Last updated: 14 October 2026
Intrinsya ("Intrinsya", "we", "us" or "our") operates this website and online store, including all related content, features, products and services (collectively, the "Services").
This Privacy & Cookie Policy explains how we collect, use, disclose, store and protect personal data when you visit our website, use our Services, purchase our products, contact us or otherwise interact with Intrinsya.
It also explains how we use cookies and similar technologies on our website and how you can manage your preferences.
For the purposes of applicable data protection legislation, including the EU General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Italian data protection laws, Intrinsya is the data controller of your personal data.
1. Data Controller
Intrinsya di Fabio Casamento
Via A. Portaluppi 10, Milan, Italy
VAT no.: 14481590967
REA: MI-2789798
Certified email (PEC): f.casamento@postecertifica.it
Email: info@intrinsya.com
No Data Protection Officer (DPO) has been appointed, as the legal conditions requiring one are not met.
If you have any questions about this Privacy & Cookie Policy or the processing of your personal data, you can contact us at info@intrinsya.com or through our contact form.
2. Personal Data We Collect
Depending on how you interact with our Services, we may collect the following categories of personal data.
Information you provide directly
- name and surname;
- billing and shipping address;
- email address;
- telephone number, where you choose to provide one;
- account credentials, where you create an account;
- order and purchase information;
- information necessary to process returns, refunds and customer service requests;
- information provided when contacting customer service;
- information you provide when submitting reviews or other content;
- preferences you provide when subscribing to our marketing communications.
Providing a telephone number is optional: it is used solely to facilitate delivery and is not required to complete an order.
Information collected automatically
When you visit or use our website, certain technical information may be collected automatically, including:
- IP address;
- browser type and version;
- device type;
- operating system;
- language and other technical information;
- pages visited and interactions with the website;
- referring website;
- information concerning your use of our website;
- information relating to the functioning, security and performance of the Services.
Some of this information may be collected through cookies and similar technologies, as described in Section 8 of this Policy.
Payment information
Payments are processed through the payment methods made available during checkout.
Depending on the payment method selected, payment information may be processed directly by the relevant payment service provider.
Your full payment card details do not pass through and are not stored on our systems: they are processed directly by the payment service provider in a secure, certified environment. We receive only the outcome of the transaction and certain minimal identifying details (such as the last four digits and the card type) necessary to manage your order and any refunds.
3. How We Collect Personal Data
We may collect personal data:
- directly from you when you place an order, create an account, contact us or otherwise provide information;
- automatically when you browse or interact with our website;
- through Shopify and other service providers that process information on our behalf;
- through third parties where this is necessary to provide our Services or where permitted by law.
4. How We Use Your Personal Data
We process personal data only where there is a valid legal basis under applicable data protection law.
Orders and purchases
We use your personal data to:
- process and fulfil your orders;
- process payments;
- arrange delivery;
- communicate with you regarding your order;
- manage returns, refunds and exchanges;
- provide customer support;
- manage your customer account, where applicable.
Legal basis: performance of a contract or steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Certain information is necessary to process and fulfil your order. If you do not provide the required information, we may be unable to process your purchase.
Customer service
We process information contained in communications with us in order to respond to your enquiries, provide assistance and manage our relationship with you.
Legal basis: performance of a contract where applicable (Art. 6(1)(b)) and our legitimate interest in providing customer support and managing our business (Art. 6(1)(f)).
Legal and accounting obligations
We may process personal data where necessary to comply with legal, tax, accounting and regulatory obligations, including obligations relating to purchases, invoices and financial records.
Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
Security and fraud prevention
We may process technical, account, transaction and other relevant information to protect our website and customers, prevent fraud, detect security incidents and investigate potentially unlawful activity.
Legal basis: our legitimate interest in protecting our business, Services and customers (Art. 6(1)(f)), and where applicable compliance with legal obligations.
Marketing communications
If you subscribe to our marketing communications, we may use your email address to send you information about Intrinsya, including new creations, products, events, news and promotional communications.
Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 130 of Italian Legislative Decree 196/2003).
