Privacy Policy

Last updated: April 2026

This Privacy Policy describes how Effelle di Francesca Leone ("we", "the Controller") collects, uses and protects the personal data of users ("you", "the User") who visit www.effellelab.com and purchase the digital patterns available thereon, in compliance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.

1. Data collected and purposes

a) Data provided voluntarily during purchase

• Email address (required to deliver the purchased pattern)
• Name and surname (provided through your PayPal account)
• Payment data (processed exclusively by PayPal — the Controller does not access or store card or bank account details)

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

b) Data collected automatically during browsing

• IP address, browser type and operating system
• Pages visited and time spent on the site
• Referral source

These data are processed via Google Analytics for statistical purposes and service improvement. Legal basis: your consent (Art. 6(1)(a) GDPR), collected via the cookie banner on first visit.

c) Hosting technical data

The site is hosted on Netlify (Netlify, Inc., USA). Netlify automatically collects technical access data for security and infrastructure purposes. Transfers to the USA are made in compliance with the EU-US Data Privacy Framework.

2. Data processing and retention

Data required for contract performance (email, order details) are retained for the period required by applicable legal and tax obligations (ordinarily 10 years under Italian civil and tax law). Statistical data collected via Google Analytics are retained for the period configured in the control panel (by default 14 months).

3. Data disclosure and transfers

Personal data are not sold or transferred to third parties for commercial purposes. They may be shared with the following parties, to the extent strictly necessary to deliver the service:

• PayPal (Europe) S.à r.l. et Cie, S.C.A. — payment processor. PayPal Privacy Policy
• Netlify, Inc. — hosting provider. Netlify Privacy Policy
• Google LLC — analytics provider. Google Privacy Policy
• Resend, Inc. — transactional email service for pattern delivery.
• Competent authorities — where required by law or judicial order.

4. Your rights

As a data subject, you have the right to: access your data (Art. 15 GDPR); rectification (Art. 16); erasure / "right to be forgotten" (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); objection (Art. 21); and withdrawal of consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, write to: info@effellelab.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante): www.garanteprivacy.it.

5. Cookies

For detailed information on cookies and how to manage them, please see our Cookie Policy.

6. Changes to this policy

The Controller reserves the right to amend this Privacy Policy at any time. Material changes will be notified via a notice on the site. The current version is always available at this URL.