Last updated: October 16, 2026

This Privacy Policy explains how we collect, use and disclose your personal information when you visit macondostore.com, make a purchase or otherwise interact with us (the "Services"). Please read it carefully. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to your personal information.

Who we are (Data Controller)

The data controller of your personal information is IMPACT S.r.l., owner of the brand MACONDO.
Registered office: Via Giuseppe Ripamonti 66, 20141 Milano (MI), Italy
VAT No. IT09444650965
Email: online@macondostore.com – Phone: +39 045 206 6298
PEC: impactsrl@sicurezzapostale.it

Our online store is powered by Shopify, which hosts the Services and processes data on our behalf.

Personal information we collect

"Personal information" means information that identifies you or can reasonably be linked to you. Depending on how you interact with the Services, we may collect:

• Contact details: name, billing and shipping address, phone number and email address.
• Payment information: payment method, transaction details and payment confirmation. Card data is processed directly by our payment providers; we do not store full card numbers.
• Account information: username, password, preferences and settings.
• Transaction information: items you view, add to your cart or wishlist, purchase, return, exchange or cancel, and your past orders.
• Communications with us: information you include when contacting customer service.
• Device and usage information: IP address, browser, device identifiers and how you navigate the Services, collected through cookies and similar technologies.

Where we get it

• Directly from you, when you place an order, create an account, sign up to our newsletter or contact us.
• Automatically, through cookies and similar technologies when you use the Services (see "Cookies" below).
• From our service providers and partners, such as payment processors, carriers and advertising platforms.

Why we use it and on what legal basis

• To process and deliver your orders, including payments, shipping, returns, refunds and customer service. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To manage your account and remember your preferences. Legal basis: performance of a contract.
• To comply with legal obligations, such as invoicing, accounting and tax rules, and requests from authorities. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• To prevent fraud and keep the Services secure. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• To send you newsletters and promotional communications. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. If you are already a customer, we may email you about products similar to those you bought, unless you object (Art. 130(4) Italian Privacy Code).
• To show you personalised advertising and measure our marketing through cookies and similar technologies. Legal basis: your consent, given through our cookie banner.
• To improve the Services through aggregated statistics. Legal basis: our legitimate interest, or your consent where cookies require it.

Providing your contact and shipping details is necessary to complete a purchase. Everything else is optional.

Who we share it with

• Shopify and other service providers who act on our behalf: hosting, payment processing, shipping carriers, customer service tools, email and analytics providers.
• Advertising and marketing partners (for example Google and Meta), only with your consent where required. These partners use your information under their own privacy notices. You can opt out of the sharing of your information for targeted advertising here.
• Companies within our group, for administrative purposes.
• Authorities, advisors or buyers, when required by law, to defend our rights, or in connection with a business transaction such as a merger or acquisition.

We do not sell your personal information.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal information about your use of the Services in order to provide and improve them. We also use certain Shopify enhanced features that combine information from your interactions with our store, with other merchants and with Shopify. For those features Shopify is responsible for the processing, including responding to your rights requests. To learn more, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Cookies

We use technical cookies that are necessary for the website to work (for example the cart and checkout), which do not require consent. Analytics, marketing and personalisation cookies are used only if you accept them in our cookie banner. You can change your choice at any time through the Your Privacy Choices page or your browser settings. If your browser sends a Global Privacy Control signal, we treat it as an opt-out request for that browser.

International transfers

Some of our service providers, including Shopify, may process your information outside the European Economic Area. In that case we rely on an adequacy decision of the European Commission or on the European Commission's Standard Contractual Clauses.

How long we keep it

• Order and invoicing data: 10 years, as required by Italian accounting and tax law.
• Account data: until you delete your account or ask us to delete it.
• Newsletter and marketing data: until you unsubscribe or withdraw your consent.
• Customer service communications: for as long as needed to handle your request and any related claim.
• Cookies: for the duration shown in our cookie banner.

Security

We use appropriate technical and organisational measures to protect your information. No system is completely secure, so please do not send sensitive information to us through unsecured channels.

Children

The Services are not intended for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Your rights

Under the GDPR you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Restrict or object to our processing, including for direct marketing at any time;
• Data portability: receive your information in a structured format or have it sent to another company;
• Withdraw your consent at any time, without affecting processing carried out before the withdrawal.

You can unsubscribe from marketing emails using the link in each email. We may still send you service emails about your orders or account.

To exercise your rights, write to online@macondostore.com. We may need to verify your identity, and we will reply within one month. You can also appoint an authorised agent to act on your behalf. We will not treat you differently for exercising your rights.

Complaints

If you are not satisfied with how we handle your information, please contact us first. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of the EU country where you live or work.

Third-party websites

The Services may link to websites and social networks we do not control, such as Instagram and YouTube. Their privacy policies apply when you visit them, and information you share publicly there may be seen by others.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or in the law. We will publish the new version on this page and update the "Last updated" date.

Contact

For any question about this Privacy Policy or your personal information:
IMPACT S.r.l. – Via Giuseppe Ripamonti 66, 20141 Milano (MI), Italy
Email: online@macondostore.com – Phone: +39 045 206 6298