Privacy Policy

Last updated: December 2, 2025

This privacy policy describes how we collect, process, and protect the personal data of users of the website www.incarvo.com. , managed by the company Incarvo , with headquarters at 66 Avenue des Champs-Élysées, 75008 Paris , and contactable at the email address support@incarvo.it .

This information complies with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) .

1. Data controller

The data controller of the personal data collected on the site is:

Incarvo
Address: 66 Avenue des Champs-Élysées, 75008 Paris
Email: support@incarvo.it

2. Data collected

Personal data that may be collected through the website www.incarvo.com include in particular:

  • Name and surname

  • Mailing address

  • E-mail address

  • Telephone number

  • Payment information (securely processed through a payment service provider)

  • IP address and browsing data

  • Order history

This data is collected in particular on the occasion of:

  • Creating a customer account

  • Placing an order

  • Newsletter subscription

  • Using the contact form

  • Site navigation (via cookies )

3. Purpose of the processing

The data collected is used for the following purposes:

  • Order processing and customer relationship management

  • Delivery of ordered products

  • Payment management and fraud prevention

  • Commercial communication (subject to user consent )

  • Improving user experience and traffic analysis

  • Fulfillment of legal and regulatory obligations

4. Legal basis

The treatments are based on:

  • Execution of the sales contract (order)

  • User consent (e.g. newsletter)

  • Legal obligations

  • Legitimate interest of the data controller (site security, fraud prevention)

5. Duration of storage

The data is stored for limited and proportionate periods:

  • Order data: 5 years

  • Billing data: 10 years

  • Browsing data and cookies: according to the duration set in the browser

  • Business prospecting data: 3 years from last active contact

6. Data recipients

The data is intended exclusively for internal services and authorized providers involved in the execution of the contract (payment, delivery, hosting, etc.).

The site is hosted on the Shopify Inc. platform, a company based in Canada and compliant with GDPR requirements through the standard contractual clauses approved by the European Commission.

7. Security

Incarvo adopts all appropriate technical and organizational measures to ensure the security and confidentiality of personal data and prevent its loss, alteration, disclosure, or unauthorized access.

Payment information is encrypted and processed by certified providers. No bank details are stored directly by Incarvo.

8. Cookie

The site uses cookies to:

  • Making navigation easier

  • Analyze audience and performance

  • Personalize the user experience

On the first visit, the user is informed of the use of cookies and can manage their consent via a dedicated banner .

9. User rights

You have the following rights regarding your personal data:

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restriction of processing

  • Right to portability

  • Right to object

To exercise your rights, you can contact the data controller: support@incarvo.it .
A response will be provided within one month .

10. Transfers outside the EU

Some providers (e.g., Shopify ) may transfer data outside the European Union. These transfers are governed by recognized compliant mechanisms, such as standard contractual clauses or adequacy decisions .

11. Changes to the information

This privacy policy may be modified at any time to ensure compliance with applicable laws.
You will be notified of any significant changes through the Site or other appropriate means.

12. Contact

For any questions regarding this policy or the exercise of your rights, you can contact Incarvo :
support@incarvo.it