What we collect when you buy from us or write to us, why we are allowed to, and what you can ask us to do about it.
The data controller is MPG Società a Responsabilità Limitata Semplificata, Piazza dei Caduti 3, 73010 Sogliano Cavour (LE), Italia, P.IVA and C.F. 05209120756. Write to mpg.srls@legalmail.it about anything in this policy. No Data Protection Officer is appointed, as the house does not carry out large-scale or systematic monitoring.
When you place an order: your name, email, delivery address, telephone number, the pieces ordered, and any measurements or notes you give the atelier. When you write to us or ask about a piece: your name, email, telephone and your message. When you subscribe to the newsletter or save pieces: your email. When you create an account: your email and a password, which is stored only as a hash and is never readable by us.
Card details are entered on our pages but are handled entirely by Stripe and never reach our servers. We receive only the outcome of the payment, the last four digits, and the card brand.
To perform the contract when you order, which covers taking payment, cutting the piece, dispatching it and handling returns. Our legitimate interest in replying when you write to us and in keeping the site secure and working. Your consent for the newsletter, saved-piece reminders and measurement cookies, which you may withdraw at any time. Our legal obligations for invoicing and tax, which we cannot set aside at your request.
Supabase (database and accounts), Stripe (payments), Vercel (hosting), Cloudflare (media delivery), Resend (email), and Anthropic (the concierge on the support page, which receives the question you type and nothing about your orders). Each acts on our instructions as a data processor. Some are established outside the EU and transfer data under the European Commission's Standard Contractual Clauses.
Order and invoice records for ten years, as Italian tax law requires. Enquiries for two years after the last exchange. Newsletter and saved-piece subscriptions until you unsubscribe. Account data until you ask us to close the account.
You may ask for a copy of your data, ask us to correct or erase it, ask us to restrict or stop a particular use, object to processing based on legitimate interest, and ask for your data in a portable form. Where we rely on consent you may withdraw it at any time, and doing so does not affect what was lawful before. Write to mpg.srls@legalmail.it and we will answer within one month. If you are not satisfied you may complain to the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma.
We make no automated decisions that produce legal effects for you, and we do not profile you. The concierge on the support page answers questions; it does not decide anything about your order.
Necessary cookies keep the bag and the account working. Measurement is loaded only if you accept it, and you can change that choice at any time on the cookie policy page.
