Informativa sulla privacy

This Privacy Policy describes how thebentobuzz.shop collects, uses, discloses, stores and otherwise processes personal information when individuals:

• Visit our website;
• Browse products;
• Create or use an account where available;
• Place an order;
• Make a payment;
• Contact customer service;
• Request a return or refund;
• Subscribe to communications where available;
• Interact with marketing functionality; or
• Otherwise use our ecommerce services.

For privacy enquiries:

Email: info@thebentobuzz.shop

This policy should be read together with any cookie preferences or consent-management tools made available through our website.

Data Controller

For purposes of personal information processed in connection with the operation of thebentobuzz.shop, thebentobuzz.shop acts as the relevant ecommerce operator and determines the purposes and means of processing to the extent applicable.

Privacy enquiries and data-protection requests may be directed to:

info@thebentobuzz.shop

Information We May Collect

Depending on how you interact with the website, we may collect or process information including:

Identity and Contact Information

This may include:

• Name;
• Email address;
• Telephone number;
• Billing information;
• Shipping information;
• Country or region; and
• Information submitted through customer-service communications.

Order and Transaction Information

This may include:

• Products ordered;
• Order number;
• Order date;
• Order value;
• Order status;
• Shipping method;
• Payment status;
• Return requests;
• Refund records;
• Customer-service history; and
• Related transaction information.

Payment Information

Payments may be processed by third-party payment providers.

Depending on the payment method used, those providers may process payment-card information, payment-account details, transaction authentication data and fraud-prevention information.

We may receive transaction confirmation and related payment information necessary to administer the order without necessarily receiving complete payment-card credentials.

Technical and Device Information

When you use the website, certain technical information may be processed automatically, such as:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Device identifiers;
• Language settings;
• Referring page;
• Pages visited;
• Interaction information;
• Session information;
• Error information; and
• Security-related data.

Customer-Service Information

If you contact us, we may process the contents of your communication together with relevant order and account information required to respond.

How We Use Personal Information

We may process personal information for purposes including:

• Providing the website;
• Processing orders;
• Processing payments;
• Confirming transactions;
• Arranging fulfilment;
• Arranging delivery;
• Providing tracking information;
• Managing customer accounts;
• Handling cancellations;
• Processing returns;
• Processing refunds;
• Handling legal-guarantee claims;
• Responding to enquiries;
• Preventing fraud;
• Protecting website security;
• Detecting abusive activity;
• Maintaining business records;
• Complying with tax, accounting and legal obligations;
• Improving website performance;
• Measuring website usage;
• Managing customer preferences;
• Providing marketing communications where legally permitted; and
• Establishing, exercising or defending legal claims.

Legal Bases for Processing

Where the GDPR applies, personal information may be processed on one or more legal bases, including:

Performance of a Contract

Information may be processed when necessary to:

• Process your order;
• Accept payment;
• Fulfil your purchase;
• Arrange delivery;
• Manage returns;
• Process refunds; or
• Provide requested customer service.

Legal Obligations

We may process information where necessary to comply with obligations relating to areas such as:

• Accounting;
• Taxation;
• Consumer protection;
• Fraud prevention;
• Legal proceedings; or
• Regulatory requirements.

Legitimate Interests

Where appropriate and subject to applicable balancing requirements, information may be processed for legitimate interests such as:

• Protecting our website;
• Preventing fraud;
• Maintaining transaction security;
• Improving our services;
• Managing ordinary business operations; and
• Defending legal rights.

Consent

Where consent is legally required, we may rely on consent for activities including certain:

• Marketing communications;
• Advertising technologies;
• Analytics technologies;
• Profiling technologies; and
• Non-essential cookies or similar tracking technologies.

Where processing is based on consent, you may withdraw that consent subject to applicable law.

Shopify

Our ecommerce website may use Shopify technology to host and operate store functionality.

Shopify and related infrastructure providers may process information in connection with website hosting, checkout, order administration, security and other ecommerce functions.

Shopify states that merchants selling through its platform must comply with applicable privacy and data-protection laws, including where GDPR applies.

Service Providers

We may share or make personal information available to service providers where reasonably necessary to operate the store.

These providers may include:

• Shopify;
• Hosting providers;
• Payment processors;
• Fraud-prevention providers;
• Fulfilment providers;
• Warehousing providers;
• Shipping carriers;
• Logistics companies;
• Customer-support providers;
• Analytics providers;
• Email providers;
• Security providers;
• Accounting providers;
• Professional advisers; and
• Technology providers.

Service providers are expected to process information in accordance with applicable contractual and legal requirements.

