CARBONSTONE

Legal

Privacy Policy

Last updated: November 2, 2026

This policy describes personal data processing for the CARBONSTONE online store, contact and stockist requests, launch registrations and restock requests. Shopify manages checkout, payments, orders and shipping.

Data controller

The data controller is Igor Damiani, Via Francesco De Sanctis 109, Italy — VAT number 12974850013.

You can contact the controller at any time at info@carbonstoneatelier.com or by phone at +39 349 54 44 264.

Data we collect and why

Contact form. Name, email address and the content of your message, together with the date and time of submission. Used only to reply to your request. Legal basis: taking steps at your request prior to any contract, and our legitimate interest in responding to you.

Stockist form. Boutique name, contact person, business email, city and country, and an optional message, with the date and time of submission. Used only to evaluate your request and reply. Legal basis: taking steps at your request prior to any contract.

Launch registration. Your email address, your explicit consent to receive communications about the HELLO WORLD 2027 launch, and the date and time of that consent. Used only to send you launch communications. Legal basis: your consent, which you can withdraw at any time via the unsubscribe link in each email or by writing to info@carbonstoneatelier.com. Withdrawal does not affect the lawfulness of processing carried out before it.

We do not collect payment data on this website, and we do not use profiling or advertising tools.

Restock requests. We save your email, selected variation, explicit request for a one-time notification and submission time to handle your restock request. This does not subscribe you to marketing. Legal basis: your consent. Cancel your request at any time by writing to info@carbonstoneatelier.com.

Who processes your data

This website is hosted and operated through technical providers that process data on our behalf:

  • Lovable Cloud (hosting, application and database infrastructure, built on Supabase and cloud hosting providers), where the information you send through the forms is stored.
  • Google Fonts, which serves the typefaces used on this site; your browser connects to Google servers to load them, and your IP address is transmitted in that process.

Shopify and the payment and delivery providers involved process the information needed to complete your purchase: contact and billing details, delivery address, order items and payment information. Legal bases: performance of the purchase contract and compliance with applicable accounting and legal obligations. Card details are entered in Shopify's checkout, not in the forms on this website.

This website already connects to Shopify to display current product prices and availability. Your browser may contact Shopify for these reads and to manage a shopping bag and proceed to Shopify's checkout.

Some of these providers may process data outside the European Economic Area. Where that occurs, the transfer relies on the safeguards provided by the provider, such as standard contractual clauses. We do not sell your data.

How long we keep your data

Contact and stockist messages are kept for the time needed to handle your request and for a reasonable period afterwards, unless a longer retention is required by law.

Launch registrations are kept until you unsubscribe or until the launch communications end. The record of your consent (email, date and time) is kept as proof of consent for as long as required by law.

Restock requests are retained until handled or cancelled, then deleted unless retention is required by law.

Order and accounting records are retained for the period required by applicable law. Payment and delivery providers retain data according to their respective legal obligations and privacy policies.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time.

To exercise any of these rights, or to ask for your data to be deleted or exported, write to info@carbonstoneatelier.com. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

Changes to this policy

If we change how we process personal data — for example when the online store is activated — we will update this page and the date shown above.