Privacy policy

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit or make a purchase from this website.

1) Data Controller

Trading name: Wheely Cool Tees (Skema Creations di Alessandro Maffei)
Registered/Business address: Via Gian Pietro Lucini 8, 22077 Olgiate Comasco (CO), Italy
Email: support@wheelycooltees.com
Chamber of Commerce: Como
REA: CO - 427660
VAT number: 04206660138

2) What data we collect

Browsing and device data: IP address, device identifiers, browser type, pages viewed, logs and security events.
Order and contact data: name, email, phone (if provided), billing/shipping address, order details, messages sent to customer support.
Account data (if you create an account): login details and account preferences.
Payment data: handled by payment providers. We do not receive or store full card details.
Marketing preferences: consent status, email subscription and interaction data (e.g., opens/clicks) where enabled.
Cookie and tracking data: see the Cookie Policy.

3) Why we process your data (purposes) and legal bases

Purpose	Examples of data	Legal basis (GDPR)	Retention
Operate the website, security and fraud prevention	IP address, logs, device/browser data	Legitimate interests (Art. 6(1)(f))	Typically up to 12 months (longer if needed to establish, exercise or defend legal claims)
Process orders and provide customer service	Name, contact details, address, order details, support messages	Contract (Art. 6(1)(b))	As needed to manage your order and after-sales support
Production, fulfillment and delivery	Shipping details and order information necessary to fulfill the purchase	Contract (Art. 6(1)(b))	As needed to fulfill the order and manage delivery/returns, then according to legal obligations
Accounting and tax compliance	Invoices, transaction records, order data required by law	Legal obligation (Art. 6(1)(c))	Typically 10 years
Payments and chargeback management	Transaction identifiers and payment status (no full card data)	Contract (Art. 6(1)(b)) and/or legitimate interests (Art. 6(1)(f))	According to provider policies and applicable legal requirements
Marketing communications (newsletter)	Email, preferences, interaction data where enabled	Consent (Art. 6(1)(a))	Until you withdraw consent (typically reviewed at least every 24 months)
Cookies, analytics and advertising (where enabled)	Cookie IDs, device/browser data, events	Consent where required	See Cookie Policy

4) How we share your data (recipients)

We share personal data only when necessary to provide our services, comply with legal obligations, or protect our rights.

E-commerce and hosting providers (store platform, hosting, checkout and site functionality)
Payment providers (card payments, digital wallets, PayPal or similar services)
Fulfillment, production and logistics providers (order preparation, shipping, delivery and tracking)
Customer support and communications providers (email and support tools)
Security and performance providers (e.g., CDN, anti-bot, fraud and abuse prevention)
Analytics and advertising partners (only where enabled and, when required, only after consent)
Professional advisors and authorities (accountant, legal advisors, competent authorities where required)

5) International transfers

Some of our service providers may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards under GDPR (Arts. 44+), such as adequacy decisions (where applicable), Standard Contractual Clauses and, where needed, supplementary measures.

6) Cookies and preference management

We use cookies and similar technologies. For details (types, purposes, duration and third parties), please read our Cookie Policy. You can change your choices at any time using the Cookie settings link on the site.

7) Your rights

Where GDPR applies, you can request: access, rectification, erasure, restriction, portability, and object to processing. Where processing is based on consent, you can withdraw it at any time (this does not affect processing carried out before withdrawal).

To exercise your rights, contact: support@wheelycooltees.com

You can also lodge a complaint with the supervisory authority in your country of residence, workplace, or where an alleged infringement occurred. In Italy, this is the Garante per la protezione dei dati personali.

8) Children

This website is not intended for children. If you are under the minimum age required to provide valid consent for data processing in your country, you should not submit personal data without involvement of a parent or guardian.

9) Marketing emails (UK/US/Canada note)

If you subscribe to marketing emails, you can unsubscribe at any time using the link in each message. We apply country-specific requirements where applicable (e.g., stricter consent rules for recipients in Canada).