1. Introduction

This Privacy Policy explains how The Quiet Room, operated by
FUTURA S.r.l., collects and uses personal data
through thequietroom.eu.

The website is intended for adult users and customers located primarily in
Italy and the European Economic Area.

2. Information we collect

Depending on how you use the website, we may collect:

• name and surname;
• email address and telephone number;
• billing and shipping addresses;
• account and login information;
• order, payment and transaction information;
• wishlist and back-in-stock requests;
• messages sent through contact, return or warranty forms;
• photographs or videos submitted for returns or warranty claims;
• product reviews and display names;
• newsletter preferences;
• abandoned-cart information;
• technical information such as IP address, browser, device and website activity.

Full payment-card details are not stored directly by The Quiet Room and are
handled by the selected payment provider.

3. How information is used

We use personal data to:

• process, fulfil and deliver orders;
• manage payments, customer accounts and saved payment methods;
• provide customer support;
• manage returns, refunds and warranties;
• send order, shipping and back-in-stock notifications;
• maintain wishlists and verified product reviews;
• send one abandoned-cart reminder when applicable;
• send The Quiet Letter and other permitted marketing communications;
• measure website and advertising performance;
• protect the website from fraud, abuse and unauthorised access;
• comply with tax, accounting, consumer-protection and other legal obligations.

Processing is based, depending on the situation, on the performance of a
contract, compliance with legal obligations, your consent or our legitimate interests.

Marketing and non-essential tracking technologies are used only where
permitted and, where required, after consent.

For more information about cookies and advertising trackers, please see our
separate Cookie Policy.

4. Service providers

We may share personal data only where necessary with providers supporting our
business, including:

• IONOS — hosting, email and backups;
• WordPress, WooCommerce, Elementor and Automattic services;
• WooPayments, PayPal and Klarna — payments;
• dropshipping suppliers and couriers — order fulfilment and delivery;
• Google — Google Sign-In, Google Analytics, Google Ads and Google Places;
• Meta / Instagram — embedded content and advertising;
• TikTok — advertising and remarketing;
• Complianz — cookie consent management;
• other technical or professional providers where required.

Some dropshipping suppliers may be located outside the EEA, including in
China. Where personal data is transferred outside the EEA, appropriate
safeguards required by applicable data-protection law are used.

Suppliers and couriers receive only the information reasonably necessary to
fulfil, deliver or manage the relevant order.

5. Retention and rights

We keep personal data only for as long as necessary for the purpose for which
it was collected and for any additional period required by law.

In particular:

• ordinary contact requests are generally retained for up to 6 months;
• customer accounts remain active until deletion is requested;
• order and accounting information may be retained for the periods required by law;
• return, refund and warranty information is retained while necessary to manage the request and any related legal obligations;
• wishlist information is retained while the account remains active;
• back-in-stock data is retained until the requested notification is sent or no longer required;
• newsletter data is retained until you unsubscribe or withdraw consent;
• Google Analytics user and event data is configured with a 14-month retention period.

Under the GDPR, you may have the right to access, correct, delete or restrict
your personal data, request data portability, object to certain processing
and withdraw consent at any time.

You may also lodge a complaint with the
Garante per la protezione dei dati personali
or another competent supervisory authority.

6. Contact

For questions about this Privacy Policy or to exercise your privacy rights,
contact: info@thequietroom.eu