PRIVACY

1. Information We Collect

We collect personal information from you only when necessary to provide our services, process orders, and improve your experience.

a) Information you provide to us directly

When you visit our website, register an account, place an order, subscribe to our newsletter, or contact customer support, we may ask for:

• Name
• Billing and shipping address
• Email address
• Phone number
• Date of birth, if required for legal or marketing purposes
• Payment information, such as credit card details, PayPal, or another payment method

b) Information automatically collected

When you browse our store, we automatically receive:

• Your computer’s Internet Protocol (IP) address
• Browser type and version
• Operating system
• Referring and exit pages
• Clickstream data, such as pages viewed and time spent
• Device identifiers

c) Cookies and similar technologies

We use cookies to enhance your browsing experience, remember your preferences, and analyze site traffic. You can manage your cookie preferences through your browser settings. For more details, see Section 8 (Cookies).

2. How We Use Your Information

We use your personal information only for legitimate business purposes, including:

• Processing and fulfilling your orders, including payment, shipping, and returns
• Communicating with you about your order or customer service requests
• Sending you marketing communications only if you have given your explicit consent; you may opt out at any time
• Improving our website, products, and services, such as analytics and troubleshooting
• Preventing fraud and ensuring transaction security
• Complying with legal obligations, including tax and anti-fraud laws

3. Legal Basis for Processing (for GDPR purposes)

If you are located in the European Economic Area (EEA), we process your personal information based on one or more of the following legal grounds:

• Performance of a contract – to process your order and deliver products
• Consent – for marketing emails, cookies, and optional data collection
• Legitimate interests – to improve our services, prevent fraud, and analyze site usage
• Legal obligation – to comply with tax, accounting, or other laws

4. Consent and Withdrawal

How do you obtain my consent?

When you provide us with personal information to complete a transaction, verify your credit card, place an order, or arrange a delivery, we imply that you consent to our collecting and using that information for that specific purpose only.

If we ask for your personal information for a secondary reason, such as marketing, we will either ask you directly for your expressed consent or give you an opportunity to decline.

How can I withdraw my consent?

You may withdraw your consent at any time by contacting us at info@ondalentastudio.com or by clicking the “unsubscribe” link in any marketing email. Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

5. Sharing and Disclosure of Information

We do not sell, trade, or rent your personal information to third parties. However, we may share your information with trusted third parties only as necessary to operate our business:

• Service providers – payment gateways, including Shopify Payments, Stripe, and PayPal; shipping carriers; email marketing platforms; and analytics services, including Google Analytics. These parties are contractually bound to use your data only for the services they provide to us.
• Legal compliance – if required by law, court order, or to protect our rights, property, or safety, or that of our customers or others
• Business transfers – if ONDA LENTA is acquired or merged with another company, your information may be transferred to the new owners

All third-party service providers have their own privacy policies. We encourage you to read them.

6. Third-Party Services & Links

Our website may contain links to third-party websites or services, such as social media or product reviews. Once you leave our site, you are no longer governed by this Privacy Policy. We are not responsible for the privacy practices of other sites and recommend that you read their privacy policies.

Payment processing

If you choose a direct payment gateway to complete your purchase, your credit card data is encrypted and stored only as long as necessary to complete the transaction. All direct payment gateways comply with PCI-DSS standards.

Analytics

We use Google Analytics to better understand how visitors use our site. Google may collect your IP address and browsing behavior. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

7. Data Security

We take reasonable precautions and follow industry best practices to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.

• All sensitive and credit information you supply is encrypted via Secure Socket Layer (SSL) technology
• Payment data is stored in compliance with PCI-DSS requirements
• While no method of transmission over the Internet is 100% secure, we implement additional generally accepted security measures, including firewalls, encryption at rest, and limited access

If we become aware of a data breach affecting your information, we will notify you and applicable authorities as required by law.

8. Cookies

We use cookies to improve your browsing experience. Below is a list of the main cookies we use. You can choose to disable cookies in your browser settings, but some features of our site may not function properly.

Swipe or scroll horizontally to view the complete table.

You can manage cookies through your browser settings, including Chrome, Firefox, Safari, and Edge. For detailed instructions, visit your browser’s help section.

9. Your Rights (Access, Correction, Deletion, Portability)

Depending on your location, including the EEA, UK, or California, you may have the following rights regarding your personal information:

• Access – request a copy of the personal data we hold about you
• Rectification – correct inaccurate or incomplete data
• Erasure – request deletion of your data, subject to legal retention obligations
• Restriction – limit how we use your data
• Portability – receive your data in a structured, machine-readable format
• Objection – object to processing based on legitimate interests or direct marketing

To exercise any of these rights, please contact us at info@ondalentastudio.com. We will respond within 30 days, or as otherwise required by law. We may need to verify your identity before processing your request.

For California residents

Under the CCPA, you have the right to know what personal information we collect, request deletion, and opt out of “sales” of personal information. We do not sell your data. You may also request information about the categories of data shared for cross-context behavioral advertising, if applicable. Please contact us using the details below.

10. Age of Consent

By using our website, you represent that you are at least the age of majority in your state or province of residence, or that you have given us your consent to allow any of your minor dependents to use this site. We do not knowingly collect personal information from children under 13, or under 16 in the EEA. If you believe we have inadvertently collected such data, please contact us to delete it.

11. International Data Transfers

Our website is hosted on servers located in [e.g., United States / EU]. If you are accessing our site from outside that country, please note that your information may be transferred to, stored, and processed in a country that may not have equivalent data protection laws. By using our website, you consent to such transfer. We will take appropriate safeguards, such as Standard Contractual Clauses, to protect your data when transferred internationally.

12. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law, such as for tax, accounting, or fraud-prevention purposes. After that, we securely delete or anonymize your data.

13. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be posted on this page with an updated “Last updated” date. If we make material changes, we will notify you via email or a prominent notice on our website. Your continued use of the site after any changes constitutes acceptance of the revised policy.

14. Contact Information

If you have any questions, wish to exercise your privacy rights, or would like to make a complaint, please contact our Privacy Compliance Officer: