Privacy policy

STUDIO96 WATCHES
PRIVACY POLICY

Version v1 | Last updated: 3 September 2026 | Controller established in Italy

Studio96 Watches ("Studio96", "we", "us" or "our") operates studio96watches.com and the related online store, content, tools, products, customer-support channels and services (the "Services"). Studio96 Watches is a trading brand operated by Modhousewatches di Lorenzo Cinciripini. The store is powered by Shopify, which provides the ecommerce infrastructure used to offer the Services.

This Privacy Policy explains how personal information is collected, used, retained and disclosed when you visit or use the Services, make a purchase or other transaction, contact us, request support, return a product, make a warranty claim, or otherwise interact with Studio96. If there is a conflict between the Terms of Service and this Privacy Policy regarding the collection, use or disclosure of personal information, this Privacy Policy controls for that privacy issue.

Nothing in this Privacy Policy limits rights granted by applicable data-protection law. Privacy rights are subject to the conditions, exceptions and limitations provided by applicable law.

1. Data controller and contact details

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR and other applicable data-protection laws, the data controller for Studio96 processing activities is:

Controller: Modhousewatches di Lorenzo Cinciripini, trading as Studio96 Watches

Address: Via Salaria 83, 63077 Monsampolo del Tronto (AP), Italy

VAT / Tax ID: IT02598250443

REA: AP - 313437

Email: info@studio96watches.com

PEC: lorenzo.cinciripini@pec.it

Website: studio96watches.com

2. Personal information we collect or process

"Personal information" means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymized or de-identified so that it can no longer reasonably identify you. Depending on how you interact with the Services and where you live, we may collect or process the following categories:

· Contact and identity details, including name, billing address, shipping address, telephone number, email address and other contact details you provide.

· Order and transaction information, including products viewed, cart and wishlist activity, products purchased, returned, exchanged or cancelled, order history, selected watch configuration, paid add-ons, order number, transaction status and related records.

· Payment information, including payment method, payment confirmation, transaction identifiers, billing information and payment-provider records. Full payment-card details are generally handled by Shopify and/or payment providers rather than stored directly by Studio96, except to the extent a provider makes particular information available to us.

· Account information, including login details, account preferences, settings and account activity where customer accounts are enabled.

· Customer-support and communications data, including emails, messages, support requests, return and warranty communications, photographs, videos, screenshots and information you voluntarily provide to us.

· Return, warranty and dispute evidence, including RMA information, returned-parcel tracking, inspection photographs or videos, product-condition records, configuration records, shipping evidence, carrier information, production or quality-control records made available to us, and payment-dispute or chargeback correspondence.

· Device and technical information, including IP address, browser type, device information, network connection, unique identifiers, cookies and similar technologies.

· Usage information, including how and when you interact with the website, pages viewed, clicks, navigation, referring pages and other activity on the Services.

· Marketing and preference information, including communication preferences, consent choices and advertising or personalization preferences.

· Fraud-prevention and security information, including risk signals, authentication information, payment-verification results and information reasonably necessary to investigate suspicious or abusive activity.

3. Sources of personal information

We may collect personal information from:

· you directly, including at checkout, through an account, through the configurator, when you contact support, submit a return or warranty request, or otherwise provide information;

· the Services automatically, including through cookies, pixels, local storage, device signals and similar technologies;

· Shopify and payment providers, where they provide information necessary to operate the store, process transactions, manage risk or provide enhanced services;

· service providers and business partners, including production, assembly, quality-control, fulfilment, logistics, shipping, customs, technology, analytics, marketing and customer-support providers;

· carriers, delivery partners and payment-dispute participants, including acquiring banks, issuing banks, card networks and dispute-resolution providers where relevant; and

· publicly available sources or other third parties where permitted by applicable law and reasonably necessary for fraud prevention, legal compliance or dispute handling.

4. How we use personal information

Depending on the interaction and applicable law, we may use personal information for the following purposes:

Providing, tailoring and improving the Services.

· process payments and transactions;

· record and fulfil the watch configuration selected at checkout;

· allocate components, arrange production, assembly, quality control, packaging and delivery;

· manage customer accounts, preferences and order history;

· process returns, exchanges, cancellations, refunds, repairs and warranty claims;

· provide customer support and respond to enquiries;

· maintain and improve the website, store, products and customer experience; and

· recommend products or configurations where permitted by law.

Security, fraud prevention and protection of the business.

· authenticate transactions and accounts;

· detect, prevent and investigate fraud, payment abuse, unauthorized transactions, account misuse, malicious activity and policy violations;

· verify order, payment and delivery information where reasonably necessary;

· protect customers, Studio96, Shopify, payment providers and other parties from security or financial risk; and

· maintain evidence reasonably necessary to establish what was ordered, paid for, produced, shipped, delivered, returned or disputed.

Returns, disputes, chargebacks and legal claims.

· investigate complaints, return requests, alleged defects, warranty claims and delivery disputes;

· compare a claim against the recorded configuration, order confirmation, tracking, carrier information, return records and inspection evidence;

· respond to, defend or contest payment disputes and chargebacks where Studio96 has a lawful basis to do so;

· share relevant evidence with payment processors, acquiring banks, issuing banks, card networks, dispute-resolution providers, insurers, professional advisers and competent authorities where necessary and lawful; and

· establish, exercise or defend legal claims and enforce applicable contracts and policies.