Legal Disclosure

Personal information may be disclosed where reasonably necessary to:

• Comply with applicable law;
• Respond to lawful requests from authorities;
• Enforce contractual rights;
• Investigate suspected fraud;
• Protect customers;
• Protect the website;
• Protect our legal rights; or
• Establish, exercise or defend legal claims.

Business Transactions

If the business or relevant assets undergo a merger, acquisition, restructuring, financing, sale or similar transaction, relevant personal information may be disclosed or transferred as permitted by applicable law.

International Processing

Because ecommerce infrastructure, payment providers, cloud services, fulfilment providers and other service providers may operate internationally, personal information may be processed outside the country in which the customer resides.

Where GDPR transfer restrictions apply, appropriate safeguards will be used as required by applicable law, which may include recognised adequacy mechanisms, contractual safeguards or other lawful transfer mechanisms.

Cookies and Similar Technologies

Our website may use cookies and similar technologies for purposes such as:

• Maintaining website functionality;
• Remembering shopping-cart contents;
• Authentication;
• Fraud prevention;
• Security;
• Remembering privacy preferences;
• Analytics;
• Measuring website performance;
• Advertising; and
• Marketing attribution.

Essential Cookies

Cookies strictly necessary for website functionality or for providing a service specifically requested by the user may operate without the same consent requirements applying to optional technologies.

Non-Essential Cookies

Where consent is required, non-essential cookies and similar tracking technologies will be controlled through appropriate consent mechanisms.

The Italian Data Protection Authority's cookie guidance states that at first access, by default, non-technical cookies or other active or passive tracking technologies should not be placed or used before the required consent is obtained.

Users may be provided with mechanisms allowing them to accept, reject or manage relevant cookie categories.

Marketing Communications

Where legally permitted, we may send marketing communications based on appropriate consent or another lawful basis.

You may opt out using an unsubscribe mechanism contained in the communication or by contacting:

info@thebentobuzz.shop

Transactional communications concerning an order, payment, shipping, security issue, return or customer-service matter are not necessarily marketing communications and may continue where necessary.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, accounting, tax, fraud-prevention, dispute-resolution and record-keeping requirements.

Retention periods may vary depending on:

• The type of information;
• The nature of the transaction;
• The existence of an active customer relationship;
• Applicable statutory requirements;
• Potential disputes;
• Security requirements; and
• Legitimate business needs.

Information that is no longer required will be deleted, anonymised or otherwise handled according to applicable requirements.

Security

We use reasonable technical, organisational and administrative measures intended to protect information against:

• Unauthorised access;
• Unauthorised disclosure;
• Loss;
• Misuse;
• Destruction; and
• Unlawful alteration.

No online system can be guaranteed to be completely secure, and customers should also take reasonable steps to protect their devices and account credentials.

Your GDPR Rights

Where the GDPR applies, you may have rights including:

• Right of access – to request information concerning personal data we process about you;
• Right to rectification – to request correction of inaccurate personal data;
• Right to erasure – to request deletion where the legal requirements are met;
• Right to restriction – to request restriction of processing in certain circumstances;
• Right to data portability – to receive certain data in a structured, commonly used and machine-readable format where applicable;
• Right to object – to object to certain processing based on legitimate interests or direct marketing;
• Right to withdraw consent – where processing is based on consent; and
• Rights concerning certain automated decision-making, where applicable.

These rights may be subject to statutory conditions, limitations or exceptions.

Exercising Your Rights

To submit a privacy request, contact:

info@thebentobuzz.shop

We may need to verify your identity before fulfilling a request so that personal information is not disclosed or changed on the basis of an unauthorised request.

Complaints

Individuals may also have the right to lodge a complaint with the competent data-protection supervisory authority.

For individuals in Italy, the relevant national supervisory authority is the Garante per la protezione dei dati personali, Italy's Data Protection Authority.

We encourage customers to contact us first where appropriate so that we have an opportunity to address the concern.

Children's Privacy

Our ecommerce services are not intentionally designed for children to independently enter into purchases where they do not have legal capacity to do so.

Where required, a parent, guardian or person with appropriate legal authority should act on behalf of a minor.

Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for third-party privacy practices, and customers should review the privacy policies applicable to those third-party services.

Changes to This Policy

We may update this Privacy Policy when necessary to reflect:

• Changes to our services;
• Changes to technology;
• Changes to providers;
• Operational changes; or
• Changes in legal or regulatory requirements.

The updated version will be published on the website with an appropriate revision date.

Privacy Contact

For privacy enquiries or requests:

thebentobuzz.shop
Email: info@thebentobuzz.shop