Privacy policy
How Paperback Exchange processes the personal data of online shop customers.
Data controller
Paperback Exchange s.n.c., Via delle Oche 4R, 50122 Firenze (FI), Italia. Email papex@papex.it, phone 055/293460.
Data processed
Identity and contact details, shipping and billing addresses, order history, basket and wishlist contents, technical browsing data. Card details are handled directly by Stripe and are never stored by us.
Purposes and legal bases
Performance of the contract: order handling, delivery, returns and support. Legal obligations: invoicing and accounting. Legitimate interest: site security and abuse prevention. Consent: non-essential cookies and optional communications.
Recipients
Couriers and postal services, Stripe for payments, Resend for transactional email, and our hosting and database provider. Data is never sold to third parties for their own purposes.
Retention
Order data is retained for the ten years required by tax law. Account data is kept while the account is active; on closure it is deleted or anonymised except where retention is legally required.
Your rights
Access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with the Italian Data Protection Authority. You can export your data and request account closure from your account area.