Privacy Policy

1. Introduction

Welcome to Crosetella ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and share your information when you visit our website.

2. Information We Collect

3. Cookies and Tracking Technologies

3.1 Types of Cookies We Use

3.2 Managing Cookies

You have full control over cookie usage on our website:

• Use our Cookie Settings (available in the footer) to manage your preferences
• Configure your browser to refuse all or some browser cookies
• Delete cookies already stored on your computer
• Change your consent at any time

Please note that if you disable or refuse cookies, some parts of the website may become inaccessible or not function properly.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our website
• To process orders and transactions
• To respond to your inquiries and communications
• To analyze website usage and improve user experience
• To send you updates about orders and products (only with your consent)
• To comply with legal obligations
• To protect against fraudulent or illegal activity

5. Data Sharing and Third Parties

6. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing
• Portability: Request transfer of your data
• Objection: Object to processing of your personal data
• Withdraw Consent: Withdraw consent at any time using our Cookie Settings

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• AES-256 Encryption: All sensitive personal data (name, email, phone, address) is encrypted using industry-standard AES-256-GCM encryption before being stored in our database.
• Secure Transmission: All communications between your browser and our servers are protected using HTTPS/TLS.
• Restricted Access: Access to personal data is strictly limited to authorized personnel who need this information to perform their duties.
• Regular Auditing and Monitoring: We conduct regular security audits and monitor our systems for suspicious activities.
• Encryption Key Rotation: We implement regular encryption key rotation to maintain the highest security standards.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Analytics data is automatically deleted after 14 months.

9. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

10. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: