Privacy Policy

This policy explains what we collect when you use this website, why we collect it, and what rights you have over it.

Who we are

This website is operated by Goldy Stuff Ltd, a company registered in England and Wales under number 15584496, whose registered office is at PO Box 4385, Companies House Default Address, Cardiff, CF14 8LH, United Kingdom, trading as Giuseppe Lombardi. We are the data controller for the information described here.

For any question about your data, write to contact@giuseppelombardi.com.

What we collect

When you place an order we collect your name, billing and shipping address, email address and telephone number. We need these to take, make and deliver the order.

When you create an account we hold your email address, your password in encrypted form, and your order history.

When you contact us we keep what you send so we can answer and so we have a record of the exchange.

When you visit the site we collect technical data through cookies and analytics, described below and in the Cookie Policy.

If you leave a comment we collect the data in the comment form, along with your IP address, to help detect spam.

Payment

We do not see or store your full payment card details. Payments are processed by Stripe, who handle your card data under their own terms and security standards.

Cookies and analytics

We use cookies to keep your cart, remember your preferences and check browser compatibility.

We use Google Analytics, delivered through Google Tag Manager, to understand how visitors move through the site. This data is aggregated and is not used to identify you personally. The Cookie Policy lists what is set.

In the app

The Giuseppe Lombardi app for iPhone and Android is this shop in a native shell. Everything above applies to it in full, because the pages you see in the app are the pages of this website.

Three things are true only of the app.

Notifications. The app can send you a notification about new pieces or an order. This is delivered by Firebase Cloud Messaging, a Google service. When the app first runs, Google issues a token that identifies that installation of the app on that device, and Google holds it. We do not. The app subscribes to a single group and we address the group, so we never hold a register of devices and we cannot single you out from a notification. Google tells us how many notifications were delivered and opened, as figures, not as people. You are asked for permission before any notification is sent, and you can withdraw it at any time in your device settings without affecting anything else in the app.

What the app is allowed to do. It asks for one permission, which is to show you notifications. It does not ask for your location, your camera, your photographs or your contacts, and it does not read your advertising identifier. It contains no advertising and no analytics of its own.

Leaving the app. Payment pages, WhatsApp and anything else that is not our own site open in your ordinary browser rather than inside the app. That is deliberate. Entering card details inside an app’s embedded browser is where trust is lost, and it means those services see you as a normal browser visit under their own policies.

Apple and Google distribute the app and collect their own data about downloads and crashes under their own privacy policies. We do not receive your name or your address from either of them.

How we use your information

We use it to process and deliver your order, to send order confirmations and shipping updates, to answer your questions, to meet our legal and accounting obligations, and to improve the site.

We send marketing email only where you have asked for it. Every marketing email carries a link to stop receiving them.

Who we share it with

We share what is necessary with the parties who help us fulfil an order. That means our payment processor, our shipping carriers, and the services that host this site and send our email.

We do not sell your personal information.

How long we keep it

Order records are kept for as long as the law requires us to hold them for tax and accounting purposes. Account data is kept while your account is open. Marketing consent is kept until you withdraw it.

Your rights

You have the right to ask what we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form.

To close your account and have your personal data removed, use Delete Your Account. It is also reachable from the account area of the site and of the app. You confirm the request by email, so nobody else can start it for you. If you would rather write to us, contact@giuseppelombardi.com reaches the same place.

For anything else, write to contact@giuseppelombardi.com. We will respond within one month.

What we remove and what we keep. The account, your name, your addresses, your telephone number, your email address, anything you have written to us, and your place on the mailing list. The record of an order you have already placed stays, because we are required to hold invoices for tax and accounting purposes, and that obligation outlives your account. What remains is the transaction, not a profile of you.

If you are not satisfied with our response you have the right to complain to the Information Commissioner’s Office.

Changes

When this policy changes we update the date at the top of this page.