Privacy policy

1. Data Controller

The controller responsible for the processing of personal data on this website is:

LM Global Business LLP
32 Kinburn Street, London SE16 6DW, United Kingdom
Email: support@almavitale.com
Phone: +44 7520 654477

2. General

We process personal data only to the extent necessary to provide a functional website, process your orders and deliver our services. Processing takes place on the basis of your consent or where a legal basis permits it. For customers in the European Union and the United Kingdom, we process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the UK GDPR.

3. Legal Bases

Depending on the context, our legal bases are: your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR), and our legitimate interests (Art. 6(1)(f) GDPR), such as operating and securing the Store.

4. Hosting

This website is hosted on the Shopify platform (Shopify International Ltd., Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, and its affiliates). Shopify processes the data required to operate the Store on our behalf under a data processing agreement.

5. Server Log Files

Each time you visit the website, technical information is automatically recorded in server log files (e.g. browser type, operating system, referrer URL, date and time, truncated IP address). This data is used to ensure the secure and stable operation of the website (legitimate interest).

6. Cookies & Consent

Our website uses cookies and similar technologies. Strictly necessary cookies are used on the basis of our legitimate interest in operating the Store. Non-essential cookies (e.g. for analytics and marketing) are only set with your consent, which you can withdraw at any time with effect for the future via the cookie settings.

7. Order Processing

To process your order, we process the data you provide (in particular your name, shipping and billing address, email address and, where applicable, phone number). This data is shared with the service providers involved in fulfilling your order and is deleted once it is no longer required, unless statutory retention periods apply.

8. Payment Providers

For payment processing, the necessary data is transmitted to external payment providers, such as Shopify Payments (Shopify International Ltd.), PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.) and the provider of the card network used. The privacy policy of the respective provider applies in addition.

9. Shipping Providers

For delivery, we share your address data with the commissioned logistics and postal companies to the extent necessary for delivery and tracking.

10. Analytics & Marketing

Where you have given consent, we use services to analyze the use of our website and for marketing purposes, in particular Google services (e.g. Google Ads and conversion tracking) and Meta services (e.g. Meta Pixel). These services may transfer data to servers in third countries, including the United States, on the basis of appropriate safeguards such as the EU–US Data Privacy Framework or standard contractual clauses. You can withdraw your consent at any time.

11. Newsletter

If you subscribe to our newsletter, we use your email address to send you offers and information about Alma Vitale. Subscription uses a double opt-in process, and every newsletter contains an unsubscribe link.

12. International Data Transfers

As we operate globally, personal data may be processed in countries outside your own. Where data is transferred outside the EU/UK, we ensure an adequate level of protection through adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

13. Your Rights

Subject to applicable law, you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw any consent at any time with effect for the future. EU and UK residents also have the right to lodge a complaint with a data protection supervisory authority. Residents of certain US states may have additional rights under state privacy laws, including the right to know, delete and opt out of the sale or sharing of personal information; we do not sell personal information in the conventional sense.