PRIVACY POLICY

Last updated: 27 October 2026

1. Introduction

L’Isola Saporita (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and share personal data when you visit www.lisola-saporita.com, purchase products through our online shop, contact us or otherwise interact with our website.

We process personal data in accordance with Regulation (EU) 2016/679, known as the General Data Protection Regulation (“GDPR”), and applicable Italian data protection legislation, including Legislative Decree No. 196/2003, as amended.

2. Who is the controller of your personal data?

The controller responsible for processing your personal data is:

Business name: L'Isola Saporita di Lo Cascio Giuliana
VAT number: 05338670820
Address: Via Vittorio Emanuele, 504, 90134 Palermo (PA), Italy
Email: lisolasaporita@gmail.com
Telephone: +39 091 652 8539

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us using the details above.

3. What personal data do we collect?

Depending on how you interact with our website, we may collect the following categories of personal data.

Identification and contact data: first name, surname, email address, telephone number and billing address.

Order and delivery data: products purchased, order number, delivery address, delivery instructions, order status and shipping and delivery information.

Payment-related data: payment status, transaction references and information made available to us by our payment service providers. Full payment card details may be processed directly by the relevant payment service provider.

Customer account data: login credentials and information associated with your account, if you choose to register on our website.

Communications: information you provide when contacting us by email, telephone or through forms on our website.

Technical and usage data: IP address, device and browser information, activity on our website, and information collected through cookies or similar technologies, where applicable.

Marketing preferences: newsletter subscription status, preferences regarding marketing communications and records of consent provided, where applicable.

We collect and process personal data only to the extent necessary for the purposes described in this Privacy Policy and in accordance with applicable law.

4. How do we collect your personal data?

We collect personal data when you:

Place an order through our online shop.
Create or use a customer account.
Contact us with a question, request for assistance or complaint.
Subscribe to our newsletter or consent to receive promotional communications.
Browse our website, during which technical data and information may be collected through cookies and similar technologies.
Interact with third-party services integrated into our website.

We may also receive relevant information from service providers involved in processing payments, managing orders, delivering products and operating our website.

5. Why do we use your personal data?

We process your personal data for the following purposes.

5.1 Order processing and fulfilment

We use your data to receive and manage purchases, process payments, send order confirmations, arrange shipping, provide delivery updates, manage returns and refunds, and respond to order-related enquiries.

Legal basis: Performance of a contract to which you are a party, or taking steps at your request before entering into a contract.

5.2 Customer service

We use your data to respond to questions, requests, complaints and other communications, and to provide assistance relating to purchases.

Legal basis: Performance of a contract, where relevant, or our legitimate interest in responding to enquiries and operating our business, while respecting your rights and freedoms.

5.3 Accounting and legal obligations

We use the necessary data to maintain accounting records, fulfil tax obligations, issue invoices where required, and comply with applicable laws or requests from competent authorities.

Legal basis: Compliance with a legal obligation.

5.4 Website operation and security

We use the necessary data to operate, maintain and secure our website, prevent fraud, resolve technical issues, and protect our business and customers.

Legal basis: Our legitimate interests, where applicable, and compliance with relevant legal obligations.

5.5 Newsletter and marketing communications

We may use your personal data to send you newsletters, promotional offers, updates and information about L'Isola Saporita products through the email marketing service provided by Wix.

Where required by applicable law, we will send promotional communications only after obtaining your consent. Where necessary, we will record and retain information relating to your consent to document your subscription.

You can withdraw your consent or unsubscribe from promotional communications at any time by using the unsubscribe link included in our emails or by contacting us at lisolasaporita@gmail.com.

Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

Refusing consent to promotional communications does not prevent you from purchasing our products.

Legal basis: Your consent, where required by law, or another legal basis permitted under applicable legislation.

5.6 Website analytics

We may use analytics features provided by Wix to understand how our website is used, monitor its performance and identify technical issues.

The use of cookies or similar technologies for analytics purposes depends on the settings actually enabled on our website.

Where consent is required for these technologies, they will be activated only after valid consent has been obtained. Analytics tools that may be used without consent will be employed only where all requirements under applicable law are met.

Legal basis: Consent, where required, or another applicable legal basis for processing that does not require consent.

6. What information is required?

Certain information, such as your name, contact details, billing information and delivery address, is necessary to process and deliver an order.

If you do not provide the information necessary for a purchase or delivery, we may be unable to complete your order.

Providing data for optional promotional communications is voluntary. Refusing consent to marketing communications does not prevent you from purchasing our products.

7. Who may receive your personal data?

We may share your personal data, to the extent necessary for the purposes described in this Privacy Policy, with the following categories of recipients.

Wix.com: The platform provider used to host and operate our website and online shop, including tools for managing orders and customer accounts.

Wix Email Marketing: We use Wix's email marketing service to manage newsletter subscriptions and send promotional communications. Wix may process the personal data necessary to provide this service, in accordance with its applicable roles and terms.

Wix Payments and PayPal: The payment service providers available on our website. These providers may process the data necessary to process payments, prevent fraud and fulfil their legal obligations.

Couriers and shipping companies: To arrange and complete order deliveries and provide shipment tracking information, where available.

Accounting, tax and professional advisers: Where necessary to comply with legal obligations or obtain professional services.

IT and security service providers: Where their involvement is necessary to operate, maintain or protect our website.

