Legal information
Privacy Policy
Last updated: June 2026
This policy is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and describes how the personal data of site users is processed.
1. Data controller
BENLOUALI®
2. What data we process
• Contact details provided voluntarily (first name, last name, email, any order number and message). • Email addresses for newsletter sign-up. • Data required for purchase and shipping. • Browsing, technical and cookie data, as described in the Cookie Policy.
3. Purposes and legal bases
• Responding to contact-form requests — pre-contractual measures / legitimate interest (Art. 6.1.b/f). • Managing orders, payments, shipping and support — performance of the contract (Art. 6.1.b). • Newsletter — consent (Art. 6.1.a), revocable at any time. • Tax obligations — legal obligation (Art. 6.1.c). • Security and aggregate statistics — legitimate interest (Art. 6.1.f).
4. How we process data
Data is processed using electronic tools and security measures adequate to prevent unauthorised access, loss or disclosure. Access is limited to authorised personnel.
5. Recipients and external processors
Data may be shared with providers acting as data processors: hosting and infrastructure (Vercel), content and subscriber management (Sanity), form delivery (Web3Forms), couriers and payment providers. Each provider is bound by agreements pursuant to Art. 28 GDPR.
6. Transfers outside the EU
Some providers may process data outside the European Union on the basis of adequacy decisions or Standard Contractual Clauses approved by the European Commission.
7. Retention period
• Contact requests: up to 24 months from the last exchange. • Purchase and invoicing data: for the period required by tax obligations (usually 10 years). • Newsletter: until consent is withdrawn. • Technical/cookie data: according to the durations in the Cookie Policy.
8. Your rights
You may exercise your rights of access, rectification, erasure, restriction, portability and objection at any time, and withdraw consent, by contacting us via the site's Contact form. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Nature of data provision
Providing the data required for orders and legal obligations is mandatory; providing data for the newsletter is optional.
To exercise your rights or for any request, you can contact us. This page is updated periodically.