Privacy Policy

Privacy Policy

Last updated: 19 August 2026

This Privacy Policy explains how personal data is collected and used when you visit cansurossi.com, place an order, contact us, or submit a commission request.

1. Data Controller

The data controller is:

Cansu Rossi
Via Martiri della Libertà 51
13898 Occhieppo Superiore (BI), Italy
Email: hello@cansurossi.com
Telephone: +39 327 124 0759

2. Personal Data We Collect

Depending on how you use the website, we may collect:

  • your name, email address, telephone number, billing and shipping address;
  • order, payment, delivery and customer-service information;
  • information you provide when contacting us or requesting a commission, including the subject you would like painted, preferred size, deadline, message and any reference images or files you upload;
  • technical and usage information generated when you use the website, such as device, browser, IP address and interaction information, where collected by Shopify or other website technologies;
  • marketing preferences where you choose to subscribe to communications.

Payment card details are processed by the payment providers made available at checkout. We do not receive or store your full payment-card details.

3. Why We Use Personal Data and Our Legal Bases

We process personal data only where there is a lawful basis to do so. Depending on the purpose, this may include:

Contract and pre-contractual steps: to process orders, arrange delivery, respond to commission enquiries, prepare or perform a commission, handle returns and provide customer support.

Legal obligations: to comply with tax, accounting, consumer-protection and other legal requirements.

Legitimate interests: to operate and secure the store, prevent fraud or misuse, maintain records, and protect our legal rights, where those interests are not overridden by your rights and freedoms.

Consent: where required for optional marketing communications or non-essential cookies and similar technologies. You may withdraw consent at any time, without affecting processing already carried out lawfully before withdrawal.

4. Service Providers and Recipients

We share personal data only where reasonably necessary to operate the store, fulfil orders, respond to requests or comply with the law. Recipients may include:

  • Shopify, which hosts the online store and provides ecommerce infrastructure and related services;
  • payment providers used at checkout;
  • shipping carriers and delivery providers used to fulfil your order;
  • FormSubmit, which processes commission-form submissions and any reference files you choose to upload;
  • professional advisers, service providers and public authorities where necessary or legally required.

Shopify may also process personal data for its own purposes in circumstances where it acts independently.

5. Shopify Network Intelligence

Shopify Network Intelligence is enabled for this store. Shopify may securely use customer data from this store together with data from other merchants to provide enhanced Shopify services, including improved personalization, store performance, fraud prevention and advertising-related services.

Where applicable, Shopify respects choices made through the store’s cookie-consent controls, Global Privacy Control signals and Shopify’s data-sharing opt-out tools.

6. International Data Transfers

Some service providers may process personal data outside the European Economic Area. Where data is transferred internationally and data-protection law requires safeguards, we rely on the safeguards made available by the relevant provider or otherwise required by applicable law, such as adequacy decisions or appropriate contractual safeguards.

7. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil contracts, respond to requests, comply with legal and accounting obligations, resolve disputes and protect legal rights. The appropriate retention period depends on the type of information and the reason it is being processed.

8. Cookies and Similar Technologies

The website may use cookies and similar technologies that are necessary for the store to function, as well as optional technologies for analytics, personalization or marketing where enabled.

Where applicable law requires consent, non-essential technologies are used on the basis of that consent. You can withdraw or change your choices at any time using the Cookie preferences link in the website footer.

9. Data Sharing and Targeted Advertising Choices

Depending on where you live, applicable privacy law may give you the right to opt out of certain uses of personal data that may be considered a “sale” or “sharing” of personal data, or processing for targeted advertising.

Where this right applies, you can use the Your privacy choices link in the website footer to submit your preference. Applicable Global Privacy Control signals may also be recognized.

10. Your Data-Protection Rights

Subject to the conditions set out in applicable law, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability, or to object to certain processing.

Where processing is based on consent, you may withdraw that consent at any time.

To exercise your rights, contact hello@cansurossi.com.

You also have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian data-protection authority.

11. Automated Decision-Making

Cansu Rossi does not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Service providers may use automated tools for matters such as fraud prevention and security under their own policies.

12. Commission Reference Files

If you upload photographs, images, PDFs or other reference material with a commission request, please only provide material that you are entitled to share. These files are used to review and respond to your commission request and, if a commission proceeds, to carry out the requested work.

13. Changes to This Policy

We may update this Privacy Policy when our services, providers or legal obligations change. The current version will be published with its latest update date.

14. Contact

For privacy questions or requests, contact hello@cansurossi.com.