Public authorities and judicial bodies: Where disclosure is required by law or necessary to establish, exercise or defend a legal claim.

Service providers may process personal data according to their respective roles and contractual and legal obligations. In particular, some providers may act as data processors on our behalf, while others may act as independent data controllers for specific activities.

The actual recipients depend on the services and integrations enabled on our website.

We do not sell our customers' personal data.

8. Wix hosting and international data transfers

Our website is hosted on the Wix platform. Wix and its service providers may process personal data on our behalf or for their own purposes, depending on the service used and their respective roles.

As we also sell products to customers outside Italy, personal data may be shared with recipients in other countries when necessary to manage orders, payments, shipping and customer service.

Personal data may also be processed or stored in countries outside the European Economic Area (EEA), depending on the services used and the relevant infrastructure.

Where a transfer of personal data to a country outside the EEA is subject to Chapter V of the GDPR, the transfer will be based on a valid legal mechanism, such as an adequacy decision of the European Commission or appropriate safeguards, where required.

For further information about Wix's processing of personal data, please consult Wix's Privacy Policy:

https://www.wix.com/about/privacy

For information about PayPal's processing of data, you can consult the Privacy Statement available on PayPal's official website.

9. How long do we retain personal data?

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account applicable legal obligations and retention periods.

In particular:

Order and accounting records: For the periods required under applicable Italian accounting and tax legislation.

Customer service correspondence: For the time necessary to handle and resolve the enquiry and, where necessary, to protect our rights in the event of a dispute.

Customer account information: For as long as the account remains active and for any additional period justified by legal obligations or the management of claims and disputes.

Marketing data: Until you withdraw your consent or unsubscribe, subject to the retention of any minimum data necessary to document the withdrawal, respect objections or comply with legal obligations.

Cookies and consent records: For the period necessary for their respective purposes, in accordance with applicable legal requirements and the settings of the services used.

When the applicable retention periods expire, personal data will be deleted or anonymised unless a legal obligation or legitimate need to protect legal rights requires further retention.

10. Cookies and similar technologies

Our website may use cookies and similar technologies to enable the online shop to function, maintain security, remember preferences and, where applicable, analyse website usage.

Technical and strictly necessary cookies

These cookies may be used without consent when they are genuinely necessary to provide a service requested by the user or enable the website to function, in accordance with applicable law.

Analytics cookies

We may use analytics tools provided by Wix to understand how our website is used and improve its performance.

Analytics cookies will be used without consent only where all requirements under applicable law are met. Otherwise, consent will be requested before they are activated.

Third-party cookies and technologies

Some website features, including integrated payment services or other external tools that may be enabled, may involve the use of technologies operated by third parties.

The actual presence of these technologies depends on the website configuration and the services used.

You can manage your preferences through the cookie banner and any preference-management tools available on our website. You can also change your browser settings, bearing in mind that disabling certain cookies may affect some online shop features.

For detailed information about the cookies actually used, their purposes, providers and retention periods, please consult our Cookie Policy, available on our website.

11. Your data protection rights

Subject to the conditions and limitations set out in the GDPR and applicable law, you have the right to:

Access your personal data and obtain information about how it is processed.
Request the correction of inaccurate or incomplete personal data.
Request the deletion of your personal data in the circumstances provided for by law.
Request the restriction of processing in the circumstances provided for by law.
Object to processing based on legitimate interests, where permitted by law.
Object at any time to the processing of your personal data for direct marketing purposes.
Request data portability where the requirements of the GDPR are met.
Withdraw your consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority if you believe that the processing of your personal data infringes applicable law.

To exercise your rights, you can contact us at lisolasaporita@gmail.com.

We may ask you for additional information strictly necessary to verify your identity before acting on your request.

We will respond within the time limits required by the GDPR, normally within one month of receiving your request. Where permitted by law, this period may be extended. If this happens, we will inform you of the extension and the reasons for it.

Official website of the Italian Data Protection Authority:

https://www.garanteprivacy.it/

12. Data security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.

Security measures are adopted taking into account the nature of the data, the risks associated with processing and the obligations imposed by applicable law.

No method of electronic transmission or storage can guarantee absolute security. We therefore undertake to adopt reasonable and appropriate measures to protect the information entrusted to us.

13. Children's privacy

Our website is intended for the general customer population and is not specifically directed at children for the purpose of collecting their personal data.

Where the processing of children's personal data requires specific conditions, authorisations or safeguards under applicable law, we will comply with those requirements.

If you believe that a child has provided personal data in breach of applicable law, you can contact us so that we can assess the situation and take appropriate action.

14. Third-party websites and services

Our website may contain links to websites or services operated by third parties, including payment service providers.

These parties may process personal data in accordance with their own privacy notices and procedures. We are not responsible for processing carried out independently by third parties outside our control.

We recommend reviewing the relevant privacy notices when using external services.

15. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our business, website, services or applicable law.

The updated version will be published on this page, together with the relevant revision date.

We encourage you to review this page periodically to stay informed about how we process your personal data.

16. Contact us

For questions, requests or complaints relating to this Privacy Policy or our processing of personal data, you can contact us using the following details:

L'Isola Saporita di Lo Cascio Giuliana
Address: Via Vittorio Emanuele, 504, 90134 Palermo (PA), Italy
Email: lisolasaporita@gmail.com
Telephone: +39 091 652 8539