Privacy notice

This notice covers amoretta.com and any enquiry or order placed through it. It is written to be read, not to be survived. Last updated 8 November 2026.

What we collect

When you submit an enquiry: your name, email address, the message you write, and the product you were asking about. If you place an order afterwards, we also collect a delivery address and a contact telephone number for the carrier.

When you browse: if you accept optional cookies, an aggregated page-view count. If you refuse, nothing beyond the essential session cookie that remembers your cookie choice and your age confirmation. We do not run advertising pixels, cross-site trackers, session recording, or fingerprinting scripts.

What we never collect: payment card details on this site. Payment is taken through a hosted payment page operated by our processor; the card number never reaches our server.

Why we hold it, and for how long

Enquiry records are held for 24 months so that we can answer a follow-up question and honour a return. Order records, including the delivery address, are held for seven years because tax law requires it. Browsing analytics, if you accepted them, are aggregated and hold no identifier; they are retained for 14 months.

We do not sell data, we do not rent it, and we do not share it with advertising networks. We share a delivery address with the carrier that delivers the parcel, and nothing else. Our email provider processes messages on our behalf under a data processing agreement.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. You can object to processing, ask us to restrict it, or ask for it in a portable format. Write to privacy@amoretta.com and we will respond within 30 days. We will not ask why.

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation gives you these rights and also the right to complain to your national supervisory authority. If you are a California resident, the California Consumer Privacy Act gives you the right to know what is collected, the right to delete it, the right to correct it, the right to opt out of sale or sharing — we do neither — and the right not to be discriminated against for exercising any of those rights. We honour these requests regardless of where you live.

We do not knowingly collect information from anyone under 18. If you believe a minor has submitted information, write to us and we will delete it.

Security and retention limits

Enquiry data is stored on encrypted disks, access is limited to the two people who answer enquiries, and administrative access requires a second factor. Email is not end-to-end encrypted, so please do not send card details or identity documents by email.

If a breach affects your data, we will notify you and the relevant authority within 72 hours of becoming aware of it, and we will tell you what was affected rather than issuing a general statement.

Cookies

Essential cookies remember your age confirmation and your cookie choice. They contain no identifier and expire when you close the browser or after 12 months. The optional analytics cookie is a first-party page-view count with IP addresses truncated before storage. You can change your choice at any time through the Cookies link in the footer, and refusing has no effect on your ability to use the site.

Who is responsible

Amoretta Retail LLC is the data controller for this site. Postal enquiries can be sent to the address on your order confirmation. This notice is reviewed annually; if we change anything material, the date at the top changes and we will note what changed.