Privacy Policy

The data controller responsible for your personal data is:

Wzzptom Productions
Italy
info@wzzptom.com

We collect the following categories of personal data:

• —Account & Order Data: First name, last name, email address, and purchase history, collected when you create an account or make a purchase.
• —Contact Data: Messages and inquiries you submit through our contact form.
• —Usage Data: Pages visited, time on site, and browser type, collected automatically via analytics provided by our hosting and e-commerce platforms.

We do not collect sensitive personal data such as health information, racial or ethnic origin, or financial data beyond what is necessary to process payments (which is handled by our third-party processors).

Your personal data is used for the following purposes:

• —To process and fulfill your orders and provide download access to purchased products.
• —To manage your account and provide customer support.
• —To send transactional emails (order confirmations, download links, account notifications).
• —Promotional communications: If you sign up to our mailing list, we send you occasional marketing emails about new kit releases, exclusive discounts and industry news. We may also send them to you if you have bought from us before, about products similar to the ones you purchased. You can unsubscribe at any time using the "Unsubscribe" link at the bottom of every email, and we stop.
• —To improve our website, products, and services.

We process your personal data on the following legal bases:

• —Contract performance: Processing necessary to fulfill your orders.
• —Consent: For analytics and advertising cookies, and for marketing emails to people who signed up to our list. You may withdraw it at any time.
• —Legitimate interests: To improve our services, prevent fraud, and send existing customers information about products similar to those they already bought (you can opt out from any email).

We use the following trusted third-party services to operate our Site. Each has its own privacy policy and handles data in accordance with applicable law:

• —Shopify — E-commerce platform and payment processing.
• —Formspree — Contact form submission processing.
• —Vercel — Website hosting and content delivery.
• —Klaviyo — Email marketing and sign-up forms. Used only if you subscribe.
• —Meta (Facebook, Instagram) — Advertising measurement via the Meta Pixel and Conversions API. Used only with your consent (see Section 8).
• —Google Analytics — Website usage statistics. Used only with your consent (see Section 8).

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

Transfers outside the EU/EEA. Some of these providers — in particular Meta, Google, Klaviyo, Shopify and Vercel — are established in, or process data in, the United States and other countries outside the European Economic Area. Those transfers take place under the European Commission's Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework. You can ask us for details of the safeguards in place by writing to info@wzzptom.com.

We retain your personal data for as long as your account is active or as necessary to provide our services, comply with legal obligations, and resolve disputes. Order records are retained for a minimum of 5 years for accounting and tax compliance purposes.

You may request deletion of your account and associated data at any time by contacting us at info@wzzptom.com. Note that certain data may be retained if required by law.

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• —Access: Request a copy of the personal data we hold about you.
• —Rectification: Request correction of inaccurate or incomplete data.
• —Erasure: Request deletion of your personal data ("right to be forgotten").
• —Objection: Object to processing based on legitimate interests.
• —Portability: Receive the data you provided to us in a structured, machine-readable format, or have it sent to another provider.
• —Restriction: Ask us to limit how we process your data while a request or objection is being resolved.
• —Withdraw consent: Opt out of marketing emails at any time via the unsubscribe link.
• —Complaint: Lodge a complaint with your national data protection authority (in Italy: Garante per la protezione dei dati personali).

To exercise any of these rights, contact us at info@wzzptom.com. We will respond within 30 days.

Essential cookies. Required for the Site to work — keeping your cart between pages, keeping you logged in, and letting Shopify process your order securely. These run always and cannot be switched off.

Analytics and advertising cookies. These run only if you accept them in the cookie banner. If you choose "Essential only", or make no choice at all, nothing is sent to the providers below.

• —Meta Pixel (Facebook, Instagram): records which pages and kits you view, what you add to your cart, and completed purchases, so we can measure our advertising and show relevant ads. This includes "advanced matching", where details you enter at checkout — such as your email address — are hashed before being shared with Meta.
• —Meta Conversions API: our store also sends completed orders to Meta from Shopify's servers, not only from your browser. The same purchase data is involved; the server route simply makes the measurement more reliable.
• —Google Analytics: aggregate statistics on how the Site is used, so we can improve it.
• —Klaviyo: powers our email sign-up forms and links your subscription to the emails we send you.

These providers may process your data outside the EU/EEA, including in the United States, under the safeguards described in Section 5. You can withdraw or change your choice at any time by clearing this site's data in your browser, which makes the banner appear again. You can also opt out of Meta's use of your activity through your Facebook or Instagram settings, under "Off-Facebook Activity".

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data is transmitted over HTTPS.

Payments are processed exclusively through Shopify's PCI-DSS compliant infrastructure. We never store your credit card details on our servers.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Updates will be posted on this page with a revised "Last updated" date. Your continued use of the Site after any changes constitutes acceptance of the updated Policy.

For any privacy-related questions, data requests, or concerns, please contact us at:

Wzzptom Productions
Italy
info@wzzptom.com