Shop Collection

PRIVACY POLICY

Last updated: 5 November 2026

1. Data Controller

This Privacy Policy describes how personal data is collected, used, stored and protected when you visit or make a purchase through the Sorrisini website.

The website is operated under the Sorrisini brand by:

Data Controller: Naturif SRL
Registered office: VIA WOLFGANG AMADEUS MOZART 6 – 25080 – NUVOLERA (BS)
VAT Number / Tax Code: IT04443200987
Email: naturif@pec.it
Website: https://sorrisini.com

Naturif SRL acts as the Data Controller for the personal data processed through this website, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Italian data protection legislation.

2. Personal Data We Collect

When you visit or interact with our website, we may collect the following categories of personal data:

A. Information provided directly by you

  • First and last name.
  • Email address.
  • Telephone number.
  • Billing and shipping addresses.
  • Information provided when contacting customer support.
  • Information submitted through website forms.
  • Information provided when subscribing to our newsletter.

B. Order and transaction information

When you place an order, we collect information necessary to process and fulfil your purchase, including:

  • Products purchased and order details.
  • Billing and delivery information.
  • Order history and transaction references.
  • Payment status and related transaction information.

C. Technical and browsing information

When you access our website, certain technical information may be collected, including:

  • IP address.
  • Browser type and version.
  • Device and operating system information.
  • Pages visited and browsing activity.
  • Website interaction and traffic information.
  • Cookie identifiers and similar tracking technologies, subject to your consent where required.

We collect only the information necessary for the purposes described in this Privacy Policy.

3. How We Use Your Personal Data

We process personal data for the following purposes:

A. Order processing and fulfilment

To:

  • Process and confirm purchases.
  • Manage payments and transactions.
  • Prepare and ship orders.
  • Provide delivery updates.
  • Manage returns, refunds and exchanges.
  • Provide assistance relating to purchases.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR).

B. Customer support and communication

To respond to enquiries, provide assistance, manage complaints and communicate important information concerning orders or our services.

Legal basis: Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR), and, where applicable, legitimate interests (Article 6(1)(f) GDPR).

C. Accounting and legal obligations

To comply with applicable tax, accounting, consumer protection and other legal requirements.

Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR).

D. Website operation and security

To maintain website functionality, prevent fraudulent activities, protect our systems and improve the security and reliability of our services.

Legal basis: Legitimate interests (Article 6(1)(f) GDPR) and, where applicable, performance of a contract.

E. Website analytics and performance

To understand how visitors interact with our website, analyse traffic, measure website performance and improve the shopping experience.

We may use Google Analytics for these purposes, subject to the applicable cookie and consent requirements.

Legal basis: Consent where required by applicable cookie and privacy legislation.

F. Advertising and marketing

To measure advertising performance, understand campaign effectiveness and deliver relevant advertisements through services such as Google Ads and Meta Pixel.

These technologies may collect information about website visits and interactions for advertising measurement, audience creation and remarketing.

Such technologies will only be activated where the required consent has been obtained.

Legal basis: Consent (Article 6(1)(a) GDPR) where required.

G. Newsletter and promotional communications

If you subscribe to our newsletter, we may use your email address to send:

  • Product announcements.
  • New collection updates.
  • Special offers and promotions.
  • News and information about Sorrisini.

You can withdraw your consent and unsubscribe at any time using the unsubscribe link included in our emails.

Where permitted by applicable Italian law, we may also send promotional communications to existing customers concerning products similar to those previously purchased, subject to the applicable legal conditions and the right to object.

Legal basis: Consent (Article 6(1)(a) GDPR), or the applicable existing-customer exception under Italian law where its conditions are met.

4. Payments and Payment Providers

Sorrisini supports the following payment methods:

  • Credit and debit cards.
  • PayPal.
  • Bank transfers.

Payments are processed through the relevant payment service providers or financial institutions.

When paying by credit or debit card, payment information may be collected and processed directly by the relevant payment provider through its secure payment infrastructure.

For PayPal transactions, payment processing is subject to PayPal’s applicable privacy policy and terms.

For bank transfers, the information necessary to identify and reconcile the payment may be processed by Naturif SRL and its banking institutions.

Naturif SRL does not intentionally store full credit or debit card numbers or card security codes on its website servers.

Payment providers act in accordance with their respective legal obligations and contractual arrangements.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure proper functionality, analyse website usage and support marketing activities.

These technologies may include:

A. Strictly necessary cookies

These cookies are required for essential website functions, including:

  • Shopping cart functionality.
  • Checkout and order processing.
  • Session management.
  • Security and fraud prevention.
  • Remembering essential website preferences.

These cookies do not require prior consent where they are strictly necessary for the service requested.

B. Analytics cookies

We may use Google Analytics to understand website traffic, visitor behaviour and website performance.

These technologies are activated in accordance with applicable consent requirements.

C. Advertising and marketing cookies

We may use:

  • Google Ads tracking technologies.
  • Meta Pixel.
  • Other advertising and conversion measurement technologies.

