Privacy policy

Privacy Policy

Last updated: 6 November 2026

This policy explains how HMBLE S.r.l. processes the personal data of users of the online shop at shop.hmble.it (the "Shop"), in accordance with Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data controller

HMBLE S.r.l.
Registered office: Piazzale San Gabriele di Gorizia 210, 10134 Turin (TO), Italy
VAT / Tax code: IT12460050011
Contact email: shop@hmble.it
Certified email (PEC): hmble@legalmail.it

2. Personal data we process

  • Order and shipping data: first and last name, shipping and billing address, email, phone number.
  • Payment data: handled directly by the payment providers (Shopify Payments, PayPal and the other methods shown at checkout). We do not store full card details.
  • Personalization data: the name or text you choose to have printed on personalizable products.
  • Communications: the messages you send us for support (email, contact form).
  • Browsing data: IP address, browser type, pages visited and other technical data collected through cookies and similar technologies, as described in section 8.

Providing order, shipping and payment data is necessary to complete a purchase: without it we cannot fulfil the order.

3. Purposes and legal bases

Purpose Legal basis
Managing orders, payments, shipping, returns and support Performance of a contract (Art. 6.1.b GDPR)
Tax and accounting obligations Legal obligation (Art. 6.1.c GDPR)
Fraud prevention and Shop security Legitimate interest (Art. 6.1.f GDPR)
Email marketing (only if you opt in) Consent (Art. 6.1.a GDPR), which you can withdraw at any time
Visit statistics and personalized advertising on Facebook and Instagram (Meta Pixel and Conversions API) Consent (Art. 6.1.a GDPR), given through the cookie banner and which you can withdraw at any time

We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

4. Recipients of the data

Your data may be shared with:

  • Shopify International Ltd (Ireland), the e-commerce platform that hosts the Shop, acting as data processor;
  • Payment providers (Shopify Payments, PayPal and the other methods shown at checkout), acting as independent controllers;
  • An external logistics provider, which manages our warehouse and prepares and ships orders on our behalf, acting as data processor;
  • Couriers (BRT for Italy and most European countries, FedEx for all other destinations), to deliver orders;
  • Meta Platforms Ireland Ltd (Ireland), only if you give consent through the cookie banner, to measure visits and purchases and show you relevant ads on Facebook and Instagram. For the collection of this data, Meta acts as joint controller together with HMBLE S.r.l.;
  • Tax and accounting advisors of the controller, to meet legal obligations.

We do not sell or share your data with third parties for their marketing purposes.

5. Transfers outside the EU

The Shop is hosted by Shopify. Some data may be transferred to countries outside the EU (in particular Canada and the United States) as part of Shopify's infrastructure. These transfers are based on adequacy decisions of the European Commission and/or the Standard Contractual Clauses (SCCs) adopted by Shopify.

Data collected through Meta's tools may be transferred to the United States under the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses.

If you order from a country outside the EU, the data needed for delivery is shared with the courier and with the customs authorities of the destination country, as this is essential to deliver your order (Art. 49.1.b GDPR).

6. Retention

  • Order and billing data: 10 years from the completion of the order (civil and tax obligations).
  • Marketing data: until you withdraw consent or ask for deletion.
  • Browsing data: only as long as necessary for the purposes described, and no longer than the cookie durations set out in section 8.

7. Your rights

Under Articles 15-22 GDPR you can exercise at any time your rights of access, rectification, erasure, restriction of processing, portability, objection and withdrawal of consent (without affecting the lawfulness of processing before withdrawal).

To exercise them, write to shop@hmble.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Cookies

The Shop uses two types of cookies.

Technical cookies, needed for the site to work, for example for the cart, the session and the language. They do not require your consent.

Analytics and marketing cookies, set only if you accept them through the banner shown on your first visit. They help us understand how the Shop is used (Shopify analytics) and measure and personalize ads on Facebook and Instagram (Meta Pixel). Meta's main cookie, "_fbp", lasts 90 days.

You can accept all cookies, keep only the essential ones, or choose category by category. You can change your mind at any time from the "Cookie preferences" link at the bottom of every page.

9. Minors

The Shop is intended for users aged 18 or over. Minors may only make purchases with the involvement of a parent or guardian.

10. Changes to this policy

Any significant changes will be published on this page, with the date at the top updated accordingly. We encourage you to check it from time to time.