Privacy and cookie policy
Last updated: October 15, 2026
This is a courtesy translation; in case of discrepancy the Italian text prevails. Italian version
1. Data controller
Pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR), the data controller is LC STUDIO S.R.L.S., Via Palmiro Togliatti 17, 70015 Noci (BA), Italia, VAT no. 09051620723. For any question about personal data: info@rual.it.
2. What data, why and for how long
- Data
- Account: name, email, password (stored encrypted)
- Purpose
- Managing the personal area and orders
- Legal basis
- Contract (art. 6.1.b)
- Retention
- Until the account is deleted
- Data
- Orders: name, shipping address, phone, email, products, notes
- Purpose
- Preparing and shipping the order, support, returns
- Legal basis
- Contract and tax obligations (art. 6.1.b and c)
- Retention
- 10 years, as required by law for accounting records
- Data
- Payment: outcome and amount (never card details)
- Purpose
- Collecting payment and, if needed, refunding
- Legal basis
- Contract (art. 6.1.b)
- Retention
- With the order
- Data
- Secret list (newsletter): email and language
- Purpose
- Sending news and previews
- Legal basis
- Consent, confirmed by clicking the link received by email (art. 6.1.a)
- Retention
- Until you ask to be removed
- Data
- Contact form: name, email, message
- Purpose
- Replying
- Legal basis
- Request of the data subject (art. 6.1.b)
- Retention
- 24 months
- Data
- Visit statistics: page viewed, language, country (no IP address, no cookies)
- Purpose
- Understanding which pages and products are of interest
- Legal basis
- Legitimate interest (art. 6.1.f)
- Retention
- 24 months
- Data
- Technical request data (IP address, browser)
- Purpose
- Website security
- Legal basis
- Legitimate interest (art. 6.1.f)
- Retention
- A few days, in the hosting provider’s logs
3. Who receives the data
Data is processed by the shop’s staff and by the providers that help us run the site, appointed as data processors:
- Vercel Inc. (website hosting)
- Supabase (database, accounts and personal area)
- Stripe (card payments)
- Resend (sending confirmation, subscription and welcome emails)
- Aruba (the info@rual.it mailbox)
- Poste Italiane (order delivery)
- Our accountant, for tax obligations
Some providers are based in the United States. Data transfers take place with the safeguards provided by the GDPR: the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. Data is never sold or passed on to anyone for advertising purposes.
4. Your rights
You may at any time request access to your data, its rectification or erasure, restriction of its use, receipt in a readable format, object to its processing and withdraw your consent to the newsletter (arts. 15–22 GDPR), by writing to info@rual.it. If you believe your data is being processed incorrectly, you may lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of your country.
5. Cookies
rual.store only uses technical cookies and storage, necessary for the site to work, which under the Italian Data Protection Authority’s guidelines do not require consent:
- the chosen language;
- the login session for the personal area;
- the cart and favourites, stored in the browser;
- the shop admin session, used only by staff.
The site uses no profiling or advertising cookies and installs no third-party cookies. During payment you move to Stripe’s page, which uses its own cookies to prevent fraud. Links to Instagram and Google Maps lead to external sites, with their own privacy rules.