Last updated: 28 October 2026
This Privacy Policy explains how we process the personal data of people who visit handvara.com and buy from it, in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).
1. Data controller
Sundari di Chiara Magnani (sole proprietorship), trading as Handvara
Registered office: Via Guglielmo Marconi 1, 15040 Frassineto Po (AL), Italy
VAT number: IT02821680069 · REA: AL-322715
Email: handvaralab@gmail.com · PEC: sundari.magnani@pec.it
2. What data we collect
- Order and account data: name, billing and shipping address, email, phone number (if you give it), order details and, if you create one, your account login.
- Payment data: payments are processed by external payment providers. We receive only the payment result and limited information such as the payment method type. We never receive or store your full card number.
- Communications: the messages you send us by email.
- Technical data: IP address, browser type and similar data that are needed for the website to work and to keep it secure. See our Cookie Policy.
3. Why we use your data and on what legal basis
- To process and deliver your order, handle returns and provide customer service. Legal basis: performance of a contract (art. 6(1)(b) GDPR).
- To meet our accounting and tax obligations. Legal basis: legal obligation (art. 6(1)(c) GDPR).
- To keep the website secure and prevent fraud. Legal basis: our legitimate interest (art. 6(1)(f) GDPR).
- To send you news and offers by email, only if you have subscribed. Legal basis: your consent (art. 6(1)(a) GDPR), which you can withdraw at any time using the unsubscribe link.
4. Who we share data with
We share your data only as needed, with:
- our website hosting provider (Hostinger);
- payment providers that process your payment;
- couriers and shipping services that deliver your order;
- our accountant and tax advisers;
- public authorities, where the law requires it.
Some of these providers may process data outside the European Economic Area. In that case the transfer is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
We do not sell your personal data.
5. How long we keep your data
We keep order and invoicing data for 10 years, as required by Italian tax law. We keep account data until you delete your account. We keep newsletter data until you unsubscribe. We keep other data only as long as needed for the purposes above.
6. Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format (articles 15–22 GDPR). Where processing is based on consent, you can withdraw your consent at any time. To exercise your rights, write to handvaralab@gmail.com.
You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of the EU country where you live.
7. Changes
We may update this policy. The current version is always available on this page.