We keep a record of the consent given (date, time and method of collection) in order to demonstrate that it was obtained, as required by Art. 7(1) GDPR.
You may withdraw your consent at any time by using the unsubscribe link included in our marketing emails or by contacting us at info@intrinsya.com.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Transactional communications, such as order confirmations, shipping notifications and information relating to purchases, are not marketing communications and may still be sent where necessary to fulfil our contractual obligations.
Website analytics and advertising
We use Shopify's built-in analytics tools and, where required, with the user's prior consent, the TikTok Pixel to measure advertising campaign performance, understand interactions with our website, and improve advertising measurement and optimisation.
The TikTok Pixel may collect and transmit to TikTok information relating to website browsing and interactions, such as pages visited, product and purchase-related events, technical information about the device, and online identifiers. The data actually collected depends on the features used and the configuration implemented.
Non-essential tracking technologies are activated only after obtaining the consent required by applicable law.
Legal basis: the data subject's consent, pursuant to Article 6(1)(a) GDPR and Article 122 of Italian Legislative Decree No. 196/2003, where applicable. Consent may be withdrawn at any time through the “Cookie Preferences” link in the website footer.
5. Shopify and Other Service Providers
Our online store is powered by Shopify, which provides the e-commerce platform through which we offer our products and Services.
Shopify may process personal data relating to your use of our store, including information necessary to provide services such as hosting, checkout, payment processing, security, fraud prevention, analytics necessary for the operation of the Shopify platform and other e-commerce functionality.
Shopify may also process certain information independently for its own purposes, in accordance with its own privacy policy.
Our store may also use Shopify applications that provide specific functionality, including Shopify Translate & Adapt, and Shopify Messaging. These services may process personal data where necessary to provide their respective functions.
For more information about how Shopify processes personal data, please consult Shopify's Consumer Privacy Policy.
Where applicable, certain privacy rights relating to data processed directly by Shopify may also be managed through Shopify's Privacy Portal.
6. Who We Share Personal Data With
We may disclose personal data to third parties where necessary to operate our business and provide the Services. Recipients fall into two categories depending on the role they play.
Processors
The following parties process personal data solely on our behalf and on our documented instructions, under an agreement pursuant to Art. 28 GDPR:
- Shopify, as our e-commerce platform provider;
- IT, hosting and cloud service providers;
- customer service and communication providers;
- providers of website security and fraud prevention services;
- providers of specific functionality integrated into our Shopify store.
Independent controllers
The following parties independently determine the purposes and means of processing in order to comply with their own legal obligations or to provide their own services, and are directly accountable to you under their respective privacy notices:
- payment service providers, for executing transactions and for their own anti-money-laundering and anti-fraud obligations;
- carriers and shipping providers, for carrying out the delivery and for customs formalities;
- accounting, tax and legal advisers, within the scope of their professional and regulatory obligations;
- Shop Pay (Shopify), where you choose to save your details for a faster checkout: in that case Shopify creates a Shop account and processes your data as an independent controller, under its own terms and privacy policy.
Shopify appears in both lists: it acts as a processor for the operation of our store, and as an independent controller for its own services, such as Shop Pay.
Other disclosures
We may also disclose personal data:
- where required by law or by a competent authority;
- where necessary to establish, exercise or defend legal claims;
- in connection with a merger, acquisition, restructuring or sale of all or part of our business;
- where necessary to protect our rights, property, security or the security of our customers and Services.
We do not sell your personal data.
TikTok
When the TikTok Pixel is active on the basis of the user's consent, where required, certain data relating to website browsing and interactions may be disclosed to TikTok to measure advertising campaign performance and optimise advertisements.
Processing carried out by TikTok for its own purposes is also governed by TikTok's Privacy Policy, available on the provider's official website.
TikTok's role and that of any other parties involved in the processing depend on the features actually used and the applicable agreements.
7. International Data Transfers
Some of our service providers, including Shopify, may process personal data outside the European Economic Area ("EEA").
