Privacy policy

Gabriel Mantelli (“we”, “us”, “our”) is the controller of the personal information collected through gabrielmantelli.com. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have over it.

1. Information we collect

Information	When we collect it	Why
Name, email, shipping & billing address, phone	At checkout	To fulfil and deliver your order and contact you about it
Payment details	At checkout	Processed by our PCI-compliant payment providers; we never see or store full card numbers
Email address	Newsletter signup	To send marketing email you’ve asked for — you can unsubscribe any time
Order history and support messages	When you buy or contact us	To provide support, process returns, and keep records
Device & usage data (pages viewed, browser, device, IP, referring site)	As you browse	Site security, performance, and analytics — see Cookies

We only collect what we need to run the store. You don’t have to give us marketing consent to place an order.

2. How we use your information

• To process, fulfil, and deliver your orders and handle returns;
• To provide customer support and respond to your messages;
• To send order and shipping updates (these are service messages, not marketing);
• To send marketing email only if you’ve opted in, until you unsubscribe;
• To detect, prevent, and investigate fraud and protect the security of the store;
• To understand how the site is used so we can improve it;
• To meet our legal, tax, and accounting obligations.

3. Cookies and tracking

We use cookies in three categories: strictly necessary (cart, checkout, security — always on), analytics (how the site is used), and marketing (measuring and improving ads). You can manage the optional categories through your browser settings. Full detail is in our Cookie Policy.

4. Who we share information with

We share personal information only with the service providers that help us run the store, and only to the extent they need it:

• Shopify — our e-commerce platform, which hosts the store and processes orders and payments;
• Payment processors (e.g. Shopify Payments, PayPal) — to take payment securely;
• Shipping carriers (USPS, UPS, FedEx) — to deliver your order;
• Our fulfilment partner — to pick, pack, and dispatch orders;
• Analytics and email providers — to run the site and send email you’ve opted into.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and property of our customers or us. We do not sell your personal information for money.

5. Third-party links

Our site or emails may link to third-party sites (for example social media). We’re not responsible for their privacy practices — please review their policies before sharing information with them.

6. How long we keep information

Information	Retention
Order and transaction records	7 years (tax and accounting law)
Marketing email list	Until you unsubscribe, then suppressed so we don’t email you again
Customer service messages	2 years
Analytics data	Up to 14 months

7. Your privacy rights

Depending on where you live — including under the CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), and similar state laws — you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Port a copy of your information;
• Opt out of the “sale” or “sharing” of your information for targeted advertising.

We honour these requests regardless of which state you live in. To exercise any right, email support@gabrielmantelli.com with the subject “Privacy request”. We may need to verify your identity before acting. We’ll respond within 45 days (extendable once where the law allows), and we will never discriminate against you for exercising a privacy right. If we deny a request, you may appeal by replying to our response.

If you are visiting from the European Economic Area or the United Kingdom, you also have rights under the GDPR and UK GDPR, including access, rectification, erasure, restriction of processing, data portability and objection. To exercise any of these rights, email us using the contact details below and we will respond within 30 days.

8. Your Privacy Choices (opt-out)

To opt out of any sharing of your information for targeted advertising, email us as above with “Do Not Sell or Share” in the subject, or adjust your cookie choices in your browser. We also honour recognised opt-out preference signals where required.

9. Children

Our store is intended for adults and is not directed at children. We don’t knowingly collect personal information from anyone under 13. If you believe a child has given us information, email us and we’ll delete it.

10. Security

We protect your information with encryption in transit (HTTPS), PCI-compliant payment processing, and access controls that limit who can see personal data. No method of transmission or storage is perfectly secure, but if a breach occurs that affects you, we’ll notify you and the relevant authorities in line with applicable law.

11. Changes to this policy

We may update this policy from time to time. We’ll post the new version here with a revised “last updated” date; material changes will be made clear.

12. Governing law

This policy is governed by the laws of the State of New York, United States, without affecting any data-protection rights you have under your own state’s law.