This privacy policy describes how 100 Carati S.r.l. collects, uses, and protects the personal data of users who visit the 100carati.com website, use its related services, or make online purchases.

1. Data Controller

The Data Controller is:

100 Carati S.r.l.
Registered office: Via Pio VI 36, 04100 Latina (LT), Italy
VAT ID: 02945900591
E-mail: info@100carati.com
Customer Care / WhatsApp: +39 375 613 0026

2. Personal data processed

When using the site, depending on the services used, we may process:

• first and last name;
• e-mail address;
• phone number;
• billing and shipping address;
• order and purchase data;
• information required for billing;
• communications sent to Customer Care;
• newsletter and commercial communication preferences;
• data related to participation in loyalty or referral programs;
• IP address, device information, browser, and technical browsing data;
• information collected through cookies and similar technologies, based on the user's preferences.

Full payment instrument details are not stored directly by 100 Carati when payment is handled by the respective payment service providers.

3. Purposes and legal bases for processing

Personal data may be processed for:

Order and contract management
To process purchases, receive payments, organize shipments, manage returns, refunds, and after-sales assistance. This processing is necessary for the performance of the contract or pre-contractual measures requested by the user.

Administrative, tax, and legal obligations
To fulfill obligations required by applicable law. This processing is necessary to comply with legal obligations.

Customer Care
To respond to information requests and provide assistance via e-mail, contact forms, telephone, or WhatsApp.

Security and fraud prevention
To protect the site, accounts, and transactions, and to prevent fraudulent or illicit use, based on applicable obligations and/or the Controller's legitimate interest in the security of its services.

Newsletter and marketing
Subject to consent where required, to send commercial communications, promotions, news, offers, and information about 100 Carati products.

The user may revoke consent to commercial communications at any time by using the tools provided in the communications received or by contacting 100 Carati.

Performance analysis and personalization
Subject to consent where required, we may use cookies and similar technologies to understand how the site is used, measure its performance, and improve the browsing experience.

Personalized marketing and advertising
Subject to consent where required, tracking tools may be used to measure the effectiveness of advertising campaigns and display more relevant content or ads.

4. Shopify

The 100 Carati online store uses the Shopify platform, which provides the technological infrastructure necessary for the e-commerce to function.

Shopify may process personal data when the user visits the site, uses its services, or makes a purchase.

The store also has Shopify Network Intelligence enabled, through which Shopify may securely use data regarding user interactions with 100 Carati, Shopify, and other merchants to provide advanced features and services, including tools related to personalization, performance, security, and, when permitted by the user's choices, advertising.

Data may be shared with Shopify and entities involved in providing such services, including those located in countries other than the user's, in compliance with the safeguards required by applicable law.

The choices made by the user via the site's consent management system are used to determine the use of non-essential technologies.

For more information on the processing performed by Shopify, please consult the Shopify Privacy Policy. Shopify

5. Payments

Payments may be processed through the systems available at checkout, which may include credit and debit cards, Shop Pay, Apple Pay, Google Pay, PayPal, Scalapay, and bank transfer.

The relevant providers may process the data necessary to authorize, process, and protect the transaction according to their respective privacy policies.

100 Carati does not store the full payment card details when they are processed directly by the payment service providers.

6. Shipments

To deliver orders, strictly necessary data such as name, address, contact details, and shipping-related information may be shared with the courier and other parties involved in the logistics management of the order.

7. Customer Care and WhatsApp

When the user contacts 100 Carati via e-mail, telephone, site forms, or WhatsApp, the data and information voluntarily provided are processed to handle the request and provide assistance.

The use of third-party communication services may involve additional processing by the respective providers according to their privacy policies.

8. Loyalty and referral program

If the user participates in the 100 Carati loyalty or referral program, data related to the account, purchases, accumulated points, rewards, and activities provided by the program may be processed.

These features may also be managed through specialized technology providers, such as Smile.io.

9. Newsletter and commercial communications

With the user's consent, 100 Carati may use the e-mail address and other provided contact details to send newsletters, offers, promotions, and commercial communications.

The user may revoke consent at any time through the unsubscribe link provided in the communications or by contacting 100 Carati.

Any measurement technologies incorporated into commercial communications are used in compliance with applicable law and the user's choices.

10. Cookies and tracking technologies

The site uses cookies and similar technologies to ensure the e-commerce functions and, based on the choices made by the user, to store preferences, measure performance, and personalize marketing activities.

