Privacy policy
This page describes how handles your personal information in connection with the website us.elettia.com, including the disclosures required by state privacy laws such as the California Consumer Privacy Act (CCPA, as amended by the CPRA).
1. Who is responsible
, , . For any question or to exercise your rights: [email protected].
2. What we collect, why, and for how long
| Processing | Basis | Retention |
|---|---|---|
| Processing the order, shipping, after-sales support | Performance of the contract | 3 years after the last order |
| Invoicing and accounting | Legal obligation (tax record-keeping) | 7 years |
| Customer account | Performance of the contract | 3 years after the last contact, then deleted |
| Payment fraud prevention and detection | Legitimate business purpose | 13 months |
| Abandoned cart reminder by email | Your consent, given when entering your email address | Until you opt out, at most 12 months |
| Audience measurement and technical diagnostics of the site | Legitimate business purpose — aggregated data | 25 months maximum |
| Record of your cookie choice | Legitimate business purpose (proof of your choice) | 6 months for the choice, 3 years for the record |
| Handling of privacy requests | Legal obligation | 3 years after the reply (24 months minimum under the CCPA) |
The abandoned cart reminder is only sent to people who explicitly accepted it when entering their email address. Every marketing email includes a working unsubscribe link, honored within ten business days (CAN-SPAM Act). An address entered to complete an order is never reused for marketing without that separate consent.
3. Categories of personal information
- Identifiers and contact details: name, email address, phone number.
- Shipping and billing address.
- Commercial information: order details, amounts, payment method used and transaction reference. No payment card data is collected or stored by our servers: it is entered on our payment provider's page.
- Internet activity strictly needed to run the site (truncated IP address in security logs, browser type, page viewed).
We do not collect sensitive personal information and we do not knowingly collect information from children under 16.
4. Who we share it with
Your information is disclosed only to those who need it to fulfill the order:
- our payment provider, for payment processing and fraud prevention;
- the carrier you chose, for delivery — name, address and phone number only;
- our transactional email provider;
- our hosting provider, , as a technical service provider;
- the recycling program , for aggregated reporting only.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising other than through the advertising measurement cookies you can decline (see section 8). No information is rented or transferred to third parties for their own marketing.
5. Where your information is processed
Our servers and service providers may be located in the United States and in the European Union. Wherever it is processed, your information is protected by the safeguards described on this page. Ask [email protected] for details.
6. Your rights
Depending on your state of residence, you have the following rights over your information:
- the right to know what personal information we collect, use and disclose, and to obtain a copy;
- the right to correct inaccurate information;
- the right to delete, except where retention is required by law — an invoice cannot be deleted before the end of the tax record-keeping period;
- the right to opt out of the sale or sharing of your personal information;
- the right to limit the use of sensitive personal information (we collect none);
- the right to withdraw consent at any time, without retroactive effect;
- the right not to be discriminated against for exercising these rights.
To exercise them, write to [email protected] or to , , . We confirm receipt within ten business days and respond within forty-five days, extendable once by forty-five days for complex requests, in which case you are informed. We only ask for proof of identity in case of reasonable doubt. You may designate an authorized agent to make a request on your behalf.
We honor the Global Privacy Control signal sent by your browser as an opt-out of sale or sharing. You can also opt out of advertising measurement at any time from the cookie preferences page.
If you believe your rights have not been respected, you can contact the attorney general or the consumer protection agency of your state.
7. Security
Exchanges with the site are encrypted (HTTPS). Passwords are stored as non-reversible hashes. Access to order data is restricted to people who need it and is logged. In the event of a security breach affecting your personal information, you would be notified as required by the breach notification law of your state.
8. Cookies and tracking technologies
The cookies set, their purpose, their duration and how to decline them are listed on the cookie preferences page. No advertising measurement cookie is set before you agree.