PRIVACY POLICY

The data controller is Grillz Marche di Moustachfa Wassim, VAT 02184970438, Via Nicolò Bonafede 5, 62015 Monte San Giusto (MC), Italy.

• Email: grillzmarche@gmail.com
• Certified email (PEC): WASSIM.MOUSTACHFA@PEC.FISCOZEN.IT
• WhatsApp: +39 389 482 9784

We have not appointed a data protection officer (DPO) because our activity does not fall within the cases where one is mandatory.

We only process data you give us, plus a few technical data generated by using the site:

• Quote request / order (from the configurator): name, email, phone, Instagram handle (optional), shipping address, the configuration you chose and any reference photos and notes you attach. We never receive your card details: payment happens on a Stripe-hosted page.
• Production: dental impressions, photos needed for the work, and proofs of payment.
• Account (if you register): email, name and password (stored only as a protected hash, never in plain text).
• Support: whatever you write to us by email, WhatsApp or Instagram.
• Technical logs: security and operations logs generated by the hosting infrastructure.
• Anonymous statistics: aggregate visit counters without cookies and without identifying data (see section 7).
• Welcome voucher (if you activate it from the site's window): the email you enter. To know that you've already had the voucher we keep only an encrypted fingerprint of the email: a code derived with a secret key, which does not contain the email and cannot be turned back into it. If you use the voucher in a paid order, we keep an encrypted fingerprint of the order's phone number in the same way. To limit attempts we keep an encrypted fingerprint of the IP address for one day at most.
• Offers by email (only if you tick one of the optional boxes: in the voucher window or at checkout): the email, the date and time of your consent, the version of the text you accepted and the language, stored encrypted; if you withdraw it, also the date of withdrawal.
• Reminder voucher (only if you agreed to offers at checkout and we send you the voucher): as for the welcome voucher, an encrypted fingerprint of the email and of the order's phone number, so that the same person never gets two time-limited vouchers.

We do not collect browsing data for advertising purposes and we do not buy data about you from third parties.

• Handling your quote request and kit order, and contacting you back to finalise the order: pre-contractual measures and contract performance (art. 6(1)(b) GDPR).
• Making your grillz and fulfilling the order, including status emails: performance of the contract (art. 6(1)(b)).
• Complying with accounting and tax obligations: legal obligation (art. 6(1)(c)).
• Replying to you and handling support, including warranty matters: our legitimate interest in assisting you and managing disputes (art. 6(1)(f)).
• Site security (technical logs, abuse prevention): legitimate interest (art. 6(1)(f)).
• Aggregate anonymous statistics on visits: legitimate interest (art. 6(1)(f)) on data that cannot identify you.
• Activating the welcome voucher and applying it at checkout, at your request: pre-contractual measures (art. 6(1)(b)). Keeping the encrypted fingerprints of email and phone so the voucher isn't offered again to someone who already had it (once per person) and to prevent abuse: legitimate interest (art. 6(1)(f)).
• A single reminder if you leave your order halfway: if you enter your details at checkout and the payment doesn't go through, we may send you one email only with the link to complete it, with no offers. A person decides and sends it, never an automatic send. Basis: legitimate interest in letting you resume an order you started (art. 6(1)(f)). At the bottom of the email there is a link to stop receiving more.
• Sending you offers, vouchers and news by email (for example a personal voucher if you leave an order halfway, or a second reminder): only with your consent (art. 6(1)(a)), optional and separate from the welcome voucher and from the order, which you get anyway. You can withdraw it at any time from the link at the bottom of every email or by writing to grillzmarche@gmail.com; withdrawal does not affect what was done before.

We do not use your data for marketing without your consent, and we perform no profiling or automated decisions with legal effects on you. Providing the form data is necessary to handle your request: without it, we simply cannot reply.

• Quote requests not followed by an order: up to 12 months from the last contact, then we delete them.
• Orders and tax documents: 10 years, as required by law (art. 2220 of the Italian Civil Code).
• Production photos and impressions: for the duration of the legal warranty (2 years from delivery), then destroyed or deleted.
• Account: until you ask for deletion.
• Support emails and messages: up to 24 months after the request is closed, unless a dispute is ongoing.
• Technical logs: for the short technical periods set by the hosting provider.
• Encrypted fingerprints for the welcome voucher (email and, if you used it, phone): for as long as the welcome voucher remains an offer on the site, because they exist precisely to make it once per person; when the offer ends we delete them. The IP address fingerprint: one day at most.
• Offers list: until you withdraw your consent. After withdrawal we keep only the proof of the consent and of the withdrawal, so that we can show what we did before.

