Privacy policy
Privacy Policy
Last updated: 27 June 2026
This Privacy Policy explains how Alynea (hereinafter “Alynea”, “we”, “us” or the “Data Controller”) collects, uses and protects the personal data of users who visit or make purchases through www.alyneapilates.com, in accordance with Regulation (EU) 2016/679 (“GDPR”).
1. Personal data we collect
When you browse or make a purchase through our website, we may collect the following categories of personal data:
- Identification details, such as your first and last name;
- Contact details, including your email address, telephone number, shipping address and billing address;
- Information relating to your orders and purchases;
- Payment information, which is processed directly by our payment service providers and is not stored by Alynea;
- Browsing data, including your IP address, browser, device, pages visited and other technical information;
- Marketing preferences and interactions with promotional communications.
2. Purposes and legal basis for processing
We process personal data for the following purposes.
a) Order fulfilment
- Processing and managing orders;
- Preparing and shipping products;
- Managing returns, refunds and customer support requests.
Legal basis: performance of a contract (Article 6(1)(b) GDPR).
b) Legal and tax obligations
- Administrative and accounting purposes;
- Compliance with applicable legal obligations.
Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).
c) Newsletters and marketing communications
With your consent, we may send you:
- Newsletters;
- Promotional communications;
- Exclusive offers;
- Product and collection updates.
Legal basis: consent of the data subject (Article 6(1)(a) GDPR).
You can withdraw your consent at any time by using the unsubscribe link included in our communications or by contacting us.
d) Marketing and personalised advertising
With your consent, we may use third-party tools to:
- Measure the effectiveness of advertising campaigns;
- Improve your browsing experience;
- Deliver personalised advertisements and carry out remarketing activities.
The tools we use include:
- Meta Ads (Facebook and Instagram);
- TikTok Ads;
- Klaviyo (email marketing and automation).
Legal basis: consent provided through the cookie banner, where required under applicable law.
3. Cookies and similar technologies
Our website uses:
- Strictly necessary cookies, which are essential for the website to function correctly;
- Analytics cookies, where applicable;
- Marketing and profiling cookies.
Cookie consent is managed through Consentmo GDPR Compliance, which allows you to accept, reject or change your preferences at any time.
For more information, please refer to our Cookie Policy.
4. How we process personal data
We process personal data using appropriate electronic and organisational measures, in accordance with the GDPR principles of lawfulness, fairness, transparency and data minimisation.
We implement appropriate security measures to protect personal data against unauthorised access, loss, disclosure or misuse.
5. Data retention
Personal data is retained:
- For as long as necessary to perform the contract;
- For the period required by applicable legal obligations;
- Until consent is withdrawn for marketing activities.
6. Sharing personal data with third parties
To provide our services, we may share personal data with the following parties:
- Shopify, for platform hosting and e-commerce management;
- Shopify Payments, PayPal and Klarna, for payment processing;
- Packlink PRO and the appointed delivery providers, for shipping and delivery;
- Klaviyo, for email marketing;
- Loox Reviews, for collecting and publishing customer reviews;
- Revoq, for managing return requests;
- Consentmo, for managing cookie consent;
- Meta Platforms and TikTok, for marketing and advertising;
- Google Workspace, for managing email communications.
These parties process personal data as data processors or independent data controllers, as applicable and in accordance with relevant data protection laws.
7. Transfers of personal data outside the European Union
Some of the service providers we use may transfer personal data to countries outside the European Economic Area.
Any such transfers are carried out in accordance with the safeguards required under the GDPR, including, where applicable, the Standard Contractual Clauses approved by the European Commission.
8. Your rights
You may exercise the rights granted under Articles 15 and following of the GDPR at any time, including:
- The right of access;
- The right to rectification;
- The right to erasure;
- The right to restrict processing;
- The right to object to processing;
- The right to data portability;
- The right to withdraw consent at any time;
- The right to lodge a complaint with the Italian Data Protection Authority.
To exercise these rights, please contact us at:
9. Changes to this Privacy Policy
We may update this Privacy Policy at any time.
Any changes will be published on this page together with the revised “Last updated” date.
10. Contact us
For any questions or requests regarding the processing of your personal data, please contact us at:
11. Data Controller
Rollo Luca – Ditta Individuale
Pianezza (TO), Italy
VAT No.: 13131220017
Email: info@alyneapilates.com