Informativa sulla privacy

Last update: October 2025

1. Data Controller

The data controller is:

AC Cosmetics Srl

Via Antonio Aldini 42, 20157 Milan, Italy

VAT: 13623000968

PEC: accosmetics@legalmail.com

Email: info@noon-chi.com

2. Purpose of Data Processing

Personal data collected through the website www.noon-chi.com are processed for the following purposes:

- Order management and delivery: to process, fulfill, and track purchase orders.

- Customer support: to provide pre- and post-sale assistance.

- Service communications: to send order confirmations, shipping updates, or changes.

- Marketing and newsletters: only with explicit consent, to send updates on Noon Chi products, promotions, and news.

- Legal and tax obligations: to comply with current regulations.

- Security and fraud prevention: to ensure transaction security and platform integrity.

2.1. Consent for Newsletters and Marketing Communications

Personal data collected through newsletter subscriptions or other dedicated forms will be processed **only if the user has given explicit consent**.

Consent must be given via a **separate, unchecked checkbox**. By giving consent, the user agrees to receive newsletters, product updates, and promotional communications from Noon Chi.

Users may **withdraw their consent at any time** by clicking the "unsubscribe" link in every email or by contacting info@noon-chi.com.

3. Legal Basis (Art. 6 GDPR)

Data processing is based on:

- Contract performance: managing purchases and orders.

- Legal obligation: invoicing and accounting.

- Explicit consent: subscription to newsletters.

- Legitimate interest: security, prevention of abuse and fraud.

4. Types of Data Collected

- Personal and contact data: first and last name, address, email, phone.

- Payment data: handled via Shopify Payments, Stripe, or PayPal (Noon Chi does not store card or banking information).

- Navigation data: IP address, device, browser, technical and analytical cookies.

- Preferences: expressed in quizzes or forms (skin type, skincare interests).

5. Data Processing Methods

Data are processed using IT and telematic tools in compliance with GDPR principles of lawfulness, fairness, transparency, and security.

AC Cosmetics adopts technical and organizational measures to prevent unauthorized access, disclosure, alteration, or loss of data.

6. Authorized Persons and Data Processors

Data may be processed by:

- Authorized internal personnel of AC Cosmetics Srl

- External service providers designated as Data Processors under Art. 28 GDPR, including:

- Shopify Inc. (e-commerce platform and site hosting)

- Shopify Payments / Stripe / PayPal (online payments)

- Shipping and logistics services (BRT, FedEx, etc.)

- Shopify newsletter and marketing services

Each processor handles data in compliance with their own privacy policies and the GDPR Standard Contractual Clauses (SCC).

7. Data Transfers Outside the EU

Some data may be processed by providers located in Canada or the United States (e.g., Shopify).

Transfers are based on the Standard Contractual Clauses approved by the European Commission to ensure adequate protection of personal data.

8. Data Retention

- Order and invoicing data: up to 10 years (legal obligations)

- Marketing/newsletter data: until consent is withdrawn

- Navigation data: up to 12 months

After these periods, data are deleted or anonymized.

9. User Rights

Users can exercise their rights under Articles 15–22 GDPR:

- Access their personal data

- Rectify or delete data (“right to be forgotten”)

- Restrict or object to processing

- Data portability

- Withdraw consent at any time

- File a complaint with the Data Protection Authority (Garante Privacy)

Requests should be sent to: info@noon-chi.com

10. Cookie Policy

The website uses technical and profiling cookies to improve the browsing experience.

Consent for cookies is managed through the Shopify banner.

For more information, please see the dedicated Cookie Policy.

11. Changes to this Privacy Policy

AC Cosmetics Srl reserves the right to update this privacy policy at any time to comply with new regulations or service changes.

The updated version will always be published on this page with the revision date.

📅 Last updated: February 2026