When the period expires, data is deleted or irreversibly anonymised.

We do not sell or hand over your data to third parties for marketing. To run the service we rely on these providers, which process data on our behalf or as independent controllers within the limits indicated:

• Vercel Inc. (USA): site hosting and technical logs.
• Sanity Inc. (USA): database for site content and orders/requests; request data is stored encrypted with AES-256, unreadable without our key.
• Resend (USA): transactional emails (summaries and confirmations).
• Google (USA): the Gmail inbox where we receive requests and emails.
• Telegram: for each request we receive an internal notification with name, email and phone, so we can reply fast.
• Upstash (USA): infrastructure for the aggregate statistics, for which it receives no personal data (see section 7), and for the welcome voucher register, where it receives only the encrypted fingerprints of email, phone and IP address described above.
• Couriers and postal operators: receive name, address and phone for delivery.
• Stripe Payments Europe Ltd. (Ireland): handles payment by card, Apple Pay, Google Pay and, when it's available for your order, Klarna. It receives name, email and amount; you enter your card details on its page and we never see them. For anti-fraud and anti-money-laundering purposes it acts as an independent controller.

Instalments with Klarna. If on the Stripe page you choose to pay in instalments with Klarna Bank AB (Sweden), Klarna receives from Stripe the data it needs to decide on the request and manages the instalments as an independent controller, under its own privacy notice. Also, only if you tap «See how» next to the instalments line, your browser downloads Stripe's script from js.stripe.com to show you Klarna's message: Stripe sees your IP address, and the script may store cookies of its own on our domain (see the Cookie Policy). If you don't tap, nothing loads.

Data may also be disclosed to advisers (e.g. tax) and to authorities where the law requires it.

Some providers listed above (Vercel, Sanity, Resend, Google, Upstash, Stripe for fraud prevention) are based or run servers in the United States. In those cases the transfer is protected by the standard contractual clauses (SCCs) approved by the European Commission included in their contracts and, where the provider is certified, by the EU-US Data Privacy Framework.

Telegram may process data outside the EU: that is why we use it only as an internal notification channel and keep the data sent to the bare minimum (name, email, phone). You can request a copy of the safeguards applied by writing to the contacts in section 1.

To understand how many people visit the site we use a first-party, cookieless counter: we record only aggregate data (page viewed, country, referring site or campaign, steps such as adding to the cart, opening the checkout or a cancelled payment) and estimate unique visitors with a temporary technical code that changes every day and cannot be traced back to your identity.

• No cookies and no identifier stored on your device.
• Your IP address is never stored.
• No individual profile, no cross-site tracking, no sharing with advertising networks.
• If your browser sends the «Do Not Track» signal, the counter in the browser does not even start. Only the daily totals counted by the server remain: orders waiting for payment, paid orders, welcome vouchers activated and used. These are orders and vouchers we record anyway, with no link to your visit.

All site traffic travels over HTTPS. Request and order data is stored encrypted with AES-256-GCM: in the database it is unreadable without the key, which is kept separately. Account passwords are stored only as hashes. Access to data is limited to the owner and to the providers listed, each for its own function.

At any time you can exercise your rights under arts. 15–22 GDPR:

• Access: know what data we hold about you and get a copy.
• Rectification: correct wrong or incomplete data.
• Erasure: have it deleted, where no legal obligation forces us to keep it.
• Restriction and objection: block or contest processing based on legitimate interest.
• Portability: receive your data in a machine-readable format.

How: write to grillzmarche@gmail.com (or to the PEC WASSIM.MOUSTACHFA@PEC.FISCOZEN.IT) stating which right you want to exercise. We reply within one month. If you are not satisfied, you have the right to lodge a complaint with the Italian data protection authority, the Garante (www.garanteprivacy.it).

The site and the products are aimed at adults. We do not knowingly process data of children under 14; if you are a minor, ask a parent to handle the request for you. If we discover data of a child collected without the consent of the person responsible for them, we delete it.

The complete list of cookies and other data stored on your device, with name, purpose and duration, is in the Cookie Policy (linked in the footer). Preview: we use technical tools only, no advertising tracking.

Links to Instagram and WhatsApp lead to external services: from there on, those platforms' privacy policies apply.

If we change providers or processing activities, we update this page and the revision date at the bottom. For substantial changes, if we have your contact details, we let you know directly.