Fineloo BooksFineloo Libri

Privacy policy

Last updated: 2 June 2026

This privacy policy explains how Fineloo Libri S.r.l. ("we", "us") collects, uses and protects your personal data when you visit our site or place an order. We comply with the EU General Data Protection Regulation (Regulation 2016/679) and the Italian Data Protection Code.

1. Data controller

Fineloo Libri S.r.l., Via Dante Alighieri 12, 10121 Torino (TO), Italia. Email: hello@fineloo.com.

2. Data we collect

  • Order data you share via the checkout form or WhatsApp: name, delivery address, phone, email, book(s) ordered.
  • Communication data: the content of messages you send us.
  • Technical data: IP address, browser type, pages visited, referrer.
  • Cookie & advertising data — only after you accept marketing cookies (see our cookie policy).

3. Why we use your data

  • To process and deliver your order (contract, Art. 6(1)(b) GDPR).
  • To reply to your messages (legitimate interest, Art. 6(1)(f)).
  • To comply with accounting and tax obligations (Art. 6(1)(c)).
  • With your consent (Art. 6(1)(a)): to measure site performance and run ads on Meta. You can withdraw consent at any time via "Cookie settings" in the footer.

4. Categories of recipients

We share your data only with the following processors:

  • Couriers (e.g. BRT, GLS, Poste Italiane) — to ship your parcel.
  • WhatsApp Ireland Ltd. / Meta Platforms Ireland Ltd. — message transport and (with consent) Meta Pixel measurement.
  • Hosting provider — to serve the website.
  • Email provider — for order correspondence.

We never sell your data. We do not perform automated decision-making with legal effects (Art. 22 GDPR).

5. International transfers

Some processors (e.g. Meta) may transfer data outside the EEA. Such transfers rely on the EC's Standard Contractual Clauses or an adequacy decision (Art. 45 GDPR).

6. How long we keep your data

  • Order records: 10 years (tax law).
  • Customer communications: up to 24 months.
  • Marketing & analytics cookies: maximum 13 months.

7. Children's data

Our service is not directed to children under 16. We do not knowingly collect personal data from children.

8. Your rights

You have the right to access, rectify, erase, restrict and port your personal data, to object to processing, and to withdraw consent. To exercise any right, email privacy@fineloo.com. You may also lodge a complaint with the Italian Data Protection Authority (Garante, www.garanteprivacy.it).

9. Security

We apply appropriate technical and organisational measures to protect your data, including TLS encryption, access controls and least-privilege access.

10. Changes

We may update this policy. The "last updated" date above will reflect any change.