Skip to content

We’ll help you for as long as you like+39 342 369 9798Help on WhatsApp

Help

Privacy policy

Last updated: 28 October 2026

Who processes your data

The data controller is PIPPI STORE SRLS, VAT no. IT02795350996. For any request about your data, write to info@pippi.store.

What data and why

When you place an order, we process the data needed to deliver it to you: name, address, email and phone number for the courier and, if you write to us on WhatsApp, for help with the Method in the first few days. The legal basis is the sales contract. Without this data we cannot send you your order. Card details never pass through our systems: they are handled by the payment services listed below. If you pay by bank transfer, we see the payer’s name and IBAN, as on any bank statement.

If you write to us (by email or WhatsApp), we use your data only to reply to you and to help you in the first few days of the Method.

If you create an account

We keep your email and the addresses you save, so you can sign in and find your orders. We do not keep your password as you type it: we only store a one-way coded version of it (a hash), from which the password cannot be worked out, not even by us. The legal basis is the service you ask us for by opening the account.

The data is kept for as long as you keep the account. You can delete the account yourself whenever you like, from “Details and security”, and with it your access, addresses and invitation code disappear. Orders are kept, for tax obligations.

The booklet discount

The discount QR code, in the booklet in your parcel, asks for your order number or the tracking code of the shipment. We use them only to check that the parcel has been shipped and that its discount, which is valid for one order only, has not been used yet. The discount becomes a voucher linked to that parcel: if you buy with the voucher, we record the voucher and the percentage on your order, like the rest of the price, and the voucher is no longer valid. The voucher and the parcel it is linked to are kept as long as the order data. The legal basis is the sales contract. The phone or computer where you entered the code remembers the voucher for 30 days: the cookie policy explains how.

Printed QR codes

When you scan one of our QR codes, for example the one in the booklet in your parcel, we count the scan to know which QR codes work: day and time; the country, region and city inferred from the network, with the centre point of that city for the map; whether you use a phone, a tablet or a computer, with the brand and model when the browser states them; the operating system and the browser, with their versions; the language. We do not keep your network address or a cookie, and we do not know who you are: to count the different people on a given day, and those who scan the same QR code again that day, we use a fingerprint that is valid only that day and only for that QR code. The following night we delete the key used to make it, and within thirty days the key also disappears from the history the database keeps for restores: from then on the fingerprint no longer leads to anyone. We do this on the basis of legitimate interest, measuring our printed materials. Some QR codes ask where you are before opening the page: your phone tells us only if you say yes, and we keep the position rounded to about one hundred metres; if you say no, the page opens anyway. If you have accepted statistics cookies, we also count whether after the scan you viewed the product, added it to the basket or reached the checkout, once a day and with the same fingerprint. For the position and for these steps the legal basis is your consent, which you can withdraw at any time. We keep scans for 24 months.

Measuring the site

If you accept statistics in the banner, we use Google Analytics 4 to find out which pages are read and which steps lead to a purchase. Google (Google Ireland Limited) processes this data on our behalf, as our processor, and states that it does not record the IP address of visitors from the European Union. We do not use Google for advertising: we only give it permission for statistics. Data linked to your browser stays in Google Analytics for 14 months and is then deleted; only the totals remain, which do not identify you. The data may be transferred to the United States, where Google participates in the EU-U.S. Data Privacy Framework. The legal basis is your consent.

If you accept advertising in the banner, the Meta pixel records visits and purchases made on the site, to measure our ads on Facebook and Instagram and show them to people who may be interested. If you enter your email, name, phone number or address in the site’s forms, for example at checkout, the pixel sends them to Meta in hashed form (turned into a code that Meta compares with its users’ data), to recognise people who have a Facebook or Instagram profile. For the collection of this data and its transmission to Meta, we are joint controllers with Meta Platforms Ireland Limited (Article 26 GDPR), under an agreement that sets out who does what: it is our job to give you this information. What Meta does with the data after receiving it is decided by Meta, as controller: it explains this in its privacy policy, where you will also find the legal basis it relies on and how to exercise your rights with Meta. The data may be transferred to the United States, where Meta participates in the EU-U.S. Data Privacy Framework. Our legal basis is your consent.

With the same consent, when you buy, the shop may also send the purchase to Meta from its server, so that it is counted even when the browser does not send it: for example with an ad blocker, or with bank transfer, which is counted when the money arrives. The purchase is sent with the products, the amount and the order number, your email and phone number in hashed form, the network address and browser you bought from, and Meta’s cookies, if there are any. Network address, browser and cookies stay on our server for 30 days at most, and are deleted as soon as the purchase has been sent.

With the same consent, we keep a note in your browser of where you came from: the campaign and the ad if you arrive from our advertising, otherwise the name of the site you came from, and the first page you open. We keep it for the current visit, while it lasts, and for your first visit, with its date and time. The first visit counts for 30 days. After that it no longer counts: on the first page of the site you open, we keep the visit of that day in its place. If you buy, we record both visits in the order: they tell us which ads lead to purchases, even when someone buys days later. If you withdraw your consent, they are deleted from your browser.

Without consent, nothing is loaded. You can withdraw it at any time from “Review your cookie choices”, at the bottom of every page, or from the cookie policy, where each cookie is also listed. Withdrawal takes effect from that moment: what was collected before, with your consent, remains lawful.

We also keep your cookie choice for 12 months: your answers, the version of these texts and the day, with a random code created by your browser, without your IP address or email. It lets us show what you chose, as the GDPR (Art. 7) requires, and know how many people accept.

How long we keep it and who we share it with

Order data is kept for tax obligations (10 years). The messages you send us, from the site form, by email or on WhatsApp, are kept for 24 months after the last message, and then we delete them. The data is seen only by those needed to fulfil the order or to reply to you, each for their own part

  • whoever handles the payment you choose: Stripe (and, if you choose them, Satispay, Amazon Pay, which go through Stripe), PayPal;
  • the courier and the software we use to prepare parcels for dispatch: name, address and phone number;
  • whoever hosts the site and its data storage (Cloudflare), and whoever runs the shop’s mailbox, from which our emails are sent;
  • if you write to us on WhatsApp, the company that runs WhatsApp (WhatsApp Ireland Limited, part of the Meta group);
  • the accountant, for invoices.

Stripe and Cloudflare may transfer the data to the United States. Both participate in the EU-U.S. Data Privacy Framework, which the European Commission has recognised in an adequacy decision.

No selling of data. Profiling only for advertising on Facebook and Instagram, carried out by Meta, and only if you accept it in the banner.

Your rights

You can request access to your data, rectification, erasure, restriction of processing and data portability, object to processing based on our legitimate interest, withdraw the consent you have given at any time and lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or, if you live in another country of the European Union, with the supervisory authority of your country. If you ask us to erase them, we keep a coded version protected by a secret key (a keyed hash) of your email, and of your phone number together with your name, not the data itself, only so that we do not take them back from the software we use to prepare parcels for dispatch: for 30 days, and longer only while we are still importing shipments from past years from that software. Just send an email to info@pippi.store.