Privacy policy

Last updated: 7 September 2026

Data controller

The data controller is Div. & Co. S.r.l. (DivaniClick brand), Via Barbaro Forleo 35, 72021 Francavilla Fontana (BR), Italy — VAT no. 02304260744 — email info@divaniclick.com — certified email (PEC) divandco@pec.it — phone +39 0831 811428. This notice, provided under articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003, describes how we process your personal data when you visit divaniclick.com (the "Site"), buy our products or communicate with us. The Site is hosted on the Shopify platform. We are not required to appoint a data protection officer; for any question about your data you can write to info@divaniclick.com.

What data we collect

  • Contact and delivery data: first name, surname, billing and shipping address, phone number, email; for companies also company name, VAT number, SDI recipient code or PEC address.
  • Payment data: payment method, transaction outcome and last digits of the card. Full card details are collected and processed exclusively by payment service providers: we neither see nor store them.
  • Account data (if you create one): credentials, preferences, order history.
  • Order data: products purchased, configurations chosen, returns, order-related communications.
  • Communications: emails, WhatsApp messages, phone calls, reviews and other content you send us.
  • Browsing data: IP address, device and browser type, pages visited, data collected through cookies and similar technologies (see the Cookies section).

We collect data directly from you (when you order, create an account or write to us), automatically while you browse and, in some cases, from our service providers (for example the outcome of a payment or the status of a delivery).

Purposes and legal bases of processing

  • Managing orders, payments, deliveries, returns, guarantee claims and customer service; managing your account. Legal basis: performance of the contract or pre-contractual measures (art. 6(1)(b) GDPR). Providing this data is necessary: without it we cannot fulfil the order.
  • Complying with legal obligations (invoicing, accounting, tax obligations, fraud prevention, responding to requests from authorities). Legal basis: legal obligation (art. 6(1)(c)).
  • Ensuring the security of the Site, preventing fraud, protecting our rights including in court. Legal basis: legitimate interest (art. 6(1)(f)).
  • Sending you emails about products similar to those you bought. Legal basis: legitimate interest (art. 6(1)(f) and art. 130(4) of Legislative Decree 196/2003); you can object at any time via the unsubscribe link in every message or by writing to us.
  • Newsletters, promotions and commercial communications by email, SMS or WhatsApp; non-essential cookies and analytics and marketing tools. Legal basis: consent (art. 6(1)(a)), which you can withdraw at any time without affecting the lawfulness of prior processing. The marketing consent box is never pre-ticked.
  • Publishing the reviews you choose to send us. Legal basis: consent, given by submitting the review.

We do not make decisions based solely on automated processing that produce legal effects concerning you.

How long we keep data

  • Order, invoice and payment data: 10 years from the end of the financial year, for civil and tax obligations (art. 2220 of the Italian Civil Code).
  • Account data: until you ask us to delete the account, or after 3 years of inactivity.
  • Marketing data: until you withdraw consent or object, and in any case no longer than 24 months after the last meaningful contact.
  • Communications and complaints: for the time needed to handle them and, afterwards, for the limitation period of the related rights (up to 10 years).
  • Browsing data and cookies: for the durations shown in the cookie banner.

Who we share data with

Your data is processed by our authorised staff and by providers acting as processors or as independent controllers, limited to what is necessary:

  • Shopify International Ltd. (Ireland) and Shopify group companies, which provide the platform, hosting (with data stored in the European Union), checkout and security and fraud-prevention services. Shopify also processes some data as an independent controller to improve its own services: see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
  • Payment service providers (for example Shopify Payments and card networks).
  • Couriers and carriers in charge of delivery, who receive name, address and phone number.
  • Email, review-collection and analytics service providers, where active on the Site.
  • Tax and legal advisers and banks, where necessary.
  • Public and judicial authorities, where required by law.

We do not sell your personal data.

Transfers outside the European Union

Some providers (in particular Shopify group companies and payment service providers) may process data in countries outside the European Economic Area. In those cases the transfer is made to countries covered by an adequacy decision of the European Commission or on the basis of the standard contractual clauses approved by the European Commission, supplemented by appropriate security measures. You can ask us about the safeguards adopted by writing to info@divaniclick.com.

Cookies

The Site uses technical cookies, necessary for the shop and cart to work, which are always active. Only with your consent do we use cookies and similar technologies for statistical and marketing purposes. On your first visit the banner lets you accept, reject or customise your choices; you can change them at any time via the Cookie preferences link at the bottom of every page of the Site, where you also find the list of cookies used and their duration.

Minors

The Site is intended for adults. We do not knowingly collect data from children under 14; if you believe a child has provided us with personal data, write to us and we will delete it.

Security

We adopt appropriate technical and organisational measures to protect data from unauthorised access, loss or alteration, including encrypted connections (HTTPS), access control and reliance on certified providers for payments. We recommend that you do not send card details by email and that you keep your account credentials safe.

Your rights

Under articles 15-22 GDPR you have the right to: access your data and obtain a copy; have it rectified; have it erased; obtain restriction of processing; receive your data in a structured format and transmit it to another controller (portability); object to processing based on legitimate interest, including direct marketing; withdraw consent at any time. To exercise your rights write to info@divaniclick.com or to the certified email divandco@pec.it: we reply within one month, extendable in the cases provided for by law; we may ask you to verify your identity. To unsubscribe from promotional communications, simply use the link in every message.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it) or with the supervisory authority of the country where you live.

Changes

We may update this notice to reflect changes in the law or in our services: the current version, with its update date, is always published on this page. In case of substantial changes we will inform you with a notice on the Site or by email.