These technologies may help us measure advertising effectiveness, create relevant audiences and display advertisements based on website interactions.

They will only be activated after the required consent has been obtained.

You can manage or withdraw your cookie preferences through the cookie settings available on our website.

For additional information about the cookies used, their purposes and retention periods, please refer to our separate Cookie Policy.

6. Newsletter and Email Communications

When subscribing to our newsletter, you provide your email address and, where applicable, other information requested through the subscription form.

Your information will be used to send promotional and informational communications from Sorrisini.

You may unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

We may use third-party email marketing platforms to manage subscriptions and deliver communications.

Where email tracking technologies, such as tracking pixels, are used, we will provide the required information and obtain the necessary consent before using them.

You may also be offered separate controls to manage email tracking preferences.

Unsubscribing from marketing communications does not affect transactional emails relating to purchases, payments, deliveries or customer support.

7. Sharing Personal Data with Third Parties

We may share personal data with trusted third-party service providers where necessary to operate our business and fulfil the purposes described in this Privacy Policy.

These may include:

  • Website hosting providers: To host and maintain our website.
  • WooCommerce and WordPress-related service providers: To support website and e-commerce functionality.
  • Payment providers: To process transactions, including card payments and PayPal.
  • Banks and financial institutions: To manage and reconcile bank transfers.
  • Courier and delivery companies: To deliver purchased products.
  • Google: To provide analytics, advertising and related services.
  • Meta: To provide advertising measurement and marketing services.
  • Email marketing providers: To manage newsletter subscriptions and communications.
  • Professional advisers: Such as accountants, lawyers and consultants.
  • Public authorities: Where disclosure is required by applicable law.

These parties may act as independent Data Controllers or as Data Processors on behalf of Naturif SRL, depending on the services provided and the applicable contractual arrangements.

We do not sell customers’ personal data to third parties.

8. International Data Transfers

Some of the third-party providers used by our website may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are implemented in accordance with applicable data protection legislation.

These safeguards may include:

  • An adequacy decision adopted by the European Commission.
  • Standard Contractual Clauses (SCCs).
  • Other legally recognised transfer mechanisms and supplementary measures where required.

Further information about international data transfers can be requested by contacting us.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

In particular:

Order and accounting information: Retained for the periods required by applicable tax and accounting legislation. Relevant accounting and tax records are generally subject to a ten-year retention period under Italian law.

Customer support communications: Retained for the period necessary to handle enquiries, resolve disputes and protect our legitimate interests.

Newsletter information: Retained until you withdraw your consent or unsubscribe, subject to any limited retention necessary to maintain suppression records and demonstrate compliance.

Analytics and advertising information: Retained according to the settings and retention policies of the relevant service providers and applicable consent requirements.

Technical and security information: Retained for the period necessary to ensure website security and prevent misuse.

10. Children’s Privacy

Sorrisini specialises in products intended for children. However, our website is primarily intended for adults, including parents, guardians and other individuals purchasing products for children.

Purchases should be made by adults.

We do not intentionally collect personal information directly from children or knowingly create marketing profiles of children.

If a parent or legal guardian believes that a child has provided personal information through our website, they may contact us using the details provided in this Privacy Policy.

We will assess the request and take appropriate action in accordance with applicable data protection legislation.

11. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure.

These measures may include:

  • Secure website connections (HTTPS).
  • Access controls and authentication.
  • Security updates and website maintenance.
  • Secure payment processing through external payment providers.
  • Appropriate data protection arrangements with service providers.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

12. Your Rights Under GDPR

Under applicable data protection legislation, you have the right to:

  • Access: Request confirmation of whether we process your personal data and obtain a copy.
  • Rectification: Request correction of inaccurate or incomplete information.
  • Erasure: Request deletion of personal data where the legal conditions are met.
  • Restriction: Request restriction of processing in certain circumstances.
  • Data portability: Receive certain personal data in a structured, commonly used and machine-readable format.
  • Objection: Object to processing based on legitimate interests and to direct marketing.
  • Withdraw consent: Withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

You can exercise these rights by contacting us at:

Email: contact@naturif.com

We will respond within the time limits established by applicable law, generally within one month of receiving your request.

You also have the right to lodge a complaint with the competent supervisory authority.

In Italy, this is the Garante per la Protezione dei Dati Personali:

https://www.garanteprivacy.it

13. Third-Party Websites and Embedded Content

Our website may contain links to external websites, services or embedded content, including videos, images and other materials provided by third parties.

When you interact with such content, the relevant third-party provider may collect information about you, use cookies or other tracking technologies and process your personal data in accordance with its own privacy policy.

We are not responsible for the privacy practices of external websites and recommend reviewing their respective privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business operations, website functionality, service providers or applicable legislation.

Any updates will be published on this page together with the revised update date.

We encourage visitors and customers to review this page periodically.

15. Contact Information

For questions, requests or concerns regarding this Privacy Policy or the processing of your personal data, please contact:

Naturif SRL – Sorrisini

Website: https://sorrisini.com

Email: contact@sorrisini.com