Privacy Policy

Data you give us: first and last name, email address, shipping and billing address, phone number (when provided) and order details.

Payment data: card and payment details are entered directly with our third-party payment processors (Shopify Payments, Stripe, PayPal). We never see or store your full card number — we only receive confirmation of payment and the last digits of the card.

Data collected automatically: IP address, browser and device type, pages viewed, referring site and similar usage data collected through cookies and comparable technologies.

• to process, fulfil and deliver your order and to provide support, returns and warranty handling — performance of a contract (Art. 6(1)(b) GDPR);
• to keep accounting, tax and invoicing records and to prevent fraud — legal obligation and legitimate interest (Art. 6(1)(c) and (f));
• to measure and improve the website and our advertising — consent for non-essential cookies (Art. 6(1)(a));
• to send marketing emails where you opted in — consent, withdrawable at any time.

We use essential cookies to keep the store working, plus analytics and marketing cookies that are only set after you accept them in our cookie banner. You can change or withdraw your choice at any time; see our Cookie Policy for details.

We never sell your personal data. We share it only with providers who help us run the store, and only as far as needed: our e-commerce platform and payment processors (Shopify, Stripe, PayPal), shipping carriers and fulfilment suppliers, email and customer-support tools, and analytics and advertising providers. Some providers are located outside the EEA; in that case transfers rely on European Commission adequacy decisions or Standard Contractual Clauses. We may also disclose data where required by law.

Order, invoicing and tax records are kept for 10 years, as required by Italian tax law. Support correspondence is kept for up to 2 years. Marketing contact data is kept until you unsubscribe. Analytics data is retained in aggregated form for up to 26 months.

You have the right to access your data, to rectify inaccurate data, to erasure, to restriction of processing, to data portability, to object to processing based on our legitimate interests, and to withdraw consent at any time. To exercise any of these rights, email purrbox.info@gmail.com with the subject "Privacy Request". We reply within one month, as required by Art. 12 GDPR.

If you believe your data has been handled unlawfully you can lodge a complaint with the Italian Data Protection Authority, Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Rome, Italy — garanteprivacy.it. You may also seek a remedy before the competent Italian courts.

We use appropriate technical and organisational measures, including encryption in transit, but no transmission method is completely secure. Our store is not directed at children under 16 and we do not knowingly collect their data.

We may update this notice from time to time. The "Last updated" date above shows the current version, and material changes will be announced on this page.