The Shopify group comprises companies established in several countries, including Ireland, Canada and the United States, and may rely on sub-processors located outside the EEA.
Where personal data is transferred outside the EEA, the transfer takes place on the basis of one of the legal mechanisms provided for in Chapter V of the GDPR, including:
- an adequacy decision adopted by the European Commission;
- the European Commission's Standard Contractual Clauses, supplemented where necessary by additional measures;
- another lawful transfer mechanism recognised under applicable data protection law.
The documentation relating to transfers carried out by Shopify, including the Standard Contractual Clauses and the up-to-date list of sub-processors, is published and available directly in Shopify's privacy notice and legal documentation, at the links indicated in Section 5.
Third-party advertising services, including TikTok where applicable, may involve the transfer of personal data or access to personal data from countries outside the European Economic Area. Where such transfers occur, the mechanisms provided for under Chapter V GDPR are used. Information about applicable safeguards may be requested from Intrinsya using the contact details provided in Section 1.
8. Cookies and Similar Technologies
Our website uses cookies and similar technologies to operate the online store, provide requested functionality, maintain security, remember preferences and support the functioning of Shopify and its services.
Cookies are small text files or similar identifiers that may be stored on your device when you visit a website.
Strictly necessary cookies (no consent required)
These are used where necessary to:
- operate the website and online store;
- maintain shopping cart and checkout functionality;
- authenticate users where applicable;
- maintain security;
- prevent fraudulent activity;
- remember technical preferences necessary for the operation of the website;
- provide services explicitly requested by you;
- store your cookie choices.
These technologies are necessary for the operation of the Services and fall within the exemption provided by Art. 122 of Italian Legislative Decree 196/2003: without them you would not be able to complete a purchase.
| Cookie | Purpose | Duration |
|---|---|---|
| _secure_session_id | Browsing session management | 24 hours |
| cart, cart_ts, cart_ver | Cart contents and status | 2 weeks |
| checkout_token | Links the session to the checkout | 1 year |
| secure_customer_sig | Customer account authentication | 1 year |
| localization | Stores the selected language and country | 1 year |
| keep_alive | Session continuity across devices | 2 weeks |
| _tracking_consent, _cmp_a | Stores your cookie preferences | 1 year |
Analytics cookies (consent required)
Non-essential technologies used on this website may include Shopify analytics cookies and advertising tracking technologies, including the TikTok Pixel. These technologies are activated only after the consent required by applicable law has been obtained and may be rejected without preventing users from browsing or purchasing from the website.
| Cookie | Purpose | Duration |
|---|---|---|
| _shopify_y | Visitor identifier for Shopify's built-in store statistics | 1 year |
| _shopify_s | Session identifier for Shopify's built-in store statistics | 30 minutes |
A detailed and continuously updated list of the cookies used by the platform is available in Shopify's privacy documentation.
Profiling and advertising cookies
This website may use third-party advertising tracking technologies, including the TikTok Pixel, to measure conversions and optimise advertising campaigns. These technologies are activated only after the consent required by applicable law has been obtained. You may reject these technologies or withdraw your consent at any time through the “Cookie Preferences” link in the website footer.
Variability of cookies
Because our store is operated using Shopify, Shopify and services integrated into the Shopify platform may place or access cookies and similar identifiers necessary for the operation, security and functionality of the store.
The specific cookies and technologies may vary depending on the functions used, the device and browser, the customer's interaction with the store and changes to Shopify's platform. For this reason, the cookie information associated with our store may be updated from time to time.
Cookie consent
Where applicable law requires consent for non-essential cookies or similar tracking technologies, these technologies will not be activated until the required consent has been obtained.
On your first visit you are shown a banner allowing you to accept or refuse non-essential cookies.
You may change or withdraw your preferences at any time via the "Cookie preferences" link available in the footer of every page of the website.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
You can also manage or delete cookies through your browser settings. Disabling strictly necessary cookies may prevent the store from working correctly.
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy or as required or permitted by applicable law.
