Privacy Policy

The data controller is NATURLIFESTYLE Srl, registered office at Via Brescia 41 M–N, 25065 Lumezzane (BS), Italy, tax code and VAT no. 03522970981.

For any request regarding personal data, write to info@naturlifestyle.it or call +39 030 5785026.

Contact and identity data: first and last name, email, phone number, shipping and billing address, provided when you place an order, write through the contact form or request support.

Order data: products purchased, amounts, chosen payment method, purchase and shipping history. Full credit card details are never processed or stored by us: the transaction takes place on the payment provider's and the bank's systems.

Newsletter data: email address and date of consent.

Technical browsing data: IP address, browser and device type, pages visited, collected by the website systems and by the technical cookies described in the Cookie Policy.

a) Managing the order, payment, shipping, withdrawal and after-sales support — legal basis: performance of the contract to which you are a party (art. 6.1.b GDPR). Providing these data is necessary: without them the order cannot be fulfilled.

b) Responding to requests sent through the contact form or support channels — legal basis: pre-contractual measures or legitimate interest in replying to received requests (artt. 6.1.b and 6.1.f GDPR).

c) Tax, accounting and legal obligations, including medical device regulations — legal basis: legal obligation (art. 6.1.c GDPR).

d) Sending the newsletter and commercial communications about products and initiatives — legal basis: freely given consent, revocable at any time (art. 6.1.a GDPR).

e) Website security, abuse prevention and service improvement through aggregated statistics — legal basis: legitimate interest of the controller (art. 6.1.f GDPR).

We carry out no automated decision-making or profiling producing legal effects on the data subject.

Data may be disclosed, for the purposes above, to: e-commerce and checkout platform providers (Shopify), website hosting and cloud service providers, payment providers and banks, couriers and shipping companies, tax and accounting advisors, email and technical support providers.

These parties act as data processors appointed under art. 28 GDPR or, where they process data for their own purposes, as independent controllers.

Data may also be disclosed to public authorities and supervisory bodies where required by law or regulation.

Data are never disseminated and are not transferred to third parties for their own marketing purposes without specific consent.

Some technology providers may process data outside the European Economic Area. In that case the transfer is based on an adequacy decision of the European Commission or on Standard Contractual Clauses, together with any supplementary measures needed to ensure an equivalent level of protection.

Order, invoicing and accounting data: 10 years from completion of the transaction, as required by tax and civil law.

Product warranty and support data: for the warranty period and the subsequent period needed to defend legal claims.

Requests sent through the contact form: 24 months from the last contact.

Newsletter subscription: until consent is withdrawn or the address is removed from the list.

Technical logs and browsing data: maximum 12 months, unless needed to investigate offences.

At the end of these periods data are deleted or irreversibly anonymised.

You may exercise at any time the rights under artt. 15-22 GDPR: access, rectification, erasure, restriction of processing, portability, objection to processing based on legitimate interest, and withdrawal of consent (which does not affect the lawfulness of processing carried out before withdrawal).

To exercise your rights write to info@naturlifestyle.it stating the right you wish to exercise. We reply within 30 days of receiving the request.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it) if you believe the processing infringes applicable law.

We adopt technical and organisational measures appropriate to protect data against unauthorised access, loss or disclosure: HTTPS encryption across the site, access restricted to authorised staff, payments handled by certified operators.

The website uses technical and preference cookies necessary for operation, plus cookies related to the checkout process. Full details and consent management are described in the Cookie Policy.

This notice may be updated to reflect changes in law or in the services offered. The version in force is always the one published on this page, with the date of the last update.