Quiteessential

COOKIE POLICY

1. Data Controller The data controller for this website is Quiteessential. For any privacy-related requests, please contact us at quiteessential33@gmail.com.

2. Data We Collect When you visit this website, our servers automatically record certain technical information, including your IP address, browser type, pages visited, and timestamps. This data is used solely to ensure the website functions correctly and is not linked to any personal identity.

When you place an order through our shop (powered by Shopify), you voluntarily provide personal data such as your name, email address, shipping address, and payment details. This information is collected and processed by Shopify in accordance with their own Privacy Policy, and is used solely to fulfil your order.

3. What Is a Cookie? Cookies are small text files stored on your device when you visit a website. They allow the site to remember certain information about your visit — such as your language preference or the contents of your shopping cart — making your experience smoother and more consistent.

4. Cookies We Use This website uses only technical and functional cookies. We do not use advertising, profiling, or third-party tracking cookies.

session Framer Essential 6 months Maintains your user session while browsing.

cookieconsent_status Framer Essential 1 year Remembers whether you have accepted or declined cookies.

cart Shopify Essential 2 weeks Stores the contents of your shopping cart between visits.

secure_session Shopify Essential Session Maintains a secure checkout session.

5. Legal Basis for Processing All cookies listed above are strictly necessary for the website and shop to function. Under the GDPR and the ePrivacy Directive, essential cookies do not require your prior consent. No non-essential cookies are placed on your device without your explicit permission.

6. Third-Party Services Our shop is powered by Shopify. When you interact with the checkout, Shopify may set their own essential cookies on your device. These are governed by Shopify's privacy practices, which you can review at shopify.com/legal/privacy.

Our website is built on Framer. Framer's built-in analytics are cookieless and do not generate any persistent identifiers or personal data.

7. Your Rights Under the General Data Protection Regulation (GDPR), you have the right to: access your personal data, request its correction or deletion, object to or restrict its processing, and request data portability. To exercise any of these rights, please write to us at quiteessential33@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local supervisory authority. In Italy, this is the Garante per la Protezione dei Dati Personali (garanteprivacy.it).

8. Managing Cookies You can control and delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the website, including the checkout process. For guidance, visit aboutcookies.org.

9. Changes to This Policy We may update this policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. We encourage you to review it periodically.

Data Controller

The data controller for this website is Quiteessential. For any privacy-related requests, please contact us at quiteessential33@gmail.com.

What Data We Collect

We collect data in two ways: automatically when you browse the site, and directly when you interact with our shop.

Browsing data

Our servers automatically record technical information such as your IP address, browser type, device, pages visited, and timestamps. This data is used solely to ensure the website operates correctly and is deleted periodically. It is not linked to your identity.

Order data

When you place an order, you provide personal information including your name, email address, shipping address, and payment details. Payment data is handled exclusively by Shopify's secure payment infrastructure and is never stored on our end.

Communications

If you contact us directly via email, we retain that correspondence solely to respond to your inquiry.

How We Use Your Data

We use the data we collect exclusively to:

Process and fulfil your orders
Send order confirmations and shipping updates
Respond to customer service inquiries
Ensure the technical functioning of the website

We do not use your data for advertising, profiling, or any form of automated decision-making. We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-Party Services

To operate this website and shop, we use the following third-party services:

Shopify

Our e-commerce platform. Shopify processes order and payment data on our behalf as a data processor. Their privacy policy is available at shopify.com/legal/privacy.

Framer

Our website platform. Framer's built-in analytics are cookieless and fully anonymised. No personal data is collected through Framer. Their privacy policy is available at framer.com/legal/privacy.

We only work with third parties that offer adequate guarantees of GDPR compliance.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Order data is retained for up to 5 years for legal and accounting obligations.
Browsing and technical data is deleted periodically and typically not stored beyond a few weeks.
Email correspondence is retained for as long as the relationship is active, then deleted.

Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR:

Contract — Processing your order and delivering your purchase.
Legal obligation — Retaining transaction records as required by law.
Legitimate interest — Ensuring the security and correct functioning of the website.

Your Rights

Under the GDPR, you have the right to:

Access - Request a copy of the personal data we hold about you.
Rectification - Request correction of inaccurate or incomplete data.
Erasure - Request deletion of your personal data, where no legal obligation requires us to retain it.
Restriction - Request that we limit how we use your data.
Portability - Receive your data in a structured, machine-readable format.
Objection - Object to processing based on legitimate interest.

To exercise any of these rights, write to us at quiteessential33@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In Italy: Garante per la Protezione dei Dati Personali - garanteprivacy.it.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our shop infrastructure is hosted on Shopify, which maintains industry-standard security certifications.

Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review it periodically. Continued use of the website after any changes constitutes acceptance of the updated policy.

Contact

For any questions about this Privacy Policy or how we handle your data, contact us at quiteessential33@gmail.com.