Privacy Policy

GDPR ยท Last updated: June 2026

Data controller

Elevate Shop is the data controller for personal data collected through this website. Contact: support@elevate-shop.store.

Data we collect

  • Account data: email, display name, password hash.
  • Order data: name, shipping address, items purchased, payment status.
  • Technical data: IP, browser, device, anonymous analytics.

Purpose & legal basis

We process data to fulfil contracts (orders), comply with legal obligations (invoicing), and for legitimate interest (fraud prevention, site improvement).

Processors

Stripe (payments), Supabase / Lovable Cloud (database & auth), Cloudflare (hosting). Data may be transferred outside the EEA under SCCs.

Retention

Order data is retained for 10 years for accounting law. Account data is retained until you request deletion.

Your rights

Access, rectification, erasure, restriction, portability, objection. Email support@elevate-shop.store to exercise them. You may lodge a complaint with the Italian Data Protection Authority (Garante).

Cookies

See our Cookie Policy.