PRIVACY POLICY

Last updated: April 28, 2026

This Privacy Policy describes how FLOX SRL processes the personal data of users who visit ivory.paris and Customers who make purchases through the Website.

The processing of personal data is carried out in compliance with Regulation (EU) 2016/679, Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 and the applicable personal data protection legislation.

1. Data controller

The data controller is:

FLOX SRL
Via Iacopo Chimenti 14
50142 Florence (FI)
VAT No.: 07124400487
Email: assistenza@ivory.paris
PEC: dmodesrlunipersonale@pec.it

For privacy-related requests, the user may write to:

assistenza@ivory.paris

2. Categories of personal data processed

FLOX SRL may process the following categories of personal data:

identification data, such as name and surname;
contact details, such as email, telephone number, shipping address and billing address;
order-related data, such as products purchased, size, colour, amount, order date and order status;
tax data, where necessary for invoicing or accounting obligations;
payment data, limited to the information necessary to confirm successful payment;
data relating to returns, complaints, size exchanges and customer support;
browsing data, such as IP address, device technical data, logs and information collected through cookies;
data for marketing, newsletter or promotional communications, if the user gives consent;
data relating to purchase preferences or interactions with the Website, where collected.

FLOX SRL does not store full payment card details.

3. Purposes of processing

Personal data are processed for the following purposes:

allowing browsing of the Website;
managing Customer registration and account;
receiving, processing and fulfilling orders;
managing payments, shipments, deliveries, returns, refunds and size exchanges;
providing customer support;
complying with tax, accounting, administrative and legal obligations;
preventing fraud, abuse and unlawful use of the Website;
sending order-related communications;
sending newsletters and promotional communications, subject to consent;
performing statistical analyses and improving the Website;
managing possible disputes or requests from authorities.

4. Legal basis of processing

The processing of data is based on the following legal bases:

performance of a contract or pre-contractual measures, for order management, payments, shipments, returns and assistance;
legal obligation, for tax, accounting and administrative obligations;
consent of the data subject, for newsletters, marketing and non-technical cookies;
legitimate interest of the Controller, for Website security, fraud prevention, defence of rights, technical management and service improvement.

5. Provision of data

The provision of data necessary for the purchase is mandatory in order to conclude and perform the contract.

Failure to provide such data prevents FLOX SRL from processing the order.

The provision of data for marketing purposes is optional. Lack of consent does not prevent the purchase.

6. Recipients of the data

Personal data may be disclosed to parties acting as independent controllers or processors, including:

e-commerce platform providers;
hosting providers and technical suppliers;
payment service providers, including Stripe, PayPal, Klarna and Scalapay;
couriers and logistics operators, including DHL, GLS and SDA;
tax, accounting and legal consultants;
email, newsletter, CRM or customer care service providers;
providers of analytics, marketing or advertising tools, if activated;
public, tax, judicial or administrative authorities, where required by law.

Data will not be disseminated indiscriminately.

7. Transfer of data outside the European Economic Area

Some technical, payment, marketing or infrastructure providers may process data outside the European Economic Area.

In such cases, the transfer will take place in compliance with the safeguards provided by the GDPR, such as adequacy decisions, standard contractual clauses or other instruments allowed by applicable law.

8. Retention period

Personal data will be retained for the time necessary for the purposes for which they were collected.

In particular:

order data: for the time necessary to manage the contract and subsequently for tax and accounting obligations;
tax and accounting data: usually for 10 years, unless different terms are provided by law;
account data: until account deletion, subject to retention obligations;
customer care data: for the time necessary to manage the request and protect rights;
marketing data: until consent is withdrawn or objection is made;
technical data and logs: for the time necessary for security, maintenance and abuse prevention;
cookies: according to what is stated in the Cookie Policy.

9. Marketing and newsletter

Promotional communications are sent only with the user’s consent, except in cases allowed by applicable law.

The user may withdraw consent at any time:

by clicking the unsubscribe link included in emails;
by writing to assistenza@ivory.paris.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

10. Payments through third parties

Payments made through Stripe, PayPal, Klarna and Scalapay are handled by the respective providers according to their terms and privacy notices.

FLOX SRL receives only the information necessary to confirm payment, manage the order, possible refunds and administrative obligations.

For instalment or deferred payment services, providers may perform independent checks, including on the basis of their respective notices.

11. Rights of the data subject

The data subject may exercise the rights provided by Articles 15 et seq. of the GDPR, including:

access to personal data;
rectification of inaccurate data;
erasure of data in the cases provided;
restriction of processing;
objection to processing;
data portability, where applicable;
withdrawal of consent;
lodging a complaint with the Italian Data Protection Authority.

