This Privacy Policy explains how personal data is collected and processed when you visit or make a purchase on riffblast.art.
1. Data Controller
The Data Controller is Riffblast di Matteo Benassi.
Business address: [YOUR BUSINESS ADDRESS]
Email: [YOUR EMAIL]
2. Personal data we collect
Depending on how you use the website, we may collect:
- name and surname
- billing and shipping address
- email address
- telephone number, where provided
- order and purchase information
- payment-related information processed through the payment services available at checkout
- messages or information you voluntarily send through contact forms or email
- technical and browsing information necessary for the operation and security of the website
3. Why we process your data
Personal data may be processed in order to:
- process and fulfil orders
- arrange shipping and delivery
- process payments and refunds
- provide customer support
- comply with accounting, tax and legal obligations
- prevent fraud and protect the security of the website
- respond to messages and requests sent by users
4. Legal basis
Personal data is processed where necessary for the performance of a contract or pre-contractual measures requested by the customer, for compliance with legal obligations, and where applicable on the basis of legitimate interests or the user’s consent.
5. Who may receive your data
Personal data may be shared, where necessary, with service providers involved in operating the online store, including hosting providers, payment providers, shipping and logistics providers, technical service providers and professional advisers.
Personal data is only shared to the extent necessary for the relevant service.
6. Payments
Payment information is processed through the payment methods available at checkout. Riffblast does not receive or store complete payment card details where these are processed directly by the relevant payment provider.
7. Shipping
The information necessary to deliver an order may be shared with the selected courier or shipping provider.
8. Data retention
Personal data is retained only for as long as necessary for the purposes for which it was collected and to comply with applicable legal, tax and accounting obligations.
9. Cookies and tracking technologies
The website uses technical cookies necessary for the operation of the store. Any additional analytics, advertising or tracking technologies are managed in accordance with our Cookie Policy and, where required, are activated only after obtaining the user’s consent.
10. Your rights
Under applicable data protection law, you may have the right to request access to your personal data, correction or deletion, restriction of processing, data portability and, where applicable, to object to processing or withdraw consent.
You may exercise your rights by contacting us at:
goldenhelvete@gmail.com
You also have the right to lodge a complaint with the competent data protection authority.
11. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to the website, services or applicable law.
Last updated: September 2026