Privacy policy

Last updated: 9 October 2026

This Privacy Policy explains how we collect and use your personal data when you visit ciaobuddies.com, buy our products or contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable national laws.

1. Data controller

MCK Oakmont LLC (brand CiaoBuddies™), limited liability company incorporated in Wyoming, USA, registration no. 2026-002024665, EIN 98-1952956, registered office 1501 South Greeley Hwy, Ste C #1573, Cheyenne, WY 82007, USA.
Email: info@ciaobuddies.com – Phone: +1 808 7744 506.

2. What data we collect

  • Identification and contact data: name, surname, email address, phone number, shipping and billing address.
  • Order data: products purchased, amounts, order history, communications with customer service, return requests.
  • Payment data: payments are handled by the payment providers; we only receive limited information (for example payment method, last digits of the card, outcome of the transaction). We never store full card numbers.
  • Browsing data: IP address, device and browser type, pages visited, interactions with the Website, data collected through cookies and similar technologies (see section 6).
  • Data you choose to share: for example reviews, photos or the content of your messages.

We do not intentionally collect data about children. Our products are bought by adults; please do not send us personal data of your children beyond what is strictly necessary.

3. Purposes and legal bases

  • Processing orders, payments, shipping, returns and customer service – performance of the contract (art. 6(1)(b) GDPR).
  • Accounting, tax and legal obligations (invoices, records, requests from authorities) – legal obligation (art. 6(1)(c)).
  • Security of the Website and fraud prevention – our legitimate interest (art. 6(1)(f)).
  • Emails about similar products you have already bought – our legitimate interest (soft opt-in); you can object at any time with one click.
  • Newsletter and marketing communications – your consent (art. 6(1)(a)), which you can withdraw at any time.
  • Analytics, advertising and personalised ads through non-essential cookies and pixels (for example the Meta Pixel and Microsoft Clarity) – your consent given through the cookie banner.
  • Handling disputes and defending our rights – our legitimate interest.

4. Who we share data with

We share data only with the providers we need to run the store, who act as processors or independent controllers:

  • Shopify (e-commerce platform, hosting, checkout);
  • payment providers (Shopify Payments/Stripe, PayPal, Klarna, Apple Pay, Google Pay);
  • logistics partners and carriers that prepare and deliver your order, and Track123 (shipment tracking);
  • Meta Platforms (Meta Pixel and Conversions API, for measuring and optimising our ads on Facebook and Instagram);
  • Microsoft (Microsoft Clarity, which records anonymised interactions such as clicks and scrolling to improve the Website);
  • Loox (product reviews) and Kaching Bundles (bundle offers on product pages);
  • email service providers, IT consultants and accountants; public authorities when required by law.

We do not sell your personal data.

5. Transfers outside the European Economic Area

The data controller and some providers (for example Shopify, Meta, Microsoft, PayPal) are located in, or may access data from, countries outside the EEA, including the United States. Transfers take place on the basis of the EU–US Data Privacy Framework, where the recipient is certified, or of the Standard Contractual Clauses approved by the European Commission, together with additional safeguards where necessary.

6. Cookies, Meta Pixel and similar technologies

We use:

  • technical cookies, necessary for the Website to work (cart, checkout, security, language): they do not require consent;
  • analytics cookies (Shopify Analytics, Microsoft Clarity): used only with your consent;
  • marketing cookies and pixels, in particular the Meta Pixel: it records events such as page views, add-to-cart and purchases to measure the effectiveness of our ads and show you relevant ads on Facebook and Instagram. Meta may combine this information with your Meta account data according to its own privacy policy (facebook.com/privacy/policy). The Meta Pixel and other marketing tools are activated only after your consent.

When you first visit the Website you can accept, refuse or customise non-essential cookies through the banner. You can change your choice at any time through the cookie settings link on the Website or by deleting cookies in your browser.

7. How long we keep data

  • Order and invoicing data: 10 years, as required by tax and accounting laws.
  • Customer service communications: up to 2 years after the last contact, or longer if necessary to handle a dispute.
  • Marketing data: until you withdraw your consent or unsubscribe, and in any case no longer than 2 years from your last interaction.
  • Cookies: for the duration indicated in the cookie banner, in any case no longer than 13 months for marketing cookies.

8. Your rights

You have the right to: access your data; obtain its rectification or erasure; restrict processing; data portability; object at any time to processing based on legitimate interest and to direct marketing; withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal; not be subject to decisions based solely on automated processing that produce legal effects on you.

To exercise your rights, write to info@ciaobuddies.com. We will reply within one month. You also have the right to lodge a complaint with the supervisory authority of your country: in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), in Spain the Agencia Española de Protección de Datos (aepd.es).

9. Security

We adopt appropriate technical and organisational measures to protect your data. Payments take place on encrypted pages managed by certified providers.

10. Changes

We may update this Privacy Policy. The current version is always published on this page with the date of the last update.