Last updated: 28 October 2026
Data controller
kelvaroshop.com is operated by Nana lab s.r.l., Corso Vittorio Emanuele II 44, 10123 Torino (TO), Italy, VAT number IT09996640018, email info@kelvaroshop.com.
What data we collect
- Order data: name, phone number, delivery address, the product and the amount, which you enter in the order form.
- Data from the confirmation page: postal code, town and email address, if you enter them after the order. We use them to deliver the parcel and to send you the order confirmation and the tracking number.
- Data from the confirmation call: changes to the order or address that you give our advisor.
- Technical data: IP address, browser and device type, pages visited, and the code of the ad you clicked to reach the site.
- Anti-fraud data: a technical identifier of the device that sends the order, used to block fake and repeated orders.
Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|
| Confirming the order by phone, shipping and delivering it, collecting payment | Performance of the contract, Art. 6(1)(b) |
| Handling withdrawals, refunds and guarantee requests | Performance of the contract and legal obligation, Art. 6(1)(b) and (c) |
| Accounting and tax records | Legal obligation, Art. 6(1)(c) |
| Blocking fake or fraudulent orders | Legitimate interest, Art. 6(1)(f) |
| Measuring which Google ads lead to orders | Consent where required by law, Art. 6(1)(a); see the Cookie Policy |
Who receives the data
- Our fulfilment partner: customer service that calls you, warehouse and courier that delivers the parcel.
- The order-management and affiliate network that forwards the order to the fulfilment partner.
- The automation service that receives the order form and passes it on (servers in the European Union).
- Hostinger International Ltd, which hosts the website (European Union).
- Google Ireland Ltd and Google LLC, for the Google Ads conversion measurement and the fonts of the site.
- Accountants, public authorities and courts, when the law requires it.
Transfers outside the European Union
Google LLC can process data in the United States. The transfer is based on the EU adequacy decision for the EU-US Data Privacy Framework, in which Google participates, and on the Standard Contractual Clauses.
How long we keep the data
- Order data: for the time needed to deliver the order and to handle withdrawal and guarantee requests (up to 3 years after delivery, plus 2 months), then for 10 years only in the accounting records required by Italian law.
- Anti-fraud data: for the time needed to check the order.
- Advertising cookies: see the Cookie Policy (90 days).
Your rights
You can ask to access your data, correct it, delete it, limit its use, receive it in a portable format, and object to processing based on legitimate interest. You can withdraw your consent at any time. Write to info@kelvaroshop.com: we reply within one month. You can also lodge a complaint with the data protection authority of the country where you live or with the Italian authority, Garante per la protezione dei dati personali (www.garanteprivacy.it).
Is the data required?
Name, phone number and address are needed to confirm and deliver the order. Without them we cannot process the order.