Privacy Policy
GDPR ยท Last updated: June 2026
Data controller
Elevate Shop is the data controller for personal data collected through this website. Contact: support@elevate-shop.store.
Data we collect
- Account data: email, display name, password hash.
- Order data: name, shipping address, items purchased, payment status.
- Technical data: IP, browser, device, anonymous analytics.
Purpose & legal basis
We process data to fulfil contracts (orders), comply with legal obligations (invoicing), and for legitimate interest (fraud prevention, site improvement).
Processors
Stripe (payments), Supabase / Lovable Cloud (database & auth), Cloudflare (hosting). Data may be transferred outside the EEA under SCCs.
Retention
Order data is retained for 10 years for accounting law. Account data is retained until you request deletion.
Your rights
Access, rectification, erasure, restriction, portability, objection. Email support@elevate-shop.store to exercise them. You may lodge a complaint with the Italian Data Protection Authority (Garante).
Cookies
See our Cookie Policy.