Marketing and advertising.

· send promotional communications where permitted by law;

· measure advertising and marketing performance;

· show or support personalized advertising where the required consent or other lawful basis exists; and

· manage opt-outs, consent choices and marketing preferences.

Legal and regulatory purposes.

· comply with accounting, tax, consumer-protection, data-protection and other legal obligations;

· respond to valid legal process, governmental or regulatory requests; and

· maintain records required by law or reasonably necessary for compliance and accountability.

5. Legal bases for processing in the EEA and UK

Where the GDPR, UK GDPR or equivalent law applies, we process personal information only where a lawful basis is available. Depending on the purpose, we generally rely on the following bases:

· Performance of a contract or steps requested before entering into a contract: for checkout, payment processing, recording the selected configuration, order fulfilment, shipping, customer support directly related to the order, returns, refunds, exchanges and warranty administration.

· Compliance with a legal obligation: for tax and accounting records, legally required consumer documentation, responses to lawful requests, and other processing required by applicable law.

· Legitimate interests: where necessary for fraud and risk prevention, payment verification, network and store security, operational administration, reasonable analytics and service improvement, preventing abuse, managing complaints, documenting transactions, handling payment disputes and chargebacks, enforcing our terms and policies, and establishing, exercising or defending legal claims, provided those interests are not overridden by your rights and freedoms.

· Consent: where we are required to obtain consent, including for certain non-essential cookies, tracking technologies, personalized advertising or promotional communications. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

Where we rely on legitimate interests, we consider the nature of the information, the purpose of processing, the relationship with the customer, reasonable expectations, the impact on the individual and available safeguards. You may have the right to object to certain processing based on legitimate interests.

6. How we disclose personal information

We may disclose personal information where reasonably necessary for the purposes described in this Policy, including:

· to Shopify, which provides and supports the ecommerce platform and related services;

· to payment processors, banks, card networks and financial-service providers for payment processing, fraud prevention, refunds and disputes;

· to production, assembly, quality-control, service, fulfilment, logistics, shipping and customs partners to produce, prepare, service and deliver orders;

· to technology, cloud, IT, analytics, customer-support and professional-service providers that process information for business operations;

· to marketing and advertising partners where permitted by applicable law and subject to applicable consent or opt-out requirements;

· when you direct or consent to disclosure, such as when you request delivery, use a third-party integration or submit information to an external platform;

· to professional advisers, insurers, auditors, accountants or legal counsel where reasonably necessary;

· to payment-dispute participants, including acquiring banks, issuing banks, card networks and dispute-resolution providers, where necessary to investigate or respond to a dispute or chargeback;

· in connection with a merger, acquisition, financing, restructuring, insolvency, sale of assets or similar business transaction, subject to applicable law; and

· to competent courts, authorities, regulators or law-enforcement bodies where required by law or necessary to establish, exercise or defend legal rights.

We seek to limit disclosures to information reasonably necessary for the relevant purpose. Service providers acting on our behalf are expected to process personal information under appropriate contractual and confidentiality obligations where required by law.

7. Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information relating to access to and use of the Services in order to provide and improve the ecommerce platform and related services. Information submitted through the Services may be transmitted to Shopify and to third parties located in countries other than the country in which you live.

Depending on the Shopify services and privacy settings enabled for the store, Shopify may act as a processor/service provider on Studio96 instructions for some activities and may act as an independent controller/business for certain enhanced services, including features that use information from interactions across Shopify and participating merchants. Shopify is responsible for its independent processing activities and for responding to applicable rights requests relating to those activities.

You can learn more about Shopify privacy practices and available privacy controls through Shopify's Consumer Privacy Policy and Privacy Portal. Studio96 may also provide a data-sharing opt-out page through the Services where required or supported by applicable law.

8. Cookies, analytics and advertising technologies

We and our service providers may use cookies, pixels, local storage and similar technologies to operate the website, remember preferences, understand usage, maintain security, measure performance and support marketing or advertising.

Where applicable law requires consent for non-essential cookies or tracking technologies, those technologies should be activated in accordance with the consent choices made through the cookie banner or other privacy controls. You may change available choices through the privacy controls made available on the Services.

Depending on where you live, you may have the right to opt out of the sale or sharing of personal information or processing for targeted advertising. Where available, the Studio96 data-sharing opt-out page and Global Privacy Control (GPC) signal may be used for these purposes. Other browser "Do Not Track" signals may not be recognized unless required by applicable law.

9. International transfers

Studio96 sells worldwide and uses service, production, fulfilment, technology and logistics providers that may operate outside the country where you live, including outside the European Economic Area (EEA) and the United Kingdom. Personal information may therefore be transferred, stored or processed internationally.

Where personal information protected by the GDPR or UK GDPR is transferred to a country that has not been recognized as providing an adequate level of protection, we use or require an appropriate transfer mechanism where applicable, such as the European Commission Standard Contractual Clauses, the relevant UK transfer mechanism, contractual safeguards, supplementary measures or another mechanism recognized by applicable law.

