Privacy policy

Privacy Policy

Last updated: June 30, 2026

This online store is operated by Lucia Sofia ("Lucia Sofia", "we", "our", "us"). Together, we refer to all related content, products, and services as the "Services".

Our store operates on the Shopify Inc. e-commerce platform, which hosts our website and supports us in providing the Services.

This Privacy Policy describes what personal data we collect, why we collect it, how we use and protect it, and what rights you have. By visiting our website or placing an order, you confirm that you have read and understood this policy.

  1. What information we collect

Depending on how you interact with our store, we may collect:

Identification and contact data: your name, email address, phone number, billing address, and shipping address.
Payment data: card details, payment confirmations, and transaction records, processed through secure payment providers.
Account data: login details, passwords, preferences, and saved settings.
Purchase data: products you view, add to your cart, purchase, return, or exchange.
Technical data: IP address, browser type, device and operating system, cookie identifiers, and how you browse our website.
Support data: the content of emails or messages you send to our customer service team, including any attachments.

We receive this information in three ways:

Directly from you, for example when you place an order, create an account, or contact us.
Automatically, through cookies and similar technologies while you browse our website.
Through third parties that help us operate the store, such as Shopify and our payment providers.

  1. Why we use your information

We use your personal data for the following purposes:

Store management: to process payments, ship your orders, and manage returns, exchanges, and refunds.
Improving your experience: to remember your preferences, personalize content, and suggest products that may interest you.
Communications: to send order confirmations and shipping updates, answer your questions, and provide support.
Marketing: where permitted, to send you offers or show you relevant ads. You can unsubscribe at any time using the link in our emails.
Protection and fraud prevention: protect accounts, detect suspicious activity, and keep payments secure.
Legal obligations: comply with applicable laws, respond to legitimate requests, and enforce our Terms of Service.

  1. Who we share your information with

We share personal data only when necessary, with:

Shopify Inc., which hosts our store and processes orders on our behalf.
Payment providers and delivery partners, so that payments can be completed and packages can reach you.
Service providers for IT, analytics, advertising, and email, who support the operation of our store.
Public authorities or courts, where we are legally required to do so.

All partners are contractually required to protect your information and use it only for the agreed purpose. We never sell or rent your personal data to anyone.

  1. Shopify

Since our store is built on Shopify, Shopify also collects and processes certain data (such as cookies and device information) to operate the platform and provide analytics. You can read more about how Shopify processes personal data, and exercise your rights regarding that data, at https://www.shopify.com/legal/privacy.

  1. Transfers outside the European Union

In some cases, your personal data may be stored on servers located outside the European Union, for example in Canada or the United States. When this happens, we use recognized legal safeguards, such as Standard Contractual Clauses (SCCs), to ensure that your data continues to receive an adequate level of protection.

  1. How long we retain your information

We retain personal data only for as long as necessary. In practice, this means that we retain data:

to fulfill your orders and provide the Services,
to comply with legal and tax obligations,
to resolve any disputes, and
to enforce our agreements.

When the information is no longer needed, it is securely deleted or anonymized.

  1. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

request access to the personal data we hold about you,
have inaccurate data corrected,
have your personal data erased,
restrict or object to certain types of processing,
withdraw your consent where processing is based on consent, and
receive your data in a portable format.

To exercise any of these rights, write to us at info@luciasofia.it. To protect your data, we may ask you to verify your identity first. You will never be treated differently for exercising your privacy rights.

If you are not satisfied with how we handle your data, you also have the right to lodge a complaint with a supervisory authority. As a consumer, you may contact the supervisory authority in your country of habitual residence: for residents of Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it). Since the controller is based in the Netherlands, the lead supervisory authority is the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl).

  1. How we protect your information

We take appropriate technical and organizational measures to keep your personal data safe. At the same time, no online system can ever be completely secure, so we cannot promise absolute protection of data transmitted over the internet.

  1. Children

Our Services are not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us so we can remove it.

  1. Changes to this policy

We may review this Privacy Policy from time to time, for example, when our activities or legal requirements change. The latest version will always be published on this page with an updated "Last updated" date. In the event of significant changes, we will clearly communicate them on our website.

  1. Contact us

If you have questions about this Privacy Policy or how we handle your data, you can contact us here:

Store name: Lucia Sofia
Email: info@luciasofia.it

Business information

Legal name: Lodecom
Business registration number (KVK, Netherlands): 99670739
VAT number (EU): NL005402854B02
Business address: Van Meelstraat 20, 1945 WC Beverwijk, Netherlands
Email: info@luciasofia.it

Lucia Sofia is a trade name of Lodecom