Requests may be sent to:

assistenza@ivory.paris

The Controller must generally reply to requests for the exercise of rights within 1 month, extendable up to 3 months in cases of particular complexity.

12. Complaint to the Data Protection Authority

The data subject has the right to lodge a complaint with the Italian Data Protection Authority if they believe that the processing of their personal data breaches applicable legislation.

13. Security

FLOX SRL adopts reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or disclosure.

However, no IT system can guarantee absolute security. The user is invited to keep login credentials carefully.

14. Minors

The Website is not intended for the conscious collection of personal data from minors.

Purchases must be made by adults or by persons otherwise legally capable of entering into contracts.

15. Amendments to the Privacy Policy

FLOX SRL reserves the right to amend this Privacy Policy at any time.

Amendments will be published on the Website with indication of the update date.

COOKIE POLICY

ivory.paris

Last updated: [insert date]

This Cookie Policy describes the use of cookies and tracking tools on the website ivory.paris.

The Cookie Policy should be read together with the Privacy Policy.

1. What cookies are

Cookies are small text files that websites visited by the user send to the user’s device, where they are stored and then transmitted back to the same websites on subsequent visits.

Cookies may perform technical, statistical, functional, advertising or profiling functions.

2. Types of cookies that may be used

The Website may use the following categories of cookies:

a) Technical cookies

These are necessary for the correct operation of the Website and allow, for example:

browsing;
cart management;
checkout;
user authentication;
security;
saving technical preferences.

Consent is not required for these cookies, but information must still be provided.

b) Analytics cookies

These are used to collect statistical information on the use of the Website.

If configured so as to reduce the user’s identifying power and without cross-matching with other information, they may be treated similarly to technical cookies within the limits provided by law.

If, on the other hand, they allow identification, profiling or extended tracking, they require the user’s consent.

c) Functional cookies

These allow the Website to remember user preferences, such as language, geographical area, settings or customisations.

They may require consent if they are not strictly necessary for the service requested by the user.

d) Marketing and profiling cookies

These are used to show personalised ads, create profiles, measure advertising campaigns or track the user across different websites.

These cookies may be installed only after the user’s consent.

e) Third-party cookies

These are cookies installed by parties other than FLOX SRL, such as analytics providers, advertising providers, social networks, payment platforms, video services or other integrated tools.

Third parties process data according to their own privacy and cookie notices.

3. Cookie consent

On the first access to the Website, the user sees a cookie banner allowing the user to accept all cookies, reject non-necessary cookies, manage preferences granularly or close the banner while keeping the default settings without non-technical cookies.

The user’s preferences may be changed at any time through the cookie management area available on the Website.

4. Technical cookies and consent

Technical cookies are installed without consent because they are necessary for the operation of the Website.

The user may nevertheless block them through browser settings, but this may prevent the correct operation of the cart, checkout, login and other features.

5. Marketing cookies and consent

Marketing, profiling, retargeting, advertising and non-technical tracking cookies are installed only after the user’s consent.

Consent is optional and may be withdrawn at any time.

Lack of consent does not prevent browsing or purchasing on the Website.

6. Managing preferences

The user may manage or withdraw consent through the Website’s cookie panel, through browser settings, by deleting cookies already installed or by configuring any anti-tracking tools on their device.

7. Cookie list

This section must be completed after an actual technical scan of the website. It is not appropriate to insert unverified cookies.

Cookie name	Provider	Category	Purpose	Duration	Third party
[to be verified]	ivory.paris	Technical	Website/cart/session operation	[to be verified]	No
[to be verified]	[analytics provider]	Analytics	Visit statistics	[to be verified]	Yes/No
[to be verified]	[marketing provider]	Marketing	Ads/retargeting	[to be verified]	Yes
[to be verified]	[payment provider]	Technical/Functional	Payment/security management	[to be verified]	Yes

8. Potentially involved third parties

Based on the services declared, the Website may interact with third-party providers, including Stripe, PayPal, Klarna, Scalapay, DHL, GLS, SDA, any analytics tools, any advertising tools and any newsletter or CRM platforms.

The final list must be updated according to the tools actually installed on the Website.

9. Browser cookies

The user may also manage cookies through their browser.

Disabling technical cookies may compromise some Website features, including login, cart and checkout.

10. Updates to the Cookie Policy

FLOX SRL may update this Cookie Policy at any time.

In the event of significant changes to the cookies used or the third parties involved, the user’s consent may be requested again.