Privacy Policy — Evelyn Empire

1. Data Controller

The data controller responsible for your personal information is:
Evelyn Beauty Center
Via Bologna, 104 · 80142 Napoli NA · Italy
Email: Evelynbeautycenter1@gmail.com
Phone: +39 329 586 2208

2. Data We Collect

Account data: name, email address, password (hashed by Firebase Auth)
Order data: shipping address, items purchased, order total, order status
Payment data: processed exclusively by Stripe — we never see or store card numbers
Booking data: name, email, phone number, service requested, date and time, notes
Newsletter: email address and subscription timestamp
Usage data: page views, browser type, IP address (collected by Vercel Analytics)

3. How We Use Your Data

Process and fulfil your orders and bookings
Send order and booking confirmation emails
Send newsletter updates (only if you subscribed)
Improve and personalise your experience on the site
Comply with legal obligations under Italian and EU law

4. Legal Basis (GDPR Art. 6)

Contract performance: order processing, booking management
Legitimate interest: site security, fraud prevention, analytics
Consent: newsletter subscriptions, optional cookies

5. Third-Party Services

We use the following trusted processors, each bound by their own privacy policies:

Firebase (Google LLC) — authentication and database
Stripe Inc. — payment processing
Cloudinary Inc. — product image hosting
Resend Inc. — transactional emails
Vercel Inc. — website hosting and edge delivery

6. Data Retention

We retain your account and order data for as long as your account is active or as required by Italian tax law (typically 10 years for fiscal records). Newsletter subscriptions are kept until you unsubscribe. Booking data is kept for 2 years.

7. Your Rights

Under the GDPR and the Italian Privacy Code (D.Lgs. 196/2003 as amended), you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Request erasure ("right to be forgotten")
Restrict or object to processing
Data portability
Withdraw consent at any time (e.g. unsubscribe from newsletter)

To exercise any of these rights, email us at Evelynbeautycenter1@gmail.com. We will respond within 30 days.

8. Cookies

We use the following types of cookies:

Strictly necessary: Firebase Auth session cookies (keep you signed in)
Functional: shopping cart persistence, user preferences
Payment: Stripe cookies required to process transactions securely

You can accept or decline non-essential cookies via the banner shown on your first visit. Strictly necessary cookies cannot be disabled as our site cannot function without them.

9. International Transfers

Some of our processors (Firebase, Stripe, Vercel, Resend) operate servers in the United States. Transfers are covered by standard contractual clauses (SCCs) as approved by the European Commission.

10. Complaints

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Italian data protection authority: Garante per la Protezione dei Dati Personali (garanteprivacy.it).

11. Governing Law

This policy is governed by Italian law and the EU General Data Protection Regulation (GDPR — Regulation 2016/679).