Privacy Policy

Last updated: August 31, 2026

This Privacy Policy explains what personal data we collect when you visit or buy from milanocupertino.com, why we collect it, who we share it with, how long we keep it, and the rights you have over it — wherever in the world you live. We wrote it to be read, not just published.

1. Who is responsible for your data

The controller of your personal data is PACF Digital Ltd. Co. (doing business as Milano Cupertino), 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States ("Milano Cupertino", "we"). Contact for all privacy matters: contatto@milanocupertino.com.

2. What data we collect

Order and account data: name, shipping and billing address, email address, phone number, order history, size selections.
Payment data: processed directly and exclusively by our payment providers (Shopify Payments and the methods shown at checkout). We never see or store your full card details — we receive only a confirmation of payment and the last digits needed to identify the transaction for support.
Customs and shipping data: the data legally required to deliver your order and complete customs clearance in your country — name, address, contact details, order contents and value — shared with our carrier, DHL Express, and declared to customs authorities as the law requires.
Technical and usage data: IP address, device and browser information, pages visited, referral source, and interactions with the Store — collected via cookies and similar technologies (see section 8).
Communications: messages you send us by email or through the Store, kept so we can actually help you and keep a record of what was agreed.
Marketing preferences: whether you have opted in to our emails, and your interactions with them.

We do not collect more than we need, and we do not collect sensitive categories of data (health, beliefs, biometrics) at all.

3. Why we process your data, and on what legal basis

To process and deliver your order — including payment, customs clearance and delivery: performance of a contract (Art. 6(1)(b) GDPR).
To comply with legal obligations — tax, accounting, customs and consumer law: legal obligation (Art. 6(1)(c) GDPR).
To provide customer support — answering questions, handling returns, warranty claims: performance of a contract and our legitimate interest in serving customers well (Art. 6(1)(b) and (f) GDPR).
To prevent fraud and secure the Store: legitimate interest (Art. 6(1)(f) GDPR).
To send marketing emails — only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link present in every single email, with immediate effect.
To measure and improve advertising and Store performance via cookies and pixels — only with your consent where required by law (Art. 6(1)(a) GDPR).

We do not use your data for automated decision-making that produces legal or similarly significant effects, and we never sell personal data — to anyone, for anything.

4. Who we share data with

We share personal data only with service providers who need it to operate the Store, under contracts that bind them to protect it:

Shopify Inc. — the e-commerce platform that hosts the Store and processes orders.
Shopify Payments and associated payment processors — payment processing and fraud prevention.
DHL Express — shipping, delivery and customs clearance, including the customs declarations the law requires.
Meta Platforms and Google — advertising and analytics services, only where you have consented to the relevant cookies.
Our email service providers — to send transactional emails (order and shipping confirmations) and, with your consent, marketing emails.
Our atelier, fulfillment and customer service team in Brazil — the people who craft, inspect, pack and dispatch your order, and who answer your messages.

We may also disclose data where the law requires it — for example, to customs or tax authorities — and in the event of a corporate transaction affecting the business, in which case this policy continues to protect your data.

5. International data transfers

We operate from the United States and Brazil, and our service providers may process data in other countries. Where personal data of individuals in the EU, UK or Switzerland is transferred to countries without an adequacy decision, we rely on appropriate safeguards — the European Commission’s Standard Contractual Clauses and their UK and Swiss equivalents — or on the EU–US Data Privacy Framework where the recipient is certified under it.

6. How long we keep data

Order, invoicing and customs data: for as long as tax, accounting and customs law requires us to keep records.
Customer support correspondence: for as long as needed to resolve your matter and document what was agreed, then deleted in our routine cycles.
Marketing data: until you withdraw consent — unsubscribing stops emails immediately.
Technical data and cookies: for the lifetimes described in the cookie settings, typically between the session and a number of months.

When data is no longer needed for any of the purposes above, we delete or anonymize it.

7. How we protect your data

The Store runs on Shopify’s infrastructure, with encryption in transit (TLS) across the entire Store and checkout, payment processing under PCI-DSS standards handled by the payment providers, and access to customer data restricted to the team members who need it to serve you. No system on earth is perfectly secure, but we treat your data the way we treat our silver: as something valuable that we are responsible for.

8. Cookies

The Store uses cookies and similar technologies in two categories:

Essential cookies — required for the Store to function at all: cart, checkout, security, fraud prevention. These cannot be switched off, because without them there is no store.
Analytics and advertising cookies — including the Meta pixel and Google tags — used to measure performance and make our advertising relevant. Where the law requires it (EU, UK, and elsewhere), these run only with your consent, requested through the cookie banner when you first visit.

You can change your cookie preferences at any time via the cookie settings link on the Store and through your browser settings. Withdrawing consent does not affect the lawfulness of processing that happened before withdrawal. Our Store does not currently respond to browser “Do Not Track” signals, but honors the consent choices you make in the banner and, where legally required, applicable opt-out preference signals.

9. Your rights

Depending on where you live, you have the right to access your personal data, correct it, delete it, receive a copy in a portable format, restrict or object to its processing, and withdraw any consent at any time. Exercising your rights is free, and we will never discriminate against you for doing so — your prices, service and warranty remain exactly the same.

To exercise any right, email contatto@milanocupertino.com from the address associated with your order (or provide enough information for us to verify it is really you — we verify to protect you). We respond within the timeframes required by the applicable law — one month under the GDPR, extendable only as the law allows, and we will tell you if it is.

EU/EEA: you also have the right to lodge a complaint with your local data protection supervisory authority.
United Kingdom: you may complain to the Information Commissioner’s Office (ICO).
Switzerland: you have the rights provided by the Swiss Federal Act on Data Protection (FADP) and may contact the Federal Data Protection and Information Commissioner (FDPIC).
United States: depending on your state, you may have rights of access, deletion, correction, and to opt out of targeted advertising under state privacy laws. We do not sell personal data or share it for cross-context behavioral advertising beyond the consented advertising cookies described above, and you can withdraw that consent at any time in the cookie settings.

10. Third-party links

The Store may link to external sites and platforms — for example, our social media profiles or DHL tracking. Those services have their own privacy policies, which govern your data once you are there.

11. Children

The Store is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time — for example, when we add markets or services. The current version is always available on this page, with the date of the last update shown at the top. For significant changes affecting how we use data already collected, we will inform you actively.

13. Contact

For anything related to your personal data:
PACF Digital Ltd. Co. (doing business as Milano Cupertino)
1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States
Email: contatto@milanocupertino.com