Privacy Policy

This policy explains what personal data KAYA Studio Outlet collects when you visit this site or place an order, why we collect it, who we share it with, and the rights you have over it. It applies to this website only.

Who is responsible for your data

The data controller is LABIS POP DRAGOS COSMIN, a sole proprietorship trading as KAYA Studio Outlet, registered at Via Acque Alte 12, 04100 Latina (LT), Italia. For any question about this policy or about your personal data, write to kayastudiooutlet@gmail.com.

VAT number: 03361320595 · REA: LT-335179 · PEC (certified email): dragoscommerce@pec.it

What we collect

We collect only what we need to run the shop:

• Order data — your name, email address, phone number, shipping address and the contents of your order. You provide this at checkout; without it we cannot fulfil an order.
• Contact data — the name, email address and message you send us through the contact form or WhatsApp.
• Technical data — IP address, browser type, device type and the pages you visit. This is generated automatically by our hosting provider and is used to keep the site running and secure.
• Site usage statistics — we record directly, on our database provider's servers, the pages you visit, the products you view or add to the cart, checkout starts, the referring page, any campaign parameters in the link (utm), device type and country. To estimate the number of visitors we use a code derived from the IP address and browser that changes every day: the IP address itself is not stored and nothing is saved on your device. Our hosting provider (Vercel Web Analytics) collects similar statistics, also without cookies.
• Statistics identifier and link to orders — only if you accept cookies, our server stores a cookie (kaya_vid) with a random code in your browser. It lets us recognise later visits from the same browser and link any order you place to those visits (for example: where the first visit came from, how many visits and days passed before the purchase, which products you viewed). The cookie contains neither your name nor any other data and is not read or shared by third parties.
• Advertising data — if, and only if, you accept cookies, the Meta Pixel records the pages and products you view, items you add to the cart, and completed orders, and sends this to Meta together with an identifier stored in a cookie. Google Analytics records the same events and sends them to Google, also with a cookie identifier.

Why we use it, and on what legal basis

Under the GDPR we must have a legal basis for each use of your data:

• To process, ship and invoice your order — performance of a contract with you (Art. 6(1)(b)).
• To answer your messages — performance of a contract, or our legitimate interest in responding to enquiries (Art. 6(1)(b) and (f)).
• To keep the site available, secure and free of fraud — our legitimate interest in protecting the business (Art. 6(1)(f)).
• To keep accounting and tax records — compliance with a legal obligation under Italian law (Art. 6(1)(c)).
• Aggregate, cookieless statistics on how the site is used — our legitimate interest in understanding and improving the shop (Art. 6(1)(f)). The data is not linked to your identity.
• Recognising later visits and linking visits to your orders through the kaya_vid cookie, measuring traffic and advertising results, and personalising advertising through the Meta Pixel and Google Analytics — solely your consent (Art. 6(1)(a)). You can withdraw it at any time from the “Cookie preferences” link at the bottom of every page; if you decline, no data is processed for these purposes.

Cookies and tracking

We use a small number of strictly necessary cookies and similar local storage to keep your cart, your language choice and your cookie decision. These cannot be switched off and do not require consent.

Cookieless statistics. Regardless of your choice we record the visits and on-site actions described above in aggregate form, without storing anything on your device and without saving your IP address; the code used to count visitors changes every day and cannot recognise you over time.

kaya_vid statistics cookie (our own, with consent). If you accept, our server sets the kaya_vid cookie — first-party and not readable by scripts on the page — containing a random code. It expires at the latest 13 months after you accept, and later visits do not extend it. It is used to recognise the same browser returning and to link visits to any order. It is not shared with Meta, Google or any other third party. If you decline or withdraw consent the cookie is deleted immediately and no new data is linked; links already recorded are deleted from our systems 13 months after each visit or order.

With your consent we also load the Meta Pixel, a tracking tool provided by Meta Platforms Ireland Ltd. It sets cookies in your browser and sends Meta information about how you use this site, so that we can measure our advertising and show ads to people who have shown interest in our products. Meta may combine this with data it already holds about you. If you decline, the Pixel is never loaded and no data is sent.

With the same consent we load Google Analytics, provided by Google Ireland Ltd. It sets cookies and sends Google information about the pages you visit, the products you view and add to the cart, and completed orders. We use it to understand how the site is used and to measure the results of our Google Ads campaigns, which may use this data to show our ads to people who visited the site. If you decline, Google Analytics is never loaded.

Google Maps. The map on the store page is provided by Google and may set cookies: it loads only if you accepted cookies, or if you choose to show it with its button, which applies to that view only.

The banner appears on your first visit and again after 12 months. You can change or withdraw your choice at any time from the “Cookie preferences” link at the bottom of every page: withdrawing deletes the kaya_vid cookie and the Meta and Google cookies in your browser and stops those tools from loading. You can also block cookies entirely in your browser and manage how Meta and Google use your data in the ad settings of your Facebook or Instagram account and your Google account.

Who we share it with

We do not sell your data. We share it only with the providers we need to operate the shop, each acting under contract:

• Our hosting and database providers, who store the site and your order records.
• Our email provider, used to send order confirmations and to deliver contact-form messages to us.
• Stripe Payments Europe Ltd., for card payments: you enter your card details directly on Stripe's payment page, and they never pass through or are stored on our systems. Stripe receives your email address and the order amount.
• WhatsApp Ireland Ltd., only if you choose to order or message us through WhatsApp.
• Couriers and shipping partners, who receive the name and address needed to deliver your parcel.
• Meta Platforms Ireland Ltd. and Google Ireland Ltd., but only if you accepted cookies.
• Our accountant and, where the law requires it, the tax authorities.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

How long we keep it

• Order and invoicing records — 10 years, as required by Italian tax law.
• Contact messages — up to 24 months after our last exchange with you.
• Technical and server logs — a short period set by our hosting provider, typically a few weeks.
• Site usage statistics — 25 months, then deleted.
• Link between the kaya_vid cookie, visits and orders — 13 months from each visit or order; the cookie in your browser expires at the latest 13 months after consent.
• Your cookie choice — up to 12 months, after which the banner is shown again.
• Data held by Meta and Google following your consent — for the periods set out in their own policies, which we do not control.

Your rights

You can ask us at any time to:

• give you a copy of the data we hold about you;
• correct anything that is wrong or out of date;
• delete your data, where we are not required to keep it;
• restrict or object to how we use it;
• receive your data in a portable format, or have it sent to another provider;
• withdraw your consent to advertising cookies, without affecting what was done before you withdrew it.

Write to kayastudiooutlet@gmail.com and we will respond within one month.

If you believe we have handled your data improperly, you may lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority in your country of residence.

Changes to this policy

If we change how we handle your data we will update this page and the date shown at the top. If the change is significant, we will ask for your consent again where the law requires it.

Contact

For any privacy question, or to exercise any of the rights above, contact us at kayastudiooutlet@gmail.com.