Privacy Policy
Last Updated: August 13, 2025
1) Scope & Who We Are
This Privacy Policy explains how Mateo Moretti (“we,” “us,” “our”) collects, uses, discloses, and protects personal information when you visit our website, place an order, or interact with our services (together, the “Services”). By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.
Contact: info@mateomoretti.com
2) Personal Information We Collect
We collect the following categories of personal information (examples are illustrative):
Identifiers & Contact Data: name, email, phone number, billing/shipping address, account login.
Commercial Data: products viewed, cart items, order history, returns.
Payment Data: payment method details (processed by third-party gateways; we do not store full card numbers).
Device/Internet Activity: IP address, device/browser type, pages viewed, timestamps, referring URLs, and interactions (via cookies, pixels, SDKs, and similar tech).
Approximate Geolocation: derived from IP for fraud prevention, localization, and analytics.
User Content (optional): reviews, support inquiries, and any information you voluntarily provide.
Inferences (limited): preferences or interests derived from browsing or purchase behavior to improve our offerings.
Sensitive Personal Information: we do not intentionally collect sensitive data (e.g., precise geolocation, government IDs) via our store.
Sources: directly from you; automatically via cookies/pixels; from our service providers (e.g., payment, fulfillment); and, where permitted, advertising/analytics partners.
3) Cookies, Analytics & Ads
We use cookies and similar technologies to operate the site (e.g., remember cart), measure performance (e.g., Google Analytics), and deliver/measure ads (e.g., Meta Pixel/Google Ads). See our Cookie Policy for details and choices. You can adjust your browser settings to block cookies; some features may not work correctly if disabled.
Global Privacy Control (GPC): where required by law, we honor browser-based opt-out signals (e.g., GPC) for “sale/share” or targeted advertising.
4) How We Use Personal Information
We use information to:
Process orders and provide the Services (fulfillment, shipping, confirmations).
Customer support (returns, inquiries, warranty).
Improve and secure our site (debugging, analytics, fraud prevention).
Marketing (email/newsletters if you opt in; you can unsubscribe anytime).
Legal compliance (tax, accounting, lawful requests) and to enforce our Terms.
5) How We Disclose Personal Information
We do not sell personal information for money. We may “share” certain device/internet data with advertising partners for cross-context behavioral advertising (as defined under California law), unless you opt out.
We disclose data to these categories of third parties:
Service Providers/Processors: payment gateways, e-commerce platform/hosting, fulfillment & carriers, email/SMS and customer support tools, analytics/anti-fraud. They may only use data to perform services for us and must protect it.
Advertising/Analytics Partners: to measure and improve ads; this may be considered “sharing” under CPRA.
Legal/Compliance: to comply with law, respond to lawful requests, or protect rights/safety.
Business Transfers: as part of a merger, acquisition, or asset sale, consistent with this Policy.
6) Retention
We keep personal information only as long as necessary for the purposes above or as required by law. Typical periods:
Orders, invoices, and warranty records: up to 7 years (tax/accounting).
Support tickets: up to 3 years from last interaction.
Marketing preferences & email lists: until you unsubscribe or after 24 months of inactivity.
Web analytics logs: up to 26 months (or shorter if configured).
When data is no longer needed, we delete or de-identify it.
7) Security
We use administrative, technical, and physical safeguards to protect personal information (e.g., TLS encryption in transit; access controls; PCI-DSS compliant payment processors). No method is 100% secure; please keep your account credentials confidential and contact us if you suspect unauthorized activity.
8) Your Rights & Choices
A) Everyone
Access/Portability: request a copy of your personal information.
Correction: ask us to fix inaccurate information.
Deletion: request deletion where applicable (we may retain data as required by law or to complete transactions).
Marketing Opt-Out: unsubscribe from emails via the link in any message or by contacting us. Transactional emails (order, shipping) will still be sent.
Cookie Choices: manage in your browser and via our Cookie Policy preferences.
B) U.S. State Privacy Rights (CA/CO/CT/UT/VA and similar)
Depending on your state, you may have rights to know/access, correct, delete, opt out of sale/share/targeted advertising, and non-discrimination for exercising rights. We do not use sensitive personal information for inferring characteristics, and we do not knowingly sell personal information.
Opt-out of sale/share/targeted ads: email info@mateomoretti.com with “Privacy Opt-Out,” use available cookie controls, or send a GPC signal (which we honor where required).
Authorized agent: you may use an agent; we may need to verify your identity and the agent’s authority.
Verification: to protect your data, we may request information to verify your identity before responding.
Appeal: if we deny your request, you may appeal by replying to our decision email; we will review and respond as required by applicable law.
C) California Notice at Collection (CPRA Summary)
We collect the categories listed in Section 2 for the purposes in Section 4, retain them as in Section 6, and disclose them as in Section 5. We do not sell personal information for money. We may share Identifiers and Internet/Device data with advertising partners for cross-context behavioral advertising unless you opt out. We do not knowingly collect or share the personal information of consumers under 16 for such purposes.
9) International Users (EEA/UK)
If you are in the EEA/UK, we process your personal data under these legal bases:
Contract: to process your orders and provide the Services.
Legitimate interests: to improve the site, prevent fraud, and market similar products (balanced against your rights).
Consent: for certain cookies/marketing (you can withdraw at any time).
Legal obligation: tax/accounting and compliance.
Transfers outside EEA/UK: When we transfer personal data to countries without an adequacy decision (e.g., U.S.), we use appropriate safeguards such as Standard Contractual Clauses (SCCs) with our processors. You have rights under GDPR, including access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with your local supervisory authority.
Contact for EEA/UK privacy matters: info@mateomoretti.com
10) Children’s Privacy
Our Services are not directed to children under 13 (or higher age where required by local law). We do not knowingly collect personal information from children. If you believe a child provided information, contact us and we will delete it.
11) Do Not Track (DNT) & GPC
We currently do not respond to DNT signals due to industry variability. Where required by law, we honor Global Privacy Control (GPC) signals as an opt-out of “sale/share” or targeted advertising.
12) De-Identified Data
We may create and use de-identified or aggregated data for analytics, research, and improvement, and we will not attempt to re-identify such data.
13) Changes to This Policy
We may update this Policy from time to time. For material changes, we will provide prominent notice (e.g., banner or email) before they take effect. The “Last Updated” date shows the latest version. Your continued use after the effective date means you accept the changes.
14) Contact Us
For questions, requests (access, deletion, correction, opt-out), or appeals, contact:
info@mateomoretti.com
