Privacy policy
PRIVACY POLICY
Last updated: August 30, 2026
Bags and the City operates this store and website, including the information, content, features, tools, products, and services, in order to provide you, the customer, with an appropriate shopping experience (the “Services”). Bags and the City is supported by Shopify, which enables us to provide the Services.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase, or otherwise transact through the Services, or when you communicate with us.
Please read this Privacy Policy carefully.
PERSONAL INFORMATION WE COLLECT OR PROCESS
When we use the term “personal information,” we mean information that identifies or is reasonably linked to you or another person. Personal information does not include information collected anonymously or de-identified so that it cannot identify or be linked to you.
We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:
Contact information, including name, address, billing address, shipping address, phone number, and email address.
Financial information, including payment method information, transaction details, payment confirmation, and other information necessary to process payments. Full payment card details may be processed by our payment service providers and Shopify in accordance with their respective privacy policies and security measures.
Account information, where applicable, including username, password, preferences, and settings.
Transaction information, including the items you view, add to your cart, add to your wishlist, or purchase, return, exchange, or remove, as well as past transactions.
Communications with us, including information you provide when you contact us, such as through the contact form or other communication channels.
Device information, including information about your device, browser, or connection network, IP address, and other unique identifiers.
Usage information, including information about your interaction with the Services and how and when you interact with or browse the Services.
SOURCES OF PERSONAL INFORMATION
We may collect personal information from the following sources:
Directly from you, including when you create an account, visit or use the Services, make a purchase, communicate with us, or provide us with your personal information.
Automatically through the Services, including through your device when you use our products or services or visit our website, and through the use of cookies and similar technologies, in accordance with your preferences and the settings available to you.
From our service providers, including when we engage them to provide certain technology, payment, analytics, support, or other services on our behalf.
From our partners or third parties, where permitted by law.
HOW WE USE YOUR PERSONAL INFORMATION
Depending on how you interact with us or which Services you use, we may collect and use your personal information for the following purposes:
Providing and managing the Services. We use your personal information to provide the Services, process payments, fulfill orders, arrange shipping, manage returns and other transactions, and provide customer support.
Marketing and promotional communications. We use your personal information to send you marketing and promotional communications, such as newsletters, where permitted by applicable law and, where required, based on your consent. You may withdraw your consent or unsubscribe from promotional communications at any time.
Security and fraud prevention. We use your personal information to maintain the security of the Services and payments, detect and prevent fraud, abuse, or illegal activity, and protect our rights and those of our customers.
Communications with you. We use your personal information to respond to your requests, provide support, and maintain our business relationship with you.
Compliance with legal obligations. We use and retain personal information when necessary to comply with legal obligations, including tax, accounting, and other applicable requirements.
Protection of our rights. We may use personal information when necessary to enforce or defend our rights, enforce our terms, and prevent or manage disputes.
LEGAL BASES FOR PROCESSING
Bags and the City processes personal information based on the lawful grounds provided under applicable law, including:
Performance of a contract: when processing is necessary to manage an order, payment, shipment, return, or other activity related to the performance of the purchase contract.
Compliance with legal obligations: when processing is necessary to comply with tax, accounting, or other obligations under applicable law.
Consent: when processing requires your consent, such as for certain marketing activities and for sending promotional communications through newsletters.
Legitimate interests: when processing is necessary to ensure the security of the website and services, prevent fraud and abuse, manage and improve the operation of the store, respond to user requests, and protect the rights of Bags and the City, while respecting your fundamental rights and freedoms.
HOW WE DISCLOSE PERSONAL INFORMATION
In certain circumstances, we may disclose your personal information to third parties for purposes related to managing the Services and in accordance with this Privacy Policy.
We may share information:
With Shopify and service providers that perform activities on our behalf, such as technical management, payment processing, analytics, customer support, storage, order fulfillment, and shipping.
With business and marketing partners, when necessary to provide you with certain services or marketing communications, in accordance with applicable law and your preferences.
When you ask us or authorize us to disclose certain information to third parties, such as for shipping products or when you use third-party services and integrations.
When required by law, in connection with legal proceedings, requests from competent authorities, protection of our rights, or prevention of fraud and illegal activities.
RELATIONSHIP WITH SHOPIFY
The Services are supported by Shopify, which collects and processes personal information relating to your access to and use of the Services in order to provide and improve the Services.
Information you submit to the Services may be transmitted to and shared with Shopify and third parties that may be located in countries other than your own.
For more information about how Shopify uses your personal information and the rights you may have, you can consult Shopify’s Consumer Privacy Policy.
THIRD-PARTY WEBSITES AND LINKS
The Services may contain links to websites or other online platforms operated by third parties.
If you open links to websites that are not affiliated with or controlled by us, you may be required to accept their privacy policies and other terms and conditions. We are not responsible for the privacy or security practices of such third-party websites.
CHILDREN’S DATA
The Services are not intended for children, and we do not knowingly collect personal information from children under the age required by applicable law.
If a parent or guardian believes that a child has provided us with personal information, they may contact us using the contact details below to request its deletion.
DATA SECURITY AND RETENTION
We take reasonable technical and organizational measures to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.
However, no security measure is perfect or impenetrable, and we cannot guarantee absolute security.
The period for which personal information is retained depends on the purpose for which it was collected and the applicable legal requirements. We retain information for as long as necessary to provide the Services, manage our customer relationship, comply with legal obligations, resolve disputes, and protect our rights.
YOUR RIGHTS AND CHOICES
Depending on where you reside and to the extent provided by applicable law, you may have the right to:
Access the personal information we hold about you.
Request correction of inaccurate or incomplete personal information.
Request deletion of your personal information, where provided by law.
Request restriction of processing, where provided by law.
Object to processing, where provided by law, including processing for direct marketing purposes.
Receive your personal information in a structured format and, where applicable, request its portability to another controller.
Withdraw your consent when processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.
For marketing communications, you may also use the unsubscribe link included in our communications.
To exercise your rights, you can contact us using the contact details provided in the Contact section.
We may need to verify your identity before processing your request, to the extent permitted by law.
COMPLAINTS
If you have concerns or complaints about how we process your personal information, you can contact us using the contact details below.
You also have the right, where provided by applicable law, to lodge a complaint with the competent supervisory authority for the protection of personal data.
In Italy, the competent supervisory authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali).
INTERNATIONAL TRANSFERS
Your personal information may be transferred to, stored in, and processed in countries other than your own, including outside the European Economic Area.
When personal information is transferred to third countries, we use, where required, appropriate transfer mechanisms provided by applicable law, such as adequacy decisions or standard contractual clauses approved by the European Commission.
CHANGES TO THIS PRIVACY POLICY
We may periodically update this Privacy Policy to reflect changes to our practices, our Services, or applicable legal obligations.
The updated version will be published on the website and the date of the last update will be changed accordingly.
CONTACT
For questions about this Privacy Policy, our data protection practices, or to exercise your rights, you can contact us:
BAGS AND THE CITY SRL
Via Foinera 28
20831 Seregno MB
Italy
Phone: +39 389 184 8844
Email: bagsandthecity007@gmail.com
For purposes of applicable personal data protection laws, BAGS AND THE CITY SRL is the data controller of your personal information.