Privacy notice
This notice explains how we process personal data when you interact with Oliviér Estetica Sartoriale (information requests, bookings, communications, boutique). We use your data to deliver the requested service and comply with legal obligations, with appropriate safeguards. [TO BE CONFIRMED: further corporate details of the controller if any].
Data controller
Controller: Oliviér Estetica Sartoriale, operating address Rome (RM), Italy. VAT no.: 17909821005. Dedicated email for privacy requests: [TO BE CONFIRMED: privacy email]. You may also use the channels on the Contact page (phone, WhatsApp) and email, when available.
Data we process and purposes
Contact form: name, email, phone, area of interest (if any), message (optional). Submitting opens or suggests WhatsApp via a `wa.me` link: data appears in the prefilled text and is then processed by Meta/WhatsApp under their terms. Boutique / cart: first name, last name, email, phone, notes, line items (product slugs) and quantities; WhatsApp prefilled message, with an optional service copy to the controller if the channels below are active. Bookings: Treatwell link or embed, or traditional channels. Technical data may be processed by hosting/analytics (e.g. Vercel) and by third parties you enable (map, Treatwell) as per the cookie policy.
Purposes of processing
Data are processed to handle enquiries, bookings, consultations and client relations; to perform contractual or pre-contractual obligations; and for communications strictly related to the services requested. Where required by law, we may process data to comply with legal obligations.
Legal basis
Processing is based on: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR); legitimate interest of the controller for managing the client relationship (Art. 6(1)(f) GDPR); or, where applicable, compliance with a legal obligation (Art. 6(1)(c) GDPR). Where processing is based on consent, you may withdraw it at any time.
Data retention
Data are kept only as long as needed for the purposes (ongoing relationship, legal duties, or sector records where applicable). [TO BE CONFIRMED: specific periods for form requests, WhatsApp threads, backup emails].
Recipients and categories of recipients
Authorised staff and partners; site hosting and edge provider (Vercel and related infrastructure, under applicable agreements/DPa). If you enable embeds, Google Maps, Treatwell or other third parties process data under their policies. If a boutique order backup email is enabled, the message is sent through Resend to a controller address. We do not sell your data to unrelated marketers beyond what this notice describes.
Hosting, infrastructure and related tools
The site is served on Vercel (hosting, network, and optional analytics/performance tools you accept in preferences). Cookie preferences, preloader state and the cart are stored in your browser unless a provider you activate processes further data with consent.
Transfers outside the EU
Where data are transferred to countries outside the EU, we apply the safeguards provided by the GDPR (adequacy decisions, standard contractual clauses, supplementary measures where applicable). For details on a specific transfer you may contact the controller using the details provided.
Your rights
Under applicable law, you may request access, rectification, erasure, restriction, data portability, and object to processing where provided. You may also withdraw consent when consent is the legal basis for processing.
Complaint to a supervisory authority
You have the right to lodge a complaint with a competent supervisory authority. In Italy: Garante per la Protezione dei Dati Personali (www.garanteprivacy.it). In other EU Member States you may contact the authority of your place of residence or work.
How to exercise your rights
To exercise access, rectification, erasure, restriction, portability, objection or lodge a complaint: [TO BE CONFIRMED: privacy email] or the channels on the Contact page. We will follow applicable response timelines.
Updates to this notice
We may update this notice to reflect legal, organizational or service changes. The most recent version is on this page.
Last update: 25 April 2026