Privacy Policy

This policy explains what personal information Il Gattopardo collects, why, and how we handle it. It applies to this website and to the orders you place on it, and not to any other site we link to.

What we collect

• Order details: the name to appear on the certificate and the recipient's email address.
• Shipping address: only when you choose a printed or framed certificate.
• Payment: handled entirely by Stripe. We receive a confirmation and a payment reference, but never your full card number.
• Your time zone: read from your browser when you check out, so we can tell what time of day it was where you were. We keep the zone name and the offset from UTC, never a location more precise than that, and it is not shared with any of the processors below.
• Usage data: standard analytics (pages visited, device/browser) via the tools below.

How we use it

To generate and deliver your certificate, fulfil and ship physical orders, provide customer support, keep records for tax and accounting, detect and prevent fraud, measure and improve the site, and measure our advertising.

Processors we use

• Stripe: payment processing.
• Resend: sending your certificate and order emails.
• Google Analytics: aggregate site analytics.
• Meta (Facebook) Pixel: measuring ad performance, when enabled.
• Microsoft Clarity: heatmaps and session replay to understand how the site is used.

When we share information

We do not sell your personal information for money, and we do not rent out our customer list. We do share it in these situations, and only these:

• Service providers. The companies listed above, which handle payment, email, hosting, analytics, and advertising measurement on our behalf. They may use it only to provide that service to us.
• Advertising partners. Meta and Google receive information about visits and purchases so we can measure and target our advertising. See the section below, because under some state laws this counts as a "sale" or a "share" even though no money changes hands.
• Legal and safety. Where we are required to by law, subpoena, or court order, or where we reasonably need to in order to investigate fraud, enforce our Terms, or protect someone's rights or safety.
• A change of ownership. If the business is sold, merged, reorganised, or wound up, customer records may pass to the successor as part of that transaction. It would remain subject to a policy at least as protective as this one.
• Aggregate data. Information that no longer identifies anyone, which we may keep and use indefinitely.

Cookies & tracking

We use cookies and similar technologies for analytics and advertising measurement, and they load when you arrive. You can block or delete cookies in your browser settings; the site will still work, and you will still be able to buy. To opt out of interest based advertising across many companies at once, use the industry tools at optout.aboutads.info and optout.networkadvertising.org, or the ad settings inside your Facebook and Google accounts.

Do Not Track. Browsers send a "Do Not Track" signal inconsistently and there is no agreed standard for answering it, so we do not respond to it. We do honour the opt out routes described above and in the California section.

Interest based advertising

We advertise on Meta and Google. To measure whether that advertising works, our site sends those companies information about pages viewed and purchases made, and they may match it to their own records of you. This is how you may see our advertising again after visiting us. The opt out links above stop the targeting; they do not stop advertising in general.

California privacy rights

If you live in California, the CCPA as amended by the CPRA gives you specific rights. In the last twelve months we have collected the categories of personal information described above (identifiers such as name and email, commercial information about your order, a postal address for physical orders, and internet activity such as pages viewed), for the purposes described above, from you directly and from cookies on this site.

We do not sell personal information for money. However, our use of advertising cookies means personal information may be "shared" for cross context behavioural advertising, and may count as a "sale" under California law. We say so plainly rather than claim otherwise. You have the right to:

• know what personal information we hold about you and how we use and disclose it;
• get a copy of it;
• have it corrected if it is wrong;
• have it deleted, subject to the records we must keep for tax and accounting;
• opt out of that sale or sharing for advertising; and
• not be treated worse for exercising any of these rights. We will not charge you more, refuse a sale, or give you a lesser product.

To exercise any of them, email hello@terradelgattopardo.com with the subject line "California privacy request". We will verify your identity by matching the details against your order, and we will answer within 45 days. An authorised agent may make a request for you with written permission. We honour the Global Privacy Control signal as an opt out of sale and sharing where your browser sends one.

We do not knowingly collect or sell the personal information of anyone under 16.

Other US state rights

Several other states, including Colorado, Connecticut, Virginia, Texas, and Utah, give residents comparable rights to access, correct, delete, and opt out of targeted advertising, along with a right of appeal if we refuse a request. Write to the same address and say which state you live in, and we will apply your state's rules.

Retention

We keep order records for as long as needed to fulfil the order and to meet legal, tax, and accounting obligations, then delete or anonymise them. Aggregate and anonymised data may be kept indefinitely.

Security

We limit access to customer data, we serve the whole site over an encrypted connection, and we never handle or store your full card number; Stripe does that. But no method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security and we do not warrant it. If a breach ever affects your information, we will tell you and the relevant regulator where the law requires it.

Your rights elsewhere

Wherever you live, you can request access to, correction of, or deletion of your personal data by emailing hello@terradelgattopardo.com. Depending on where you live you may have additional rights, including under the GDPR and the UK GDPR, and a right to complain to your local data protection authority.

Where your data is held

We are based in the United States and our providers store data there. If you order from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws differ from those in your own country and where data may be subject to lawful access requests by US courts and authorities.

Other sites

Our pages link to other sites, such as our payment processor. We do not control them and we are not responsible for their content or their privacy practices. Read their policies before giving them information.

Children

Our products are meant for adults, the site is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.

Changes to this policy

We may update this policy. The "last updated" date above always reflects the current version, and material changes will be posted here. Please check back from time to time.

Contact

Email hello@terradelgattopardo.com.