This Privacy Policy describes how Tutto Passa (the “Site,” “we,” “us,” or “our”) collects, uses, and discloses your Personal Information when you visit or make a purchase from tuttopassamerch.com.
Contact
After reviewing this policy, if you have additional questions, want more information about our privacy practices, would like to exercise your privacy rights, or wish to make a complaint, please refer to our Contact page.
Collecting Personal Information
When you visit the Site, information about your device and interaction with the Site may be processed to operate the storefront. When you place an order, we collect the information necessary to process your purchase. We may also collect information you provide when contacting us for customer support.
In this Privacy Policy, “Personal Information” means information relating to an identifiable individual.
Device information
- Purpose of collection: to load and operate the Site, maintain your cart, and support security and troubleshooting.
- Source of collection: your browser and device when you access the Site, including browser storage and technical request information.
- Disclosure for a business purpose: processed by service providers involved in operating the storefront and Shopify shopping services.
- Personal Information processed may include: IP address, browser and device information, pages requested, and cart identifiers.
Order information
- Purpose of collection: to fulfill your order, process payment, arrange shipping, provide invoices and order confirmations, communicate with you, and screen orders for potential risk or fraud.
- Source of collection: collected from you during Shopify checkout.
- Disclosure for a business purpose: shared with Shopify and the payment, shipping, and fulfillment providers needed to complete your order.
- Personal Information collected: name, billing and shipping addresses, email address, phone number where provided, and payment and order details. Payment credentials are handled through Shopify checkout and its payment providers.
Customer support information
- Purpose of collection: to respond to questions and resolve order or product issues.
- Source of collection: information you choose to provide when contacting us.
- Personal Information collected: contact details, order information, messages, and any photos or other information you send about your request.
- Disclosure for a business purpose: shared with service providers only as needed to handle your request.
Minors
We do not intentionally collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please refer to our Contact page to request deletion.
Sharing Personal Information
We share Personal Information with service providers to help us provide our services and fulfill our contracts with you. For example:
- We use Shopify for our product catalog, cart, checkout, and orders. Read more about how Shopify handles Personal Information in Shopify’s Privacy Policy.
- Payment providers, shipping carriers, and fulfillment services receive information needed to process payments and deliver purchases.
- We may disclose Personal Information to comply with applicable laws and regulations, respond to a lawful request for information, or protect our rights.
Marketing & Advertising Preferences
If you choose to receive marketing communications from us, we may use the information you provide to send news about products and offers, in line with your preferences and applicable law. You can unsubscribe using the link in a marketing email.
Advertising services you use elsewhere may offer their own privacy controls. You can manage advertising preferences through Facebook’s ad settings, Google’s ad settings, or the Digital Advertising Alliance’s opt-out portal. These links do not indicate that this Site uses those advertising services.
Using Personal Information
We use Personal Information to offer products for sale, process payments, ship and fulfill orders, communicate with you, provide customer support, maintain the Site, and meet legal obligations.
Lawful basis
Where the General Data Protection Regulation (“GDPR”) applies, we process Personal Information on an applicable lawful basis, including:
- Your consent, where required;
- The performance of our contract with you;
- Compliance with our legal obligations;
- Our legitimate interests in operating and securing our business, where those interests do not override your fundamental rights and freedoms.
Retention
We retain order information as needed to fulfill purchases, maintain business records, resolve disputes, and comply with legal obligations. You may request deletion, subject to records we are legally required or otherwise permitted to retain.
Automatic decision-making
Shopify and payment providers may use automated tools to detect fraud and secure transactions. Where applicable law provides rights relating to decisions based solely on automated processing that significantly affect you, you may request information or exercise those rights through our Contact page.
Your Rights
European Economic Area
Where GDPR applies, you may have the right to access, correct, delete, or receive a copy of your Personal Information; restrict or object to certain processing; and withdraw consent where processing is based on consent. You may also lodge a complaint with your local data protection authority.
California
Where the California Consumer Privacy Act (“CCPA”), as amended, applies, California residents may have rights to know about and access their Personal Information, request correction or deletion, obtain a portable copy, and opt out of sale or sharing where applicable. You may designate an authorized agent to submit a request on your behalf and exercise applicable rights without unlawful discrimination.
To request assistance with your privacy rights, please refer to our Contact page. We may need to verify your identity before responding.
Cookies & Browser Storage
A cookie is a small amount of information downloaded to your device when you visit a website. Browser storage, such as local storage, can also retain information between visits.
This storefront uses local storage to remember your Shopify cart between visits. Shopify checkout may use cookies and similar technologies to support checkout, security, and preferences. For information about Shopify’s technologies, see Shopify’s Cookie Policy.
Session cookies last until you stop browsing, while persistent cookies remain until they expire or are deleted. Local storage generally remains until cleared by you or the application.
You can control cookies and clear stored site data through your browser settings. Blocking or deleting these technologies may affect your cart, checkout, or other shopping functions. More information is available at All About Cookies.
Do Not Track
“Do Not Track” browser settings are not consistently interpreted across websites and services. Where applicable law requires us to recognize an opt-out preference signal, we will handle it as required by that law.
Changes
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. The most current version will be available on this page.
Complaints
If you would like to make a complaint about our privacy practices, please refer to our Contact page. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
Last updated: October 20, 2026