling requirements have applied to organisations since 19 June 2026 under the Data (Use and Access) Act 2025.

If you remain dissatisfied after contacting us, you may complain to the UK supervisory authority:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint

The ICO recommends that privacy notices explain the right to complain and provide the supervisory authority’s contact details.

17. Accuracy of Information

You are responsible for ensuring that personal information provided to us is accurate, complete and up to date.

Please contact us if your information changes or if you believe that information held by us is incorrect.

Matteo Velmont may cancel an order, restrict an account or request additional verification where information appears to be:

• Incorrect.
• Incomplete.
• Fraudulent.
• Inconsistent.
• Impossible to verify.

18. Security

We use reasonable technical and organisational measures designed to protect personal information against:

• Loss.
• Misuse.
• Unauthorised access.
• Unauthorised disclosure.
• Alteration.
• Destruction.

These measures may include access restrictions, secure service providers, encryption where appropriate, monitoring and staff or contractor confidentiality requirements.

However, no internet transmission or electronic-storage system can be guaranteed to be completely secure.

If you create a customer account, you are responsible for keeping your login details confidential and should contact us if you suspect unauthorised access.

19. Children’s Information

This website is not specifically directed at children, and we do not knowingly collect personal information from children where parental or guardian authorisation is legally required.

If you believe that a child has provided us with personal information without appropriate authorisation, please contact:

info@matteovelmont.com

Where appropriate, we will delete or restrict the information.

20. Cookies and Similar Technologies

Our website may use first-party and third-party cookies, pixels, local storage and similar technologies to:

• Operate essential website functions.
• Remember basket contents and customer preferences.
• Maintain website security.
• Analyse website traffic.
• Measure advertising campaigns.
• Personalise content.
• Display relevant advertising.
• Understand how visitors interact with products and pages.

Where consent is legally required, non-essential cookies and similar technologies will not be activated until you provide consent.

Consent will not be required where a valid legal exemption applies, including certain technologies that are strictly necessary to provide a service requested by you.

You can manage or withdraw your cookie preferences through our consent tool. You may also control cookies through your browser, although disabling essential functionality may affect how the website operates.

UK rules generally require businesses to explain what cookies do and obtain active consent unless an applicable exemption applies.

Additional information should be provided in our separate Cookie Policy.

21. Third-Party Links

Our website may contain links to:

• Social media platforms.
• Payment providers.
• Delivery services.
• External websites.
• Other third-party services.

Matteo Velmont does not control and is not responsible for the content, security or privacy practices of independent third-party websites.

We recommend reviewing the privacy policy of any external service before providing personal information.

22. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Law or regulation.
• Our business practices.
• The technologies we use.
• Our products or services.
• Our service providers.
• The way we process personal information.

The latest version will be published on this page and will display the date of the most recent update.

Where changes are significant, we may provide additional notice through the website, email or another appropriate communication channel.

23. Contact Us

For questions about this Privacy Policy, requests concerning your personal information or data-protection complaints, contact: