Shieldon
Cart 0

Privacy Policy

Privacy Policy

Last updated: [July 16, 2026]

This Privacy Policy is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) to users who visit the website www.shieldonstore.com and use the services offered through it.

1. Data Controller

The Data Controller is:

Epicur S.r.l. VAT No.: 09468230017 Address: Via Principe Amedeo 30, 10023 Turin (TO) – Italy Email: info@shieldonstore.com

2. Data Protection Officer (DPO)

The Data Controller has not appointed a Data Protection Officer (DPO), as the conditions specified in Article 37 of the GDPR do not apply.

3. Types of Data Collected

During navigation or use of the website, the following categories of data may be collected:

  • Identification data (first name and last name);
  • **Shipping and billing address;
  • **Email address;
  • **Phone number;
  • Tax code or VAT number (where necessary);
  • **Order-related data;
  • **Navigation data;
  • **IP address;
  • Cookies and similar technologies.

Providing the data requested for purchasing products is necessary for the execution of the contract.

4. Purposes of Processing

Personal data is processed for the following purposes:

a) Order Management

  • Order registration;
  • Payment management;
  • Preparation and shipment of products;
  • After-sales assistance.

Legal basis: Article 6(1)(b) GDPR (performance of a contract).

b) Tax and Administrative Compliance

Data is processed to fulfill obligations under tax, accounting, and civil law.

Legal basis: Article 6(1)(c) GDPR (legal obligation).

c) Customer Account Management

If the user chooses to register, the data will be used to:

  • Allow access to the personal area;
  • View order history;
  • Manage shipping addresses.

Legal basis: Performance of a contract.

d) Customer Support

Data provided via email or contact forms is used exclusively to respond to requests received.

Legal basis: Pre-contractual or contractual measures.

e) Site Security

The Data Controller processes certain navigation data to ensure site security, prevent fraud, illegal use, and unauthorized access.

Legal basis: Legitimate interest of the Data Controller.

f) Statistical Analysis

The website uses Google Analytics 4 only with the user’s prior consent, managed through the Cookiebot consent management system.

The collected statistics help understand site performance and improve content.

Legal basis: User consent.

5. Data Processing Methods

Processing is carried out using electronic and paper-based tools, adopting appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data.

6. Payments

Payments can be made via:

  • PayPal;
  • Bank transfer.

Payment method information is processed directly by the respective payment service providers.

The Data Controller does not store or process complete payment card data.

7. Product Shipping

To fulfill orders, certain personal data (name, surname, address, phone number) is shared with designated couriers for delivery.

Couriers may include, but are not limited to:

  • **BRT;
  • **GLS;
  • Other couriers selected based on destination or requested service.

Data communication is limited to what is strictly necessary for delivery.

8. Data Recipients

Personal data may be disclosed to:

  • **Tax consultants and accountants;
  • **Banks;
  • **PayPal;
  • **Couriers;
  • **IT and hosting service providers;
  • Competent authorities when required by law.

External parties operate as Data Processors or independent Data Controllers, in accordance with the GDPR.

9. Data Transfer to Non-EU Countries

Some technological service providers used by the website (e.g., Google and PayPal) may process personal data outside the European Economic Area (EEA).

In such cases, the transfer is carried out in compliance with Articles 44 et seq. of the GDPR, using the tools provided by European regulations.

10. Data Retention

Data is retained only for the time strictly necessary to achieve the purposes mentioned above.

In particular:

  • Order-related data: Up to 10 years for tax obligations;
  • Account data: Until account deletion or user request;
  • Contact data: For the time necessary to handle the request;
  • Data collected via cookies: As indicated in the Cookie Policy.

11. Cookies

The website uses technical cookies necessary for the correct functioning of the platform.

The installation of profiling or non-anonymized statistical cookies occurs only with the user’s explicit consent, managed through the Cookiebot system.

For more information, please refer to the Cookie Policy.

12. Data Subject Rights

The data subject may exercise the rights provided under Articles 15–22 of the GDPR at any time, including:

  • Obtain confirmation of the existence of data;
  • Access personal data;
  • Request correction;
  • Request deletion;
  • Restrict processing;
  • Object to processing in certain cases;
  • Request data portability;
  • Withdraw consent.

13. How to Exercise Rights

Requests can be sent to: info@shieldonstore.com

The Data Controller will respond within the timeframes set by the GDPR.

14. Complaint to the Supervisory Authority

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) under Article 77 of the GDPR, if they believe that the processing violates applicable regulations.

15. Changes to This Privacy Policy

The Data Controller reserves the right to update this Privacy Policy at any time. Changes will be published on this page with the indication of the last update date.