This Privacy Policy explains how Scents by Toutou (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit www.scentsbytoutou.com or make a purchase from our online store. We are committed to complying with the General Data Protection Regulation (GDPR) and all applicable Italian and EU privacy laws.
By using our website, you consent to the practices described in this policy.
1. Information We Collect
We collect the following types of personal data:
A. Information Provided by You
Name
Shipping and billing address
Email address
Phone number
Payment information (processed securely by third-party providers)
Order details and purchase history
B. Automatically Collected Information
When you visit our website, we automatically collect:
IP address
Browser type and device information
Pages visited and time spent on site
Cookies and tracking data (see section on Cookies)
C. Marketing Data
If you subscribe to our newsletter or opt into marketing:
Email address
Marketing preferences
Engagement history (email opens, clicks, etc.)
2. How We Use Your Information
We use your data to:
Process and fulfill orders
Deliver purchased products
Communicate order updates and customer service
Improve website functionality and user experience
Send marketing emails (only with your consent)
Prevent fraud and ensure secure transactions
Perform analytics on website traffic and performance
3. Cookies & Tracking Technologies
Our website uses cookies to enhance user experience. These include:
Essential cookies (site functionality, shopping cart)
Analytics cookies (e.g., Google Analytics)
Marketing cookies (e.g., Meta/Instagram Pixel)
You may adjust cookie preferences in your browser settings.
4. Third-Party Services
We share data only with trusted third parties necessary for our operations, including:
Payment Processors
PayPal
Stripe
Bank transfer processing providers
Credit/Debit card processors
Analytics & Marketing Tools
Google Analytics
Facebook/Meta Pixel
Email marketing platforms (if used)
These providers process information securely and in compliance with GDPR.
5. Legal Basis for Processing (GDPR)
We process your data under the following lawful bases:
We implement security measures to protect your data from loss, theft, unauthorized access, or disclosure.
9. International Transfers
Some third-party providers may store data outside the EU. When this occurs, we ensure they meet GDPR transfer requirements (e.g., Standard Contractual Clauses).
