Privacy & Security Policies

Last updated: July 30, 2026

This Privacy Policy explains how Fratelli Orsini B.V. (“Fratelli Orsini”, “we”, “us” or “our”) collects, uses, retains and shares personal data when you visit our Website, place an order, create an account, contact us, subscribe to marketing communications, submit a review or otherwise interact with us.

This Privacy Policy applies to the Dutch version of our online store and related services available through www.fratelli-orsini.com.


1. Who is responsible for your personal data?

Fratelli Orsini B.V. is the controller responsible for the processing of your personal data.

Fratelli Orsini B.V.
Herengracht 420
1017 BZ Amsterdam
The Netherlands
Chamber of Commerce (KvK) number: 81645007

Email: info@fratelli-orsini.com

To exercise your privacy rights, please send an email with the subject line “Privacy Request”.


2. What does this Privacy Policy apply to?

This Privacy Policy applies, among other things, to personal data that we process through:

  • our Website and online store;
  • customer accounts;
  • orders, payments, delivery, returns, exchanges and refunds;
  • customer-service email and live chat;
  • product reviews, photographs, videos and feedback;
  • newsletters and other email marketing;
  • loyalty and referral programmes;
  • analytics, advertising and audience services;
  • wholesale or B2B enquiries;
  • fraud prevention and verification; and
  • other interactions with Fratelli Orsini.

This Privacy Policy does not apply to websites, apps or services operated independently by third parties.


3. What personal data do we process?

The personal data we process depends on how you use our Website and services.

Contact and order information may include:

  • name, email address, telephone number and address details;
  • billing and delivery address;
  • order number, products ordered, size, colour, order value and order history;
  • information about payment, delivery, returns, exchanges, refunds and warranty claims; and
  • communications with our Customer Service team.

Account information may include:

  • login details and account number;
  • saved addresses;
  • order and return history;
  • communication preferences; and
  • information about loyalty and referral programmes.

Website and device information may include:

  • IP address;
  • browser and device information;
  • cookie, pixel and advertising identifiers;
  • pages visited and products viewed;
  • click, shopping-cart and checkout activity;
  • referring website or advertising campaign;
  • the date, time and duration of your visit; and
  • approximate location derived from your IP address.

When you contact us or submit a review, we may also process the content of your message, photographs, videos, product information and other information that you voluntarily provide.


4. How do we collect your personal data?

We collect personal data:

  • directly from you, for example when you place an order, create an account, contact us or subscribe to our newsletter;
  • automatically through your browser, device, cookies, pixels and similar technologies;
  • through Shopify and payment providers;
  • through customer-service, returns, warehouse, fulfilment and delivery providers;
  • through review, loyalty and referral providers;
  • through analytics and advertising platforms, where you have given consent when this is required; and
  • through other persons acting with your permission.


5. Why and on what legal basis do we use personal data?

We process your personal data only when we have a valid legal basis under the General Data Protection Regulation (“GDPR”).

We use personal data to:

  • accept, process, ship and deliver orders;
  • handle payments, returns, exchanges, refunds and warranty claims;
  • manage customer accounts;
  • send order confirmations, delivery updates and other necessary service messages;
  • answer customer questions and provide sizing or product assistance;
  • operate, secure and improve the Website;
  • prevent, investigate and combat fraud, misuse and security incidents;
  • comply with legal, tax, administrative and accounting obligations;
  • establish, exercise or defend our legal rights;
  • perform statistics and business analyses;
  • manage reviews, loyalty and referral programmes; and
  • send or display marketing communications and personalised advertising where permitted or where you have given consent.

Depending on the purpose, we rely on the performance of a contract with you, a legal obligation, our legitimate interests or your consent.

Our legitimate interests include keeping our Website safe and functioning properly, preventing fraud, improving our products and services, protecting our business interests and carrying out limited direct-marketing activities for existing customers where permitted by law.

You may withdraw your consent at any time. This does not affect the lawfulness of processing that took place before you withdrew your consent.


6. Shopify

Our online store is hosted and operated using Shopify. Shopify processes personal data when you visit our Website, browse products, create an account, place an order, check out, make a payment or otherwise interact with our store.

Shopify may process personal data for, among other things, hosting, online-store functionality, checkout, payments, customer accounts, fraud prevention, analytics, security, personalisation and other e-commerce services.

For more information about Shopify’s processing of personal data, please visit privacy.shopify.com.


