Skip to main content

Privacy Policy

Short version: I collect the minimum needed to run a shop, I don't sell your data, and there is exactly one human who reads the support emails. The long version:

Who's responsible

Data controller: Sarto (Small Plushies), Italy. Questions, requests, and "delete everything you have on me": [email protected].

What I collect and why

  • Orders. Name, email, shipping address, what you ordered. Used to fulfill your order, and kept as long as Italian tax law requires invoices to be kept.
  • Payments. Handled entirely by PayPal or Stripe. I never see your card details, only whether the payment worked.
  • Newsletter. Your email, if you subscribe, plus open and click stats from Brevo. Based on your consent, and you can revoke it with the one-click unsubscribe in every email.
  • Support emails. If you write to me, I keep the thread so I don't make you repeat yourself.
  • Analytics. Plausible Analytics: cookie-free, aggregated page-visit stats, self-hosted (so the data stays with me and never reaches third-party providers). It tells me which pages get visited; it can't identify you and doesn't follow you around the web.
  • Server logs and cookies. The site runs behind Cloudflare and keeps basic technical logs for security. A session cookie keeps your cart working, and that's the whole cookie collection.

Who else sees your data

Only the services the shop needs to exist: Scaleway (hosting), Cloudflare (security and CDN), PayPal/Stripe (payments), Brevo (newsletter), and the courier, who receives the address on the label because that's how labels work. Your data is never sold, and there's no advertising business here.

Your rights

You can ask me for a copy of your data, corrections, deletion (unless tax law says I have to keep it), restriction, portability, or object to processing. Email [email protected] and it's handled. You can also complain to the Garante per la protezione dei dati personali, the Italian data protection authority.

Changes

If this page changes meaningfully, the date below moves. For newsletter subscribers, big changes go out by email.