Free shipping on select orders Learn more
Free shipping on select orders Learn more
Last updated: 1 November 2026
This policy explains which personal data we collect when you visit gocciashoes.com, create an account or buy from us, why we collect it and what your rights are. It is written according to the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Italian privacy law (Legislative Decree 196/2003 as amended).
The data controller is Goccia S.n.c., Via Pellicceria 12/r, 50123 Florence, Italy, VAT number and tax code 05688750487 (“Goccia Shoes”, “we”, “us”).
For any question about your personal data you can write to info@gocciashoes.com or to our postal address.
When you place an order we collect your name, billing and shipping address, email address, phone number, the products you buy and the payment status. We use these data to process and deliver your order, to send you the emails about it (confirmation, shipping and tracking) and to handle returns, refunds and warranty requests. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Invoices and accounting records are kept to comply with tax law (Art. 6(1)(c) GDPR).
If you create an account we store your name, email address, password (encrypted), saved addresses, order history and wishlist, so that you can sign in, follow your orders and check out faster. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). You can ask us to delete your account at any time.
If you are signed in, your wishlist is saved in your account until you remove the products. If you are not signed in, it is saved only on your device, in a cookie that lasts 30 days from your last change (see our Cookie policy).
When you send us a request with the “Enquire” form on a product page or the “Email us” form on the contact page, we collect your name, email address, phone number (if you give it), your message and, for enquiries, the product reference. The request is sent to our email and saved in the website database. We use these data only to reply to you. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering you (Art. 6(1)(f) GDPR).
We send only service emails: order confirmation, shipping and tracking information, account emails (for example to reset your password) and our replies to your requests. These emails are sent from our own mail server. We do not send newsletters or promotional emails; if we start to do so, we will ask for your consent first.
Payments by credit or debit card, Apple Pay and Google Pay are processed by Stripe. Card details are entered directly on Stripe’s secure systems: we never see or store your full card number. Stripe may also process data about your device and transaction to prevent fraud.
With your consent, we use Google Analytics 4 to understand how our website is used (pages visited, device, approximate location, how you reached us) and Google Ads to measure the results of our advertising. We use Google Consent Mode: if you do not give consent, no analytics or advertising cookies are stored on your device and Google receives only limited signals without cookies, which it uses to produce aggregated statistics. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the “Cookie settings” link at the bottom of every page.
To protect the website and your account, our firewall (Wordfence) records data such as IP addresses of visits and sign-in attempts, and the sign-in, registration, checkout and contact forms are protected by Cloudflare Turnstile, which checks technical data of your browser to tell people from automated programs. Our hosting provider keeps server logs (IP address, date and time, pages requested) for security. Legal basis: our legitimate interest in the security of the website (Art. 6(1)(f) GDPR).
We share your data only with the companies we need to run our shop, which process them on our behalf or as independent controllers:
We never sell your personal data.
Some of these providers (for example Stripe, Google, Cloudflare and our hosting provider) may process data in the United States or in other countries outside the European Economic Area. In these cases the transfer is protected by the EU-US Data Privacy Framework, where the provider is certified, or by the Standard Contractual Clauses approved by the European Commission.
Under Articles 15 to 22 of the GDPR you have the right to access your data, to have them corrected or completed, to have them deleted, to restrict their processing, to receive them in a portable format and to object to their processing. Where the processing is based on your consent, you can withdraw it at any time, without affecting what was done before.
To exercise your rights, write to info@gocciashoes.com. We will reply within one month. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of the EU country where you live or work.
Giving us your data is necessary to buy from us or to create an account: without them we cannot process your order. Giving your data in the contact forms is optional, but we need at least your email address to reply.
We do not take decisions about you based solely on automated processing.
Our website is not intended for children under 16 and we do not knowingly collect their data.
For information about the cookies we use, please read our Cookie policy.
We may update this policy, for example when we add new services. The date of the last update is shown at the top of this page; for important changes we will also inform you on the website.
