Privacy policy

Last updated: 27 June 2026

Data Controller

Luna Nuova Tartufi di Spadoni Pregiati S.r.l.
Via Emilia 7, 47843 Misano Adriatico (RN), Italy
VAT: 04773370400
Email: info@lunanuovatartufi.com
Tel: +39 0541 780583

Introduction

Luna Nuova operates this store and website, including the information, content, features, tools, products and services, to provide you, the customer, with an appropriate shopping experience (the "Services"). Luna Nuova is supported by Shopify, which enables us to provide you with the Services. This Privacy Policy describes how we collect, use and disclose your personal data when you visit, use, make a purchase or any other transaction through the Services, or when you communicate with us. In the event of a conflict between our Terms of Service and this Privacy Policy, the Privacy Policy prevails with respect to the collection, processing and disclosure of your personal data.

Please read this Privacy Policy carefully. By using and accessing the Services you confirm that you have read this Privacy Policy and understood how your information is collected, used and disclosed.

Personal Data We Collect or Process

When we use the term "personal data" we refer to information that identifies or is reasonably linked to you or another person. Personal data does not include information collected anonymously or that has been anonymised so that it cannot identify or be linked to you. We may collect or process the following categories of personal data depending on your interaction with the Services:

  • Contact details: name, address, billing address, shipping address, phone number and email address.
  • Financial data: credit card, debit card and financial account numbers, payment data, transaction details and payment confirmation.
  • Account data: username, password, security questions, preferences and settings.
  • Transaction data: items viewed, added to cart, purchased, returned or exchanged, and past transactions.
  • Communications with us: information included in communications with us, for example via the contact form or customer support.
  • Device information: device type, browser, connection network, IP address and other unique identifiers.
  • Usage information: how and how often you interact with the Services.

Sources of Personal Data

We may collect personal data from the following sources:

  • Directly from you: when you create an account, visit or use the Services, or contact us.
  • Automatically through the Services: via your device, cookies and similar technologies.
  • From our service providers: when we instruct them to collect or process data on our behalf.
  • From our partners or third parties.

Analytics and Advertising Tools

We use the following third-party tools that collect browsing data via cookies and similar technologies. These tools are activated only upon your explicit consent through the cookie banner. You may withdraw consent at any time by clicking "Cookie preferences" in the site footer.

Google Analytics 4 (Google LLC)

We use Google Analytics 4 to analyse traffic and user behaviour on the site. Google Analytics collects usage data and transmits it to Google servers, including in the United States. The transfer is based on Standard Contractual Clauses approved by the European Commission. You can read Google's privacy policy at https://policies.google.com/privacy and opt out of tracking at https://tools.google.com/dlpage/gaoptout.

Meta Pixel (Meta Platforms Ireland Ltd.)

We use the Meta Pixel to measure the effectiveness of our advertising campaigns on Facebook and Instagram and to show you relevant ads. The Meta Pixel collects browsing data that is transmitted to Meta. You can manage your advertising preferences at https://www.facebook.com/privacy/policy/.

How We Use Your Personal Data

  • Providing, personalising and improving the Services: processing payments, fulfilling orders, managing your account, organising shipments, facilitating returns and exchanges, sending you notifications and creating a personalised experience.
  • Marketing and advertising: sending you promotional communications by email or post and showing you relevant online ads, including based on your previous purchases.
  • Security and fraud prevention: authenticating your account, detecting and combating fraudulent or illegal activity, protecting the Services.
  • Communications with you: providing customer support, responding to you and maintaining the commercial relationship.
  • Legal reasons: complying with legal obligations, responding to authority requests, enforcing our Terms and Conditions.

How We Disclose Personal Data

In certain circumstances we may disclose your personal data to third parties for legitimate purposes:

  • With Shopify and other service providers (IT management, payment processing, data analysis, customer support, shipping).
  • With business and marketing partners to provide you with personalised services and ads. Partners will use your data in accordance with their own privacy policies.
  • When you authorise disclosure, for example for shipping or social integrations.
  • With our affiliates or within the corporate group.
  • In case of legal obligations, mergers, legal proceedings or to protect our rights and those of users.

Relationship with Shopify

The Services are powered by Shopify, which collects and processes personal data relating to your access to and use of the Services. Data you submit to the Services will be transmitted to and shared with Shopify and third parties who may be located in countries other than your own. To provide advanced features, Shopify may use personal data collected from your interactions with our store, other merchants and Shopify itself. In such circumstances, Shopify is the data controller for the processing of your personal data. For more information please see Shopify's Consumer Privacy Policy and the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may contain links to sites operated by third parties. If you follow such links, you may need to accept their privacy policies. We are not responsible for the privacy and security of such sites or for the accuracy of the information they contain.

Children's Data

The Services are not intended for minors and we do not knowingly collect personal data from individuals below the age of majority. If you are the parent or guardian of a minor who has provided us with their data, please contact us to request its deletion. We are not aware of "sharing" or "selling" personal data of individuals under 16 years of age.

Data Security and Retention

We adopt appropriate security measures, but no technology is impenetrable. We recommend using only secure channels to communicate confidential information to us.

Indicative retention periods:

  • Order and billing data: 10 years (statutory tax and accounting obligations under Italian law)
  • Customer account data: until account deletion, plus 12 months
  • Analytical cookies (Google Analytics 4): maximum 14 months
  • Marketing cookies (Meta Pixel): maximum 180 days
  • Support email communications: 3 years from resolution of the request
  • Fraud prevention data: up to 5 years

Your Rights

Depending on where you reside, you may have the following rights regarding your personal data:

  • Right of access: request access to the personal data we hold about you.
  • Right of erasure: request the deletion of your personal data.
  • Right of rectification: request the correction of inaccurate data.
  • Right of portability: receive a copy of your data and request its transfer to third parties.
  • Managing communication preferences: unsubscribe at any time from promotional emails via the unsubscribe link.

If you reside in the United Kingdom or the European Economic Area you also have the right to:

  • Objection and restriction of processing: ask us to stop or limit processing for certain purposes.
  • Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at the details provided below. For rights relating to data processed by Shopify, visit https://privacy.shopify.com/en.

Complaints

If you have complaints about the processing of your data, please contact us at the details below. If you are not satisfied with our response, you may contact your local data protection authority. For Italy: Garante per la protezione dei dati personali — www.garanteprivacy.it. For other EEA countries: list of supervisory authorities.

International Transfers

We may transfer, store and process your personal data outside the country in which you reside. In the event of a transfer outside the European Economic Area or the United Kingdom, we will rely on the European Commission's Standard Contractual Clauses or equivalent mechanisms, unless the destination country already ensures an adequate level of protection.

Artificial intelligence: We use AI tools for the creation of editorial content and illustrative images on the site. Content is reviewed by our team before publication.

Changes to This Policy

We may update this Privacy Policy from time to time. We will publish the updated version on the site and change the "Last updated" date.

Contact

For any questions about this Policy or to exercise your rights:

Luna Nuova Tartufi di Spadoni Pregiati S.r.l.
Via Emilia 7, 47843 Misano Adriatico (RN), Italy
Email: info@lunanuovatartufi.com
Tel: +39 0541 780583

For the purposes of applicable data protection laws, we are the data controller of your personal data.