Personal Data Processing Policy (Privacy Policy)
Last updated: November 2026
This Privacy Policy describes how My Mō Gioielli (hereinafter "My Mō", "we", "us", or "the Data Controller") collects, uses, stores, and protects the personal data of users who browse or make purchases on the official website mymo.it, in full compliance with the European Union General Data Protection Regulation (GDPR, Regulation EU 2016/679) and applicable privacy laws.
1. Data Controller
The Data Controller responsible for your personal data is:
Martiniello Tech di Martiniello Andrea (Brand: My Mō Gioielli)
Registered Office: Corso Umberto I, 4 - 81030 Gricignano di Aversa (CE) - Italy
VAT Number: IT04011970615
Support & Privacy Email: support@mymo.it / web@mymo.it
WhatsApp Support: +39 351 187 9034
2. Categories of Personal Data Collected
Through the use of our online store, we collect the following categories of data:
- Identification and Contact Details: first name, last name, email address, phone number, shipping address, and billing address provided during checkout or account registration.
- Jewelry Customization Data: texts, names, dates, quotes, or images requested for the custom engraving and handcrafted creation of My Mō personalized jewelry.
- Payment and Billing Details: data required to process your transaction (selected payment method, tax ID if requested for official invoicing). Please note: transactions are securely processed by PCI-DSS certified payment gateways (Shopify Payments, Stripe, PayPal, Klarna/Scalapay). My Mō never stores or has access to full credit card numbers.
- Browsing & Device Data: IP address, browser type, device information, time zone, pages visited, products added to cart, and site interactions collected via cookies and tracking technologies (as detailed in our Cookie Policy).
- Customer Service Communications: messages sent via Live Chat, WhatsApp Business, or email regarding orders, shipments, or returns.
3. Purposes and Legal Bases for Processing
Your personal data is processed strictly for lawful purposes and under the following legal bases (Article 6 GDPR):
| Processing Purpose | Legal Basis (GDPR) |
|---|---|
| Order processing, artisanal jewelry manufacturing, home shipping and delivery, customer care and after-sales service. | Performance of a contract to which the data subject is party (Art. 6.1.b). |
| Compliance with legal, administrative, accounting, and tax obligations (invoicing, mandatory book-keeping). | Compliance with a legal obligation to which the Controller is subject (Art. 6.1.c). |
| Sending promotional newsletters, exclusive discounts, product news, and special event announcements via email, SMS, or WhatsApp. | Explicit consent of the user (Art. 6.1.a), freely revocable at any time. |
| Fraud prevention, web infrastructure security, and continuous improvement of customer shopping experience. | Legitimate interest of the Controller to safeguard its business and protect users (Art. 6.1.f). |
4. Data Security & Storage Methods
Personal data is processed using electronic and automated systems with strict security measures. We implement appropriate technical and organizational measures to prevent unauthorized access, disclosure, alteration, or unlawful destruction of data, including:
- End-to-end data encryption in transit via high-security SSL/TLS certificates.
- PCI-DSS Tier 1 certified e-commerce and checkout infrastructure.
- Restricted data access granted exclusively to authorized personnel bound by confidentiality agreements.
5. Data Recipients & Third-Party Processors
We never sell or rent your personal data to third parties. Data is shared strictly with trusted service providers appointed as Data Processors (Article 28 GDPR) solely to the extent necessary to deliver our services:
- E-commerce Platform & Hosting: Shopify International Ltd (secure cloud store infrastructure and checkout).
- Express Couriers & Logistics: Poste Italiane S.p.A. and GLS Italy S.p.A. (for parcel pickup, transportation, delivery, and real-time tracking notifications).
- Payment Gateways: Shopify Payments, Stripe Inc., PayPal (Europe) S.à r.l., Klarna / Scalapay.
- Accounting & Legal Consultants: certified tax advisors and legal professionals for fiscal compliance.
6. International Data Transfers
Certain technological service providers (such as Shopify or Google) may process data outside the European Economic Area (EEA). In such instances, transfers are conducted in full compliance with Chapter V of the GDPR, relying on European Commission Adequacy Decisions (including the EU-US Data Privacy Framework) or Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Data Retention Periods
- Purchase and Accounting Records: retained for 10 years from the transaction date in accordance with statutory fiscal and civil law requirements.
- Marketing & Newsletter Data: retained until you withdraw consent (opt-out), easily done via the unsubscribe link in any message or by contacting customer support.
- Browsing & Cart Data: retained for the duration necessary to handle your browsing session and in accordance with our Cookie Policy.
8. Your GDPR Rights
Under Articles 15-22 of the GDPR, you have the right to:
- Access (Art. 15): request confirmation of whether your data is being processed and obtain a copy.
- Rectification (Art. 16): request correction of inaccurate or incomplete data.
- Erasure / "Right to be Forgotten" (Art. 17): request deletion of your personal data where retention is no longer necessary or consent is withdrawn.
- Restriction (Art. 18): request restriction of data processing under certain circumstances.
- Data Portability (Art. 20): receive your personal data in a structured, commonly used, machine-readable format.
- Objection (Art. 21): object at any time to the processing of your data for direct marketing purposes.
To exercise your rights, please submit a written request to: support@mymo.it. We will respond promptly within 30 days.
You also have the right to lodge a complaint with a competent supervisory authority (in Italy: Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).