The consent management system distinguishes the following categories:

Website functioning
Technologies necessary for the site to function and to provide requested services, including features related to security, the cart, checkout, and fraud prevention.

Saving preferences
These allow for remembering specific user choices and personalizing the browsing experience.

Performance measurement
These allow us to understand how users interact with the site and measure its performance.

Marketing personalization
These allow, subject to consent, for the measurement and personalization of promotional and advertising activities.

Technologies that are not strictly necessary are used according to the choices expressed by the user through the banner and the preferences panel. The Data Protection Authority (Garante) distinguishes technical cookies from tools used for profiling and other purposes that require consent. Privacy Guarantor

11. Managing and modifying cookie preferences

Upon the first access, when required, a banner is displayed through which the user can:

• accept all cookies;
• reject non-essential ones;
• manage individual categories;
• save their preferences.

The user can subsequently modify their choices through the preference management tools available on the site.

The Data Protection Authority requires that it be possible to easily modify previously made choices. Privacy Guarantor

12. Analytics, reviews, and marketing services

Based on the site configuration and the preferences expressed by the user, 100 Carati may use technological services provided by third parties for analytics, performance measurement, review management, loyalty programs, and marketing activities.

Services currently integrated into the site may include:

• Meta (Facebook and Instagram), for advertising campaign measurement, conversion analysis, and marketing activities;
• Google and YouTube, for analytics, performance measurement, and advertising campaigns;
• Pinterest, for campaign measurement, conversions, and marketing activities;
• Judge.me, for managing and displaying customer reviews;
• Smile.io, for managing the loyalty program, points, rewards, and referrals.

These services may process information related to browsing, interactions with the site, purchases, the device used, and, where applicable, the effectiveness of advertising campaigns.

When required by applicable law, the services and technologies used for non-strictly necessary purposes are activated in accordance with the preferences expressed by the user through the site's consent management system.

Individual providers may also process data according to their own privacy policies and, depending on the service used, act as data processors or independent data controllers.

 

13. Data recipients

Personal data may be disclosed, to the extent necessary for the respective purposes, to entities such as:

• Shopify and e-commerce infrastructure providers;
• payment service providers;
• couriers and logistics operators;
• IT and hosting service providers;
• Customer Care and communication platforms;
• newsletter and marketing service providers;
• analytics and advertising service providers;
• loyalty and referral program providers;
• administrative, tax, legal, and professional consultants;
• public authorities when required by law.

These entities act, as the case may be, as data processors, independent data controllers, or other parties authorized under applicable law.

14. International data transfers

Some providers used by 100 Carati may process data outside the European Economic Area.

When applicable, such transfers are carried out using the mechanisms and safeguards provided by data protection law, such as adequacy decisions, standard contractual clauses, or other legally recognized tools.

15. Data retention

Personal data is kept for the time necessary for the purposes for which it was collected and, subsequently, for the period required by legal, tax, or accounting obligations, or for the protection of the Controller's rights.

Data used for marketing purposes is kept until the user revokes consent or objects, except for any additional periods necessary to document compliance with legal obligations.

The duration of cookies and other tracking tools depends on their function and the relevant provider.

16. Data security

100 Carati adopts appropriate technical and organizational measures aimed at protecting personal data from unauthorized access, loss, disclosure, alteration, or illicit use.

17. Rights of the data subject

In the cases provided for by applicable law, the data subject may exercise the rights recognized by the GDPR, including:

• obtaining confirmation of the existence of personal data concerning them and accessing it;
• requesting its rectification;
• requesting its erasure;
• requesting the restriction of processing;
• objecting to processing in the provided cases;
• requesting data portability where applicable;
• revoking previously given consent, without affecting the lawfulness of the processing carried out before the revocation.

Requests can be sent to:

info@100carati.com

The data subject also has the right to lodge a complaint with the competent supervisory authority and, in Italy, with the Garante per la protezione dei dati personali.

18. Data of minors

The 100 Carati sales services are not specifically intended for minors. We do not knowingly collect personal data from minors in violation of applicable law.

19. Third-party links and services

The site may contain links to or integrate services provided by third parties.

Processing performed directly by such entities is governed by their respective privacy policies, which the user is invited to consult.

20. Changes to this policy

100 Carati may periodically update this Privacy and Cookie Policy to adapt it to regulatory, technological, organizational changes, or to the services used on the site.

The updated version is published on this page with the date of the last update indicated.

21. Contacts

For information on the processing of personal data or to exercise your rights:

100 Carati