Privacy Policy

1. Data controller

The data controller is EMYRA LTD, a company registered in the United Kingdom, reachable at supporto@emyra.store.

2. Personal data processed

We process the data you provide directly through the Site’s forms:

• Order form: first name, last name, shipping address (street, number, postal code, city, country), phone number, email address, selected product and size.
• Contact form: name, email address, message content.
• Browsing data: technical data strictly necessary for the operation of the site (see the Cookie Policy).

3. Purposes and legal basis

• Order management(registration, contact for availability confirmation, payment and shipping) — legal basis: performance of pre-contractual measures taken at the data subject’s request (art. 6.1.b GDPR).
• Replying to requests sent through the contact form — legal basis: legitimate interest in responding (art. 6.1.f GDPR).
• Legal obligations (tax, accounting) — legal basis: legal obligation (art. 6.1.c GDPR).

Providing the data marked as mandatory is necessary to manage the order: without it, we will not be able to register it. We do not carry out profiling or automated marketing.

4. Processing methods and recipients

Data are processed with electronic tools and appropriate security measures. They may be accessed by authorised persons and suppliers acting as processors under art. 28 GDPR, including: hosting and cloud infrastructure providers (including the Supabase database service), couriers for delivery and payment service providers (when active). Data are not disseminated or sold to third parties for commercial purposes.

5. Transfers outside the EU

Some suppliers may process data outside the European Economic Area: in that case the transfer takes place on the basis of adequacy decisions or the standard contractual clauses approved by the European Commission (art. 45–46 GDPR).

6. Retention

• Order data: until the order is completed (or cancelled) and in any case no longer than 24 months from collection, subject to legal obligations.
• Accounting and tax data (completed orders): 10 years, as required by law.
• Contact form requests: up to 12 months from the reply.

7. Data subject rights

Under art. 15–22 GDPR you have the right to access your data, rectify it, erase it, restrict processing, data portability and to object to processing. You can exercise your rights by writing to supporto@emyra.store. You also have the right to lodge a complaint with your supervisory authority (for the Netherlands, the Autoriteit Persoonsgegevens; for Italy, the Garante per la Protezione dei Dati Personali).

8. Minors

The Site is not intended for minors under 14 and we do not knowingly collect data from minors.

9. Updates

This notice may be updated: the current version is always published on this page.

Last updated: July 2026.