ORDINA ENTRO IL 5 AGOSTO PER RICEVERE IL TUO PACCO INDICATIVAMENTE ENTRO FERRAGOSTO. LE SPEDIZIONI SARANNO SOSPESE DAL 6 AL 23 AGOSTO E RIPRENDERANNO REGOLARMENTE DAL 24 AGOSTO. | SPEDIZIONE GRATUITA PER ORDINI SUPERIORI A 120€. | ORDINA ENTRO IL 5 AGOSTO PER RICEVERE IL TUO PACCO INDICATIVAMENTE ENTRO FERRAGOSTO. LE SPEDIZIONI SARANNO SOSPESE DAL 6 AL 23 AGOSTO E RIPRENDERANNO REGOLARMENTE DAL 24 AGOSTO. | SPEDIZIONE GRATUITA PER ORDINI SUPERIORI A 120€.

Your cart

Your cart is empty

Privacy policy

PRIVACY POLICY

Last updated: 4 August 2026

This Privacy Policy describes how DENIM 93 S.R.L. (hereinafter "GDD Fashion", "we", "us" or "our") collects, uses, stores and protects your personal information when you visit our website www.gddfashion.com, make purchases or interact with our services.

This policy is drafted in compliance with EU Regulation 2016/679 (GDPR), the Italian Privacy Code (Legislative Decree 196/2003) as amended by Legislative Decree 101/2018, the UK GDPR for customers residing in the United Kingdom, and the California Consumer Privacy Act (CCPA) for customers residing in California (USA).

Please read this policy carefully.


1. DATA CONTROLLER

The Data Controller for your personal data is:

DENIM 93 S.R.L. Registered office: Corso Enrico De Nicola 41, 80040 Terzigno (NA), Italy VAT number: IT09407501213 Email: info@gddfashion.com Certified email (PEC): denim93srl@legalmail.it Phone/WhatsApp: +39 3387432691


2. WHAT PERSONAL DATA WE COLLECT

We collect different categories of personal data depending on how you interact with our website:

2.1 Data you provide directly:

  • Contact details: first name, last name, email address, phone number
  • Billing and shipping details: full address, postcode, city, province, country
  • Account data: username, password (encrypted), preferences
  • Payment data: credit/debit card information (processed via secure payment gateways — we do not store full card details)
  • Order history: products purchased, amounts, dates, order status
  • Communications: messages sent via email, chat, WhatsApp or contact forms
  • Return requests: reasons for return, refund preferences

2.2 Data collected automatically:

  • Browsing data: IP address, browser type, operating system, pages visited, time spent
  • Cookies and similar technologies: unique identifiers, preferences, session data
  • Device data: device type, screen resolution, language settings
  • Geolocation data: approximate location based on IP address

2.3 Data from third parties:

  • Payment platforms: PayPal, Scalapay, credit card processors
  • Carriers: BRT Bartolini, GLS and DHL for delivery information and shipment tracking
  • Social media: if you choose to register via Facebook/Google
  • Shopify: our e-commerce platform that processes data on our behalf

3. PURPOSES AND LEGAL BASIS FOR PROCESSING

3.1 Performance of a contract (Art. 6.1.b GDPR)

  • Processing and managing your orders
  • Processing payments
  • Arranging shipping and delivery via our carriers
  • Managing returns, exchanges and refunds
  • Providing customer support
  • Creating and managing your account

3.2 Legal obligations (Art. 6.1.c GDPR)

  • Issuing invoices and tax documents
  • Maintaining accounting records
  • Responding to requests from competent authorities
  • Fulfilling tax and administrative obligations

3.3 Legitimate interest (Art. 6.1.f GDPR)

  • Preventing fraud and unlawful activities
  • Ensuring the security of the website and systems
  • Improving our products and services
  • Analysing customer preferences
  • Managing complaints and disputes
  • Protecting our legal rights

3.4 Consent (Art. 6.1.a GDPR)

  • Sending you newsletters and promotional communications by email
  • Sending you personalised offers and exclusive discounts
  • Contacting you via SMS or WhatsApp for promotions (only if you have consented)
  • Showing you personalised advertising on other websites
  • Using non-essential cookies for analytics and marketing

You may withdraw your consent at any time by clicking the "Unsubscribe" link in our emails or by contacting us.


4. HOW WE USE YOUR DATA

4.1 Order and service management

We use your data to process orders, confirm purchases, arrange shipping, manage returns and provide after-sales support.

4.2 Communications

We send transactional emails (order confirmations, shipping updates, return notifications) necessary for the performance of the contract. If you have consented, we also send newsletters with news, offers and promotions.

4.3 Marketing and personalisation

With your consent, we use your data to:

  • Send you personalised offers based on your purchases
  • Show you products you may be interested in
  • Send you discount codes and exclusive promotions
  • Remind you of products left in your cart

4.4 Analytics and improvement

We analyse aggregated and anonymous data to understand how customers use the website, improve the browsing experience, optimise products and services, and identify trends and preferences.

4.5 Security and fraud prevention

We monitor activity on the website to prevent fraud, unauthorised access and other unlawful activities, protecting both you and us.