7. Payments

Payments are processed through Shopify and the payment methods available during checkout, such as iDEAL, Visa, Mastercard, American Express, PayPal, Klarna, Shop Pay, Apple Pay and Google Pay.

Your complete payment-card details are generally processed directly by the relevant payment provider. We do not normally receive your complete card number or security code. We may receive limited payment information, such as the selected payment method, transaction number, payment status, card type and partial card number.


8. Customer Service, returns and reviews

We use Gorgias to manage email contact, live chat and other customer-service activities. When you contact us, we may process your name, email address, order number, message content, previous correspondence, photographs, videos and other information that you provide.

We use ReturnGO to manage returns, exchanges and related communications. ReturnGO may process your contact details, order number, return reason, return status, tracking details, refund information and photographs of damaged or defective products.

We use Yotpo to collect, manage and display product reviews. When you submit a review, we may process your name or chosen display name, email address, product and order information, rating, review text, photographs, videos and verification status. Reviews and related photographs or videos may be publicly visible on product pages.


9. Warehousing, fulfilment and delivery

We share only the personal data that are reasonably necessary to process, pack, ship, deliver, track, return or exchange your order.

This may include your name, delivery address, email address, telephone number, order number, ordered products, selected delivery method, parcel and tracking information, and return information.

For delivery of Dutch orders, we generally use DHL or another relevant local delivery partner. These parties process personal data under their own privacy policies and legal obligations.


10. Email marketing

We use Shopify Email and Klaviyo to send and manage marketing emails. These emails may include newsletters, product announcements, promotions, offers, abandoned-cart or abandoned-checkout reminders, back-in-stock notifications, product recommendations, and loyalty or referral programme messages.

We send marketing emails only when you have given consent or when this is otherwise permitted by law. You can unsubscribe at any time using the unsubscribe link at the bottom of every marketing email.

Even after unsubscribing from marketing, we may continue to send necessary messages about your order, payment, account, return, warranty, security or customer-service request.


11. Loyalty and referral programmes

We may use Yotpo Loyalty & Referrals to manage loyalty and referral programmes. Depending on the programme, we may process your name, email address, customer account number, order history, points, rewards, discount codes, referral links and participation information.

The applicable terms, points, benefits and any expiry dates are displayed with the relevant programme. You can end your participation by contacting us. This may result in the loss of unused points, rewards or future benefits, where permitted under the programme terms and applicable law.


12. Cookies and similar technologies

We and our service providers use cookies, pixels, tags, scripts, local storage, device identifiers and similar technologies.

These technologies may be used for:

  • the operation of the Website, shopping cart, checkout and payments;
  • logging in to your account;
  • security and fraud prevention;
  • remembering language, country, currency and cookie preferences;
  • analysing and improving Website performance;
  • personalisation;
  • measuring marketing campaigns; and
  • showing and measuring personalised advertising.

Necessary cookies may be placed because they are required for the operation of the Website and the services you request. For non-essential cookies, such as analytics and advertising cookies, we ask for your consent in advance.

We use Pandectes GDPR Compliance to manage cookie preferences and consent. You may withdraw or change your consent at any time through the “Cookie Settings” link on our Website.


13. Analytics and advertising

With your consent, we may use analytics and advertising services, including Google Analytics 4, Shopify Analytics, Hotjar, Microsoft Clarity, Google Ads, Meta Pixel, Meta Conversions API, TikTok Pixel, Pinterest Tag, Shopify Audiences and similar services.

These services may process information about your device, browser, cookie identifiers, approximate location, visited pages, viewed products, clicks, scrolling behaviour, shopping-cart and checkout activity, referring sources and conversions.

We use this information to analyse Website use and performance, identify technical issues, improve the customer experience, measure advertising and show relevant advertising.

Advertising platforms may combine information they receive from us with information they collect through other websites, apps, advertisers or services. We use these services only where permitted and, where required, after you have given consent.


14. Customer lists and audience matching

Where you have given consent or where this is otherwise lawful, we may share limited customer information with advertising and audience platforms to create audiences, exclude existing customers from campaigns, measure campaigns or show relevant advertising.

This may include your email address, telephone number, name, country or region, customer identifier and purchase information. Where possible, this information is hashed or otherwise secured before it is shared.

We do not sell your personal data for money. However, personal data may be shared with advertising and analytics partners as described in this Privacy Policy, where you have given consent or where this is otherwise lawful.