International transfers are limited to purposes described in this Policy and to information reasonably necessary for those purposes.

10. Security

We use reasonable administrative, technical and organizational safeguards appropriate to the nature of the information and the risks involved. However, no system, transmission method or storage environment can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of account credentials. Do not send sensitive or confidential information through insecure channels. If you believe an account or transaction has been compromised, contact us promptly.

11. Retention of personal information

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including contract performance, customer service, legal compliance, accounting, fraud prevention, warranty administration, dispute resolution and the establishment, exercise or defence of legal claims.

The applicable period depends on the category and purpose. In particular:

· order, transaction, invoice and related business records may generally be retained for up to 10 years from the relevant transaction or last required registration where necessary to comply with Italian accounting and record-keeping obligations;

· order-related correspondence and records relevant to contractual performance may be retained for the period required by law and, where appropriate, for the time reasonably necessary to document the business relationship;

· chargeback, fraud, complaint, return, warranty and dispute records may be retained for the duration of the matter and afterwards for the applicable limitation period or as otherwise reasonably necessary to establish, exercise or defend legal claims;

· account information may be retained while the account is active and afterwards where required for legal, security, fraud-prevention or record-keeping purposes;

· marketing information is retained until consent is withdrawn, an opt-out is exercised, or the information is no longer reasonably necessary, subject to retention of minimal suppression data where necessary to respect an opt-out; and

· cookie and technical-data retention periods vary by technology and are described or controlled, where applicable, through the cookie/privacy settings.

Where a fixed period cannot reasonably be determined in advance, we use criteria such as legal retention duties, limitation periods, active disputes, security requirements and the continuing need for the information. Data may be anonymized instead of deleted where lawful and appropriate.

12. Third-party websites and links

The Services may contain links to websites, social networks or other online platforms operated independently by third parties. Their privacy, security and content practices are governed by their own policies. Studio96 is not responsible for independent third-party websites or services except to the extent required by applicable law.

Information you choose to post publicly or semi-publicly on third-party platforms may be visible and usable by others according to those platforms' rules and your settings.

13. Children's data

The Services are not intended for use by children below the age at which they may independently enter into the relevant transaction or consent to applicable processing under local law. We do not knowingly seek to collect personal information from children for purposes inconsistent with applicable law.

If you are a parent or guardian and believe a child has provided personal information unlawfully, contact us using the details below. As of the effective date of this Policy, we do not have actual knowledge that we "sell" or "share" personal information of individuals under 16 years of age as those terms are defined under applicable US privacy laws.

14. Your rights and choices

Depending on where you live and subject to applicable conditions, exceptions and limitations, you may have some or all of the following rights:

· Access / know: request access to personal information we hold about you and, where applicable, information about how it is processed.

· Correction: request correction of inaccurate or incomplete personal information.

· Deletion / erasure: request deletion of personal information where the legal conditions are met.

· Portability: receive certain personal information in a structured, commonly used and machine-readable format and, where applicable, request transfer to another controller.

· Restriction: request restriction of processing in circumstances provided by law.

· Objection: object to processing based on legitimate interests in circumstances provided by law, and object at any time to processing for direct marketing.

· Withdraw consent: withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

· Opt out of sale, sharing or targeted advertising: where applicable under local law, use available privacy controls, the data-sharing opt-out page or recognized signals such as GPC.

· Complain: lodge a complaint with a competent data-protection authority.

These rights are not absolute. We may refuse, restrict or defer a request where permitted or required by law, including where information must be retained for legal obligations, fraud prevention, security, the establishment or defence of legal claims, or where an exception applies.

We may need to verify your identity before acting on a request. An authorized agent may act on your behalf where permitted by law, subject to appropriate proof of authorization and identity verification. We will not unlawfully discriminate against you for exercising privacy rights.

15. Marketing communications

Where you receive promotional emails or other direct marketing from Studio96, you may opt out using the unsubscribe mechanism in the communication or by contacting us. An opt-out from promotional communications does not prevent us from sending non-promotional messages necessary for an existing order, account, return, warranty matter, security issue or legal obligation.

16. Complaints and supervisory authorities

If you have a complaint about Studio96 privacy practices, contact us first using the details below so that we can investigate the matter.

If the GDPR applies, you also have the right to lodge a complaint with a competent supervisory authority. Because the Studio96 controller is established in Italy, the Italian supervisory authority is the Garante per la protezione dei dati personali. Depending on where you live, you may also be entitled to contact the supervisory authority in your Member State or other competent jurisdiction.

17. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, Shopify services, suppliers, privacy settings, technologies, legal requirements or other operational reasons. We will publish the revised Policy, update the "Last updated" date and provide any additional notice required by applicable law.

A revised Privacy Policy does not retroactively create a lawful basis for processing that required a different basis at the time the processing occurred.

18. Contact

For privacy questions, rights requests or complaints, contact:

Modhousewatches di Lorenzo Cinciripini, trading as Studio96 Watches

Via Salaria 83, 63077 Monsampolo del Tronto (AP), Italy