The retention period depends on the nature of the information and the purpose for which it was collected. For example:
- order, invoice and transaction data: 10 years from the end of the relevant tax year (Art. 2220 Italian Civil Code and applicable tax legislation);
- customer account data: for the duration of the account and 24 months after its closure;
- customer service correspondence: 24 months from the last contact;
- marketing data: until you withdraw consent or unsubscribe, and in any event no longer than 24 months from your last interaction;
- cookie consent records: 12 months;
- security and access logs: 6 months.
When personal data is no longer required, we will delete it or anonymise it, unless we are legally required or otherwise permitted to retain it.
10. Data Security
We implement appropriate technical and organisational measures, in accordance with Art. 32 GDPR, to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, that data.
These measures include, among others: encryption of communications via HTTPS/TLS across all pages of the website; access to data restricted to authorised persons on a least-privilege basis; authentication of administrative access; the use of providers offering adequate security standards and recognised certifications; and the processing of payment data in a PCI DSS-compliant environment by our payment service providers.
No system can guarantee absolute security. In the event of a personal data breach involving a high risk to your rights and freedoms, we will carry out the notifications required by Arts. 33 and 34 GDPR.
11. Your Rights
Under applicable data protection law, including the GDPR, you may have the following rights in relation to your personal data:
- Right of access — to obtain confirmation as to whether we process your personal data and, where applicable, access to that data;
- Right to rectification — to request correction of inaccurate or incomplete personal data;
- Right to erasure — to request deletion of your personal data where the legal requirements are met;
- Right to restriction — to request that we restrict the processing of your personal data in certain circumstances;
- Right to data portability — to receive certain personal data in a structured, commonly used and machine-readable format and, where technically feasible and legally applicable, have it transmitted to another controller;
- Right to object — to object to certain processing based on our legitimate interests and, in particular, to object at any time to processing for direct marketing purposes;
- Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
You can exercise your rights by contacting us at info@intrinsya.com or through our contact form.
We may need to verify your identity before fulfilling certain requests in order to protect your personal data and prevent unauthorised access.
We respond to requests without undue delay and in any event within one month of receipt. This period may be extended by a further two months where requests are particularly complex or numerous, in which case we will inform you with reasons within the first month. Exercising your rights is free of charge, except in the case of manifestly unfounded or excessive requests.
12. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent data protection supervisory authority.
In Italy, the competent supervisory authority is:
Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Rome, Italy
Switchboard: +39 06 696771
Email: garante@gpdp.it — Certified email: protocollo@pec.gpdp.it
Website: www.garanteprivacy.it
You may also lodge a complaint with the supervisory authority of the EU Member State where you normally reside, work, or where the alleged infringement took place.
13. Children's Privacy
Our Services are intended for adults and are not directed to children.
Purchases through our online store may only be made by persons with the legal capacity to contract under applicable law.
Under Art. 8 GDPR and Art. 2-quinquies of Italian Legislative Decree 196/2003, in Italy a child who has reached the age of 14 may validly give consent to the processing of their data in relation to information society services. Below that age, processing is lawful only if and to the extent that consent is given by the holder of parental responsibility.
We do not knowingly collect personal data from children in breach of applicable law.
If you believe that a child has provided us with personal data, please contact us at info@intrinsya.com so that we can take appropriate action.
14. Third-Party Websites
Our Services may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices, security or content of third-party websites.
We recommend reviewing the privacy policies of those websites before providing them with personal data.
15. Automated Decision-Making and Profiling
We do not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.
Intrinsya does not carry out behavioural profiling. The analytics described in Section 4 produce aggregated statistical information only and are not used to build individual profiles.
If this changes, we will update this Policy and comply with any applicable legal requirements.
16. Changes to This Privacy & Cookie Policy
We may update this Privacy & Cookie Policy from time to time to reflect changes to our Services, data processing practices, cookies and similar technologies, or applicable legal requirements.
When we make changes, we will update the "Last updated" date at the top of this Policy.
Where required by law, we will provide additional notice of material changes.
17. Contact Us
If you have any questions regarding these Policy, your order or our products, please contact us through our contact form.