15. With whom do we share personal data?

We may share personal data with the following categories of recipients:

  • Shopify;
  • payment providers, banks and card networks;
  • Gorgias;
  • ReturnGO;
  • Yotpo;
  • Klaviyo;
  • warehousing, fulfilment and delivery partners, including DHL;
  • analytics, advertising and social-media platforms;
  • fraud-prevention and security providers;
  • cloud-hosting and technology providers;
  • accountants, lawyers, insurers, auditors and advisers;
  • government authorities, regulators and courts, where we are required to do so; and
  • buyers, investors or advisers in connection with a merger, acquisition, financing, restructuring or sale of all or part of our business.

We share personal data only where this is reasonably necessary for the purposes described in this Privacy Policy, where you direct us to do so or where we are legally required to do so.


16. Fraud prevention and automated assessments

We use fraud-prevention services from Shopify, payment providers and security partners to identify potentially fraudulent, unauthorised or high-risk transactions.

These assessments may take into account payment information, IP address, device and browser information, billing and delivery address, order value, transaction history, account activity and unusual ordering patterns.

When an order is identified as high risk, we generally review the relevant signals before making a final decision. For higher-risk transactions, we may request additional verification, such as confirmation by email or proof of address.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you, unless permitted by law.


17. Retention periods

We do not retain personal data for longer than necessary for the purposes described in this Privacy Policy, unless we are required to retain data for longer under a legal obligation.

The retention period depends, among other things, on:

  • the duration of our relationship with you;
  • the time needed to handle orders, returns, refunds and warranty claims;
  • tax, accounting and legal retention obligations;
  • fraud prevention and security;
  • ongoing disputes, claims or investigations;
  • marketing preferences and consent records; and
  • technical backup and deletion cycles.

When personal data are no longer needed, we delete, anonymise, aggregate or securely isolate them, where technically and legally possible.


18. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, destruction or disclosure.

These measures may include encryption in transit, access restrictions, account authentication, security monitoring, fraud detection, limited employee access and agreements with service providers.

However, no transmission over the internet, storage method or security measure can be guaranteed to be completely secure. Please also protect your account details and contact us promptly if you suspect that someone has gained unauthorised access to your account.


19. International transfers

We and our service providers may process personal data in countries outside the European Economic Area, including the United States. Privacy laws in those countries may differ from the laws within the European Economic Area.

Where personal data are transferred outside the European Economic Area, we use the safeguards required by the GDPR. These may include an adequacy decision by the European Commission, Standard Contractual Clauses or other appropriate safeguards.


20. Your privacy rights

To the extent that the GDPR applies to you, you have the right to:

  • request access to your personal data;
  • have inaccurate or incomplete personal data corrected;
  • have your personal data erased;
  • restrict the processing of your personal data;
  • object to the processing of your personal data, including direct marketing;
  • receive your personal data in a structured, commonly used and machine-readable format, or have it transferred;
  • withdraw your consent; and
  • lodge a complaint with the Dutch Data Protection Authority.

You can submit a privacy request to info@fratelli-orsini.com with the subject line “Privacy Request”. Please clearly state which right you wish to exercise and provide enough information for us to handle your request.

We may ask you for additional information to verify your identity and protect your personal data. We request only information that is reasonably necessary for this verification.

We generally respond to requests within one month. If your request is complex or we receive many requests, we may extend this period in accordance with the GDPR.


21. Children’s privacy

Our Website and services are not intended for persons under the age of 16. We do not knowingly collect personal data from children under 16 without the required consent of a parent or legal guardian.

If you believe that a child under 16 has provided personal data to us, please contact us so that we can investigate and delete the information where appropriate.


22. Links to third-party websites

Our Website may contain links to websites, apps, payment services, social-media platforms, review services and other third-party services. These parties have their own privacy policies and practices.

We are not responsible for the privacy, security, availability or content practices of independently operated third-party services. Please review the relevant privacy policy before providing personal data to a third party.


23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example because of changes to our practices, service providers, technology, Website functionality, privacy choices, applicable law or regulatory guidance.

The most recent version will be published on this page with an updated “Last updated” date. If a change is material and required by law, we will inform you in an appropriate manner.


24. Contact

If you have questions about this Privacy Policy, our privacy practices or your privacy rights, please contact us:

Fratelli Orsini B.V.
Herengracht 420
1017 BZ Amsterdam
The Netherlands
Chamber of Commerce (KvK) number: 81645007

Email: info@fratelli-orsini.com