This Privacy Policy explains how Lucky Patch Studios (“we”, “us”) collects, uses, and protects your personal data when you visit our website, buy from our online shop, or contact us. We handle your data in line with the EU General Data Protection Regulation (GDPR).
The controller responsible for your data is Lucky Patch Studios srl, Corso Vittorio Emanuele II 44, 26100 Cremona, Italy. Contact: privacy@luckypatchstudios.com.
When you place an order:
We never see or store your full card number. Card details are entered with our payment provider and go directly to them.
When you join our mailing list or contact us, we collect your name (optional), email address, your consent and the time you gave it. We also receive technical data your browser sends automatically, such as IP address and device or browser type, and, with your consent, analytics data (see our Cookie Policy).
We share your data only with the providers that make the shop work, each acting as our processor or, where indicated, as a controller in its own right. We do not sell your personal data.
Some of these providers are established in, or store data in, the United States. Such transfers are protected by appropriate safeguards — where the recipient is certified under the EU–US Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision of 10 July 2023; otherwise, it is covered by the Standard Contractual Clauses approved by the European Commission (Decision 2021/914).
We keep order records, invoices and payment confirmations for 10 years, because tax and commercial law requires it. Deleting your marketing profile does not delete these records, and we cannot erase them while that period is running — this is a lawful restriction on your right to erasure.
We keep mailing-list data until you withdraw consent or ask us to delete it.
You have the right to access, rectify, erase, restrict, or object to the processing of your data, the right to data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise these rights, email privacy@luckypatchstudios.com. We respond within one month.
You also have the right to lodge a complaint with your local data-protection supervisory authority, or with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, Italy.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Our payment provider may run automated fraud checks on a transaction; if a payment is declined on that basis, contact us and we will look at it.
Payments are encrypted in transit and handled by our payment provider. We limit access to order and customer data to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Our website and shop are not directed to children under age 16, and we do not knowingly collect their data or accept orders from them.
We use cookies as described in our Cookie Policy. Non-essential cookies are set only with your consent. Our shop also sets cookies that are strictly necessary to keep your basket and checkout working; these cannot be switched off without breaking the shop.
We may update this policy from time to time. The “last updated” date above shows when it last changed.