5. WHO WE SHARE YOUR DATA WITH

We never sell your personal data to third parties. We share your data only with the following parties, to the extent necessary:

5.1 Essential service providers:

  • Shopify Inc. (Canada/USA): e-commerce platform hosting our store
  • BRT Bartolini, GLS and DHL (Italy/Europe): carriers for order shipping and delivery tracking
  • PayPal, Scalapay, payment processors: to process payments securely
  • Hosting and server providers: to keep the website online
  • Email services: to send you communications

5.2 Marketing and analytics services:

  • Google Analytics: to analyse website traffic (anonymous data)
  • Facebook Pixel: for personalised advertising (only with consent)
  • Email marketing platforms: to send you newsletters (only with consent)

5.3 Authorities and legal obligations:

  • Italian tax and administrative authorities
  • Law enforcement, upon legal request
  • Legal advisors and accountants

5.4 Transfers outside the EU/EEA:

Some of our providers (e.g. Shopify) are located outside the European Union. In these cases, we ensure that transfers take place in compliance with the GDPR through standard contractual clauses approved by the European Commission, adequacy decisions, and appropriate data protection safeguards.


6. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies to improve your experience.

6.1 Types of cookies used:

Essential cookies (always active):

  • Cart and session management
  • Account authentication
  • Security and fraud prevention
  • Language and currency preferences

Performance and analytics cookies (require consent):

  • Google Analytics: to understand how you use the website
  • Analysis of most visited pages
  • Conversion tracking

Marketing cookies (require consent):

  • Facebook Pixel: for personalised advertising
  • Retargeting and remarketing
  • Advertising campaign tracking

6.2 Managing cookies:

You can manage your cookie preferences via the cookie banner on your first visit, in your browser settings, or by contacting us to disable specific cookies.

Note: Disabling essential cookies may limit some website functionality.

For more information on Shopify's cookies: www.shopify.com/legal/cookies


7. HOW LONG WE RETAIN YOUR DATA

We retain your personal data only for as long as necessary for the purposes for which it was collected:

  • Account data: until account deletion or deletion request
  • Order data: 10 years for tax and accounting obligations
  • Marketing data: until consent is withdrawn or 24 months of inactivity
  • Browsing data and cookies: according to cookie settings (max 24 months)
  • Support communications: 5 years for potential disputes

After these periods, data is deleted or irreversibly anonymised.


8. YOUR RIGHTS

8.1 Rights of EU customers (GDPR)

In accordance with the GDPR, you have the following rights:

  • Right of access (Art. 15): you may request a copy of the personal data we hold about you
  • Right to rectification (Art. 16): you may request correction of inaccurate or incomplete data
  • Right to erasure (Art. 17): you may request deletion of your data, subject to legal obligations
  • Right to restriction (Art. 18): you may request restriction of processing in certain circumstances
  • Right to data portability (Art. 20): you may receive your data in a structured format and transfer it to another controller
  • Right to object (Art. 21): you may object to processing based on legitimate interest or for marketing purposes
  • Right to withdraw consent: you may withdraw consent at any time
  • Right to lodge a complaint: you may file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it)

8.2 Rights of UK customers (UK GDPR)

Customers residing in the United Kingdom enjoy the same rights under the UK GDPR, which is the equivalent of the EU GDPR adopted into British law after Brexit. To exercise your rights or lodge a complaint, you may contact the Information Commissioner's Office (ICO): ico.org.uk

8.3 Rights of California customers (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal data we collect, use, disclose or sell
  • Right to deletion of personal data
  • Right to opt out of the sale of data (GDD Fashion does not sell personal data)
  • Right to non-discrimination for exercising CCPA rights

To exercise your CCPA rights, contact us at info@gddfashion.com with "CCPA Request" in the subject line.

How to exercise your rights:

Send a request to:

  • Email: info@gddfashion.com
  • Certified email (PEC): denim93srl@legalmail.it
  • Post: DENIM 93 S.R.L., Corso Enrico De Nicola 41, 80040 Terzigno (NA), Italy

We will respond within 30 days of your request.


9. DATA SECURITY

We adopt appropriate technical and organisational measures to protect your data:

  • SSL/TLS encryption for all communications
  • Passwords encrypted with secure algorithms
  • Firewalls and security systems to protect servers
  • Access to data limited to authorised personnel only
  • Regular backups to prevent data loss
  • Continuous monitoring to detect suspicious activity

However, no system is completely secure. We recommend using strong passwords and not sharing them with anyone.


10. MINORS

Our website is not intended for children under 16 years of age. We do not knowingly collect data from minors. If you are a parent or guardian and discover that your child has provided us with personal data, please contact us immediately for deletion.


11. CHANGES TO THIS POLICY

We may update this policy periodically to reflect regulatory changes or changes in our practices. The "Last updated" date at the top indicates the most recent revision.

We will notify you of material changes via a notice on the website, email (if you have an account), or an information banner.

We invite you to consult this page regularly.


12. CONTACT

For any questions about this policy or the processing of your data:

DENIM 93 S.R.L. Email: info@gddfashion.com Certified email (PEC): denim93srl@legalmail.it WhatsApp: +39 3387432691 Address: Corso Enrico De Nicola 41, 80040 Terzigno (NA), Italy Hours: Mon-Fri 9:00-18:00 CET

Last updated: 4 August 2026