Privacy policy

Data controller

GlowRaidWorld, [Registered address — TO BE COMPLETED]. Email: glowraidworld@gmail.com.

What we collect and why

• Order data (name, email, phone, billing and shipping address, items purchased) — to perform the contract and deliver your order (GDPR Art. 6(1)(b)), and to meet tax and accounting obligations (Art. 6(1)(c)).
• Payment data — processed directly by Stripe; we receive only limited details (e.g. card brand, last 4 digits).
• Emails you send us — to answer your request.
• Technical logs (IP address, browser) kept by our hosting provider for security, based on legitimate interest (Art. 6(1)(f)).

Processors

• Stripe (payments)
• Resend (transactional email)
• Vercel Inc. (website hosting)
• DHL (delivery — receives your name, address, phone and email to deliver your parcel)

Some providers may transfer data outside the EEA under appropriate safeguards such as Standard Contractual Clauses.

Retention

Order and invoice data is kept for 10 years, as required for accounting records under Italian law (Art. 2220 of the Italian Civil Code). Other data is deleted when no longer needed, and at the latest 3 years after our last contact with you.

Your rights

You can request access, rectification, erasure, restriction, portability, and object to processing by writing to glowraidworld@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or the data protection authority of your country.

Marketing

We do not send marketing emails without your consent and we do not sell your data.