Privacy policy

Last updated: 2 August 2026

This policy explains what we do with your personal data when you visit saraura.eu, buy from it, or write to us. It is written to the EU General Data Protection Regulation (GDPR) and Italian data protection law.

Who is responsible for your data

Saraura, trading from Bologna, Italy, is the data controller. Every question about your data, and every request to exercise the rights below, goes to sarauraofficial@gmail.com.

What we collect

• What you give us — your name, email address, delivery and billing address, phone number if you provide one, the contents of your order, and anything you write in a message to us or in an order note.
• What your visit generates — IP address, device and browser type, the pages you looked at and what you added to your basket. This is collected by the platform this store runs on.
• Your account, if you make one — your sign-in details and your order history.
• Your marketing choice — whether you asked for our emails, and when.

We never see or hold your card details. Payment is completed on PayPal's own pages and card data is never transmitted to us.

Why we use it, and on what legal basis

• To perform our contract with you — taking, packing, dispatching and tracking your order, handling returns and refunds, and answering you about it.
• To meet our legal obligations — keeping records of sales for the periods the law requires.
• Our legitimate interests — keeping the site secure, preventing fraud, and understanding in aggregate how the shop is used so we can improve it. We use this basis only where it does not override your rights.
• Your consent — marketing email, and any non-essential cookie. You can withdraw either at any time; every marketing email carries an unsubscribe link, and withdrawing does not affect anything done before you did.

We do not sell your personal data.

Who else handles it

Only those who need it in order to get your order to you or to run the shop:

• Shopify — the platform hosting this store and its checkout. It processes order and browsing data on our behalf.
• PayPal — takes payment and holds the payment data. PayPal is a controller in its own right for that; its own privacy policy applies.
• The carrier delivering your parcel — receives the name, address and contact details needed to deliver it.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

Cookies

Essential cookies keep your basket, your session and the checkout working; the shop cannot function without them. Anything beyond that is set only with your consent, which you can change or withdraw through your browser settings or the cookie controls shown to you.

How long we keep it

Order records are kept for as long as the law requires us to keep records of a sale. Account data is kept while your account exists. Marketing consent is kept until you withdraw it. Messages you send us are kept for as long as they are useful to the matter they concern, and then deleted.

Where your data goes

Our providers may process data outside the European Economic Area. Where they do, the transfer is made under a mechanism recognised by EU law — an adequacy decision, or the European Commission's Standard Contractual Clauses.

Your rights

Under the GDPR you may ask us to:

• Give you a copy of the personal data we hold about you;
• Correct anything inaccurate or incomplete;
• Erase your data, where we no longer have a reason to keep it;
• Restrict how we use it while a question about it is resolved;
• Send it on, to you or to another provider, in a machine-readable form;
• Stop, where we are relying on legitimate interests — and always, without qualification, for direct marketing;
• Withdraw consent you have given.

Write to sarauraofficial@gmail.com. We answer within one month, as the regulation requires, and we may need to confirm your identity first so that we are not handing your data to somebody else.

Complaints

If you think we have handled your data badly, tell us first — most things are fixed quickly that way. You also have the right to complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, or to the data protection authority of the EU country you live in.

Children

This shop is not intended for children, and we do not knowingly collect data about them. If you believe a child has given us their data, write to us and we will delete it.

Changes

We may update this policy. The date at the top shows when it last changed, and material changes will be made clear on this page.

Contact

Saraura — Bologna, Italy
sarauraofficial@gmail.com