Privacy Policy

Last updated: 12 October 2026

ALBA STUDIO respects your privacy and is committed to handling your personal information responsibly. This Privacy Policy explains how personal data is collected, used, stored and protected when you visit this website or contact me about an artwork.

1. Who Is Responsible for Your Personal Data?

The data controller is:

ALBA STUDIO
Owner: [Your full legal name]
Business address: [Your registered business address]
Email: [Your business email address]
VAT number: [Your Partita IVA, once issued]

ALBA STUDIO operates from Puglia, Italy.

2. What Personal Data Is Collected?

Depending on how you use this website, the following information may be collected:

Contact information: name, email address and any information you include in a message.
Order information: billing and delivery addresses, contact details, purchased artwork and order history.
Payment-related information: payment status, transaction references and other information provided through the selected payment provider. Payment card details are generally handled by the payment provider rather than stored directly by ALBA STUDIO.
Technical information: information such as IP address, browser type, device information and website usage data, where collected through the website or its technologies.
Communication preferences: information about any consent you provide for optional communications or cookies.

Please avoid including unnecessary personal or sensitive information in messages.

3. How Is Your Personal Data Used?

Your personal data may be used to:

Respond to enquiries about original paintings and commissioned artwork.
Process and fulfil orders, arrange delivery and manage payments.
Communicate with you about your purchase, shipping, returns or refunds.
Meet legal, tax, accounting and record-keeping obligations.
Maintain the security and proper functioning of the website.
Understand website performance where analytics technologies are used with the appropriate legal basis.
Send optional marketing communications only where permitted by applicable law and, where required, with your consent.

Your personal information will not be used for purposes incompatible with those described in this policy.

4. Legal Basis for Processing

Personal data is processed only where a valid legal basis applies, including:

Contract: to respond to purchase requests, fulfil orders and provide customer service.
Legal obligation: to comply with applicable accounting, tax and other legal requirements.
Legitimate interests: to protect the website, prevent fraud, manage business communications and improve services where those interests do not override your rights.
Consent: where required, including for optional marketing communications and non-essential cookies.

Where processing is based on consent, you may withdraw that consent at any time.

5. Who May Receive Your Personal Data?

Personal data may be shared only where necessary with trusted service providers, including:

Wix, which provides the website and online shop infrastructure.
Payment service providers, to process transactions.
Courier and delivery companies, to fulfil orders.
Accounting, tax, legal or other professional advisers where necessary.
Public authorities where disclosure is required by law.

These providers may process information according to their own privacy notices and applicable contractual or legal obligations.

ALBA STUDIO does not sell your personal data to third parties.

6. International Data Transfers

Some service providers, including website hosting and payment providers, may process personal data outside the European Economic Area.

Where such transfers occur, the applicable legal requirements and safeguards will be used, where required, to protect your personal data.

For more information about Wix's data handling practices, please consult Wix's Privacy Policy.

7. How Long Is Personal Data Kept?

Personal data is retained only for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal retention requirements.

Order and accounting records: retained for the periods required by applicable law.
Customer enquiries: retained for as long as necessary to respond and manage any follow-up.
Marketing preferences: retained until you withdraw your consent or the information is no longer needed.
Technical and cookie data: retained according to the relevant technology, settings and applicable requirements.

Different categories of information may be subject to different retention periods.

8. Cookies and Website Technologies

This website is built using Wix and may use essential cookies and similar technologies to support security, website functionality and shopping features.

Depending on the website configuration, optional analytics, advertising or third-party technologies may also be used.

Where required, non-essential cookies will be activated only after the appropriate consent has been obtained. You can manage your preferences through the website's cookie settings, where available, and through your browser settings.

For more information about Wix cookies and privacy tools, please visit Wix's guidance on cookies.

9. Your Data Protection Rights

Subject to the conditions and limitations set by applicable law, you may have the right to:

Request access to your personal data.
Ask for inaccurate information to be corrected.
Request deletion of your personal data.
Request restriction of processing.
Object to certain processing activities.
Request data portability where applicable.
Withdraw consent where processing is based on consent.
Lodge a complaint with the competent data protection authority.

To exercise your rights, please contact [your business email address]. You may be asked to provide information necessary to verify your identity.

In Italy, the competent supervisory authority is the Garante per la protezione dei dati personali. Further information is available at www.garanteprivacy.it.

10. Data Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration or disclosure.

However, no method of online transmission or electronic storage can be guaranteed to be completely secure.

11. Changes to This Policy

This Privacy Policy may be updated to reflect changes in the website, the services used or applicable legal requirements. The latest version will be published on this page with its updated date.

12. Contact

For questions about this Privacy Policy or the handling of your personal data, please contact:

ALBA STUDIO
Email: napolialbarosa@gmail.com
Owner: Albarosa Napoli
Location: 73040 Puglia, Italy