Privacy policy
Last updated: 9 September 2026
Who is responsible for your data?
Erazelab is a brand operated by Dolcevita International di M.T., Via Vincenzo Dono 15, 84128 Salerno (SA), Italy, VAT IT05978060654. Contact: info@erazelab.com. In these documents, “Erazelab”, “we” and “us” refer to this business.
What we collect
We collect contact and delivery details, order and payment confirmations, account information where you create an account, messages you send us and reviews you choose to submit. Payment providers process your payment-card details; our order records contain the transaction information they make available to us. Technical information can include IP address, approximate country, browser, device, pages visited and cookie or consent preferences. You can browse without opening an account; information marked as required at checkout is needed to process your order.
Purposes and legal bases
We use order, contact and payment information to fulfil your contract: payment, delivery, order updates, returns and support. We retain accounting records to comply with legal obligations. Security, fraud prevention, handling enquiries and defending legal claims rely on our legitimate interests, balanced against your rights. Promotional communications and non-essential tracking rely on consent where required by applicable law. Any permitted existing-customer marketing remains subject to your right to opt out. Browsing this site or accepting purchase terms does not itself give marketing consent.
Who receives information
Information is shared as needed with Shopify for hosting and commerce, payment providers, fulfilment and delivery partners, support and communications providers, review services, and analytics or advertising providers where applicable. The store has integrations for Judge.me, Yotpo, Klaviyo and Microsoft Clarity; the information processed depends on the feature used and applicable privacy choices. Delivery information is used by our shipping partners, including HappyPost. We may disclose information when required by law, to professional advisers, or in a business transfer subject to appropriate safeguards. We do not publish your order or delivery details as customer reviews.
Shopify, cookies and advertising choices
Shopify processes data to provide the store and may also act as an independent controller for its own consumer services, as explained in its Consumer Privacy Policy. Our cookie information explains storage categories and controls. You can use the privacy controls presented by the store and your browser. Where sharing for advertising constitutes “sale”, “sharing” or targeted advertising under applicable US law, you can exercise available opt-out rights through our data-sharing opt-out page or by contacting us. Shopify’s own privacy choices are available at Shopify’s privacy portal.
How long we keep data
We keep order and accounting records for the statutory period applicable to our Italian business, normally 10 years for accounting documents, and longer where needed for an ongoing dispute or another legal obligation. Support records are kept for the time needed to resolve the request and related claims. Marketing data is kept while the relevant permission or other lawful basis remains valid; after an opt-out we may keep a limited suppression record to respect your choice. Technical data follows the provider’s retention and our configuration. You can ask for more information or deletion where the law permits it.
International processing
Providers may process information outside your country, including outside the EEA or UK. Where required, transfers rely on an adequacy decision or appropriate safeguards such as standard contractual clauses and the applicable UK transfer arrangements. Contact us to request information about the safeguards relevant to your data.
Your rights and how to use them
Depending on the applicable law, you can request access, correction, erasure, restriction or portability, object to processing and withdraw consent without affecting earlier lawful processing. You can object to direct marketing at any time, including through an unsubscribe link. Write to info@erazelab.com; we may need proportionate identity verification. GDPR requests are normally answered within one month, with any permitted extension explained. You can complain to a supervisory authority, including the Italian Garante, France’s CNIL, the UK ICO, or your local authority. Exercising a right will not lead to unlawful discrimination.
Reviews, minors and sensitive information
Reviews and content you choose to make public can be visible to other visitors. Do not include delivery details, medical records or other sensitive information in public reviews. The store is not directed at children under 16 and we do not knowingly seek their data. A parent or guardian may contact us about data submitted by a child. We do not ask you to provide a medical diagnosis to buy skincare.
Security and changes
We use organisational and technical measures appropriate to the processing and rely on the security features of our commerce providers. No system can guarantee absolute security. Do not send full card details by email. We may update this notice as our services or legal obligations change; the current version and revision date appear here.