Datenschutzerklärung
Last updated: October 22, 2026
This policy explains what personal data we collect when you visit dripculture.co or place an order, why we collect it, who we share it with and the rights you have under the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
Drip Culture, Viale Guglielmo Marconi, 16020 GE, Italy. Email: hello@dripculture.co.
2. What we collect
When you browse: IP address, device and browser information, pages visited, referral source and cookie identifiers (see our Cookie Policy).
When you order: name, email, shipping and billing address, phone number, order history and the verification photos and video of your item. Card payments are handled by our payment providers; we never see your full card number.
When you subscribe to our newsletter: your email address.
When you contact us: your email address, the content of your message and your order number if relevant.
We do not collect special categories of data such as health or biometric data.
3. Why we use it and on what legal basis
- To fulfil your order (performance of a contract): processing payment, running the Drip Culture Check, shipping, returns and customer support.
- To meet legal obligations: tax, accounting and consumer-protection rules.
- Legitimate interest: keeping the site secure, preventing fraud and understanding how the site is used so we can improve it.
- Consent: marketing emails and non-essential cookies. You can withdraw consent at any time.
4. Who we share it with
We never sell your personal data. We share it only when needed to run the store:
- Shopify — our e-commerce platform, which hosts the site and stores order data.
- Payment providers — Shopify Payments and any other method you choose at checkout, to process your payment.
- Shipping carriers — your name, address and phone number, to deliver your order.
- Analytics and advertising partners such as Google — only for the cookies you accept.
- Accountants and authorities — when required by law.
5. International transfers
Some providers are based outside the European Economic Area, mainly in the United States and Canada. Transfers are protected by European Commission adequacy decisions, the EU-US Data Privacy Framework or Standard Contractual Clauses.
6. How long we keep it
- Order and invoicing records: 10 years, as required by tax law.
- Customer account: until you delete it.
- Newsletter: until you unsubscribe.
- Customer support messages: 2 years after the last contact.
- Verification photos and videos: 18 months after the order.
7. Your rights
You can ask to access, correct, delete, restrict or receive a copy of your data, object to its use, and withdraw consent at any time. Write to hello@dripculture.co with the subject “Privacy Request”. We reply within 30 days.
You can also complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or to the authority in your country.
8. Security
The site runs on HTTPS, payments are handled by PCI-DSS certified providers, and access to customer data is limited to the people who need it.
9. Children
The site is intended for adults. We do not knowingly collect data from anyone under 16. If you think a minor has given us personal data, contact us and we will delete it.
10. Changes
We update this policy when our practices or the law change. The date at the top shows the latest version.