Privacy Policy

Last updated: 19 October 2026

This Privacy Policy explains how XIN SHI 88 SRL collects, uses and protects the personal data of visitors and customers of shopdelvo.com. It is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the applicable national data protection laws.

1. Data controller

The data controller is XIN SHI 88 SRL, VIA CASILINA 1674, 00133 ROMA, Italia. Email: info@shopdelvo.com. We have not appointed a Data Protection Officer; you can contact us about any privacy matter at the email address above.

2. Personal data we collect

• Order data you provide in the order form: first and last name, telephone number, delivery address and, where requested, email address.
• Communication data: the content of emails, contact-form messages and telephone conversations with our customer service, including order confirmation calls.
• Refund data: the bank account details (IBAN) you provide to receive a refund.
• Technical and browsing data: IP address, browser and device type, pages visited, date and time of access, and the advertising campaign that brought you to the website (e.g. UTM parameters and click identifiers such as gclid).
• Cookie and similar technology data, as described in our Cookie Policy.

We do not knowingly collect data from children under 16, and we do not process special categories of personal data.

3. Purposes and legal bases

• Processing and delivering your order, including the order confirmation call, shipping, cash-on-delivery collection and customer service — performance of a contract (Art. 6(1)(b) GDPR).
• Handling withdrawals, returns, refunds and legal guarantee claims — performance of a contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR).
• Accounting, tax and other legal obligations — compliance with legal obligations (Art. 6(1)(c) GDPR).
• Website security, fraud prevention and the defence of legal claims — our legitimate interests (Art. 6(1)(f) GDPR).
• Advertising measurement and remarketing through Google Ads and the Meta Pixel — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Providing your order data is necessary to conclude and perform the contract: without it we cannot process your order. Providing consent for marketing cookies is optional.

4. Recipients of the data

Your data is accessed only by authorised staff and is shared, to the extent necessary, with:

• order-management, call-centre and customer-service partners that process orders on our behalf;
• courier and logistics companies that deliver your order and collect the cash-on-delivery payment;
• IT, hosting and email service providers;
• banks and payment service providers, for refunds;
• accountants, legal advisers and public authorities, where required by law;
• Google Ireland Limited and Meta Platforms Ireland Limited, only if you consent to marketing cookies.

Service providers acting on our behalf are appointed as data processors under Art. 28 GDPR. We never sell your personal data.

5. Transfers outside the European Economic Area

Some providers (e.g. Google and Meta) may process data in the United States or other non-EEA countries. Such transfers take place only on the basis of an adequacy decision of the European Commission — including the EU-U.S. Data Privacy Framework for certified companies — or of the Standard Contractual Clauses approved by the European Commission (Art. 45 and 46 GDPR). You may request a copy of the applicable safeguards by writing to us.

6. Retention periods

• Order, invoicing and accounting data: 10 years, as required by Italian tax and civil law (Art. 2220 of the Italian Civil Code).
• Customer-service correspondence and refund data: for the time needed to handle your request and, afterwards, until the applicable limitation period expires (generally up to 26 months after delivery for legal guarantee claims).
• Data from orders that are not confirmed or not completed: up to 12 months.
• Technical logs: up to 12 months, unless needed to investigate a security incident.
• Cookies and similar technologies: for the periods indicated in the Cookie Policy.

7. Your rights

Under Articles 15–22 GDPR you have the right to:

• access your personal data and obtain a copy of it;
• have inaccurate data rectified;
• have your data erased, where the legal conditions are met;
• restrict the processing;
• receive your data in a structured, commonly used and machine-readable format (data portability);
• object at any time to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to info@shopdelvo.com. We will reply without undue delay and in any case within one month. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence or place of work, or with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. Automated decision-making

We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

9. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encrypted HTTPS connections and access restricted to authorised personnel.

10. Changes to this Privacy Policy

We may update this Privacy Policy to reflect legal or operational changes. The current version is always published on this page with its update date.

11. Contact

For any question about this Privacy Policy: info@shopdelvo.com — XIN SHI 88 SRL, VIA CASILINA 1674, 00133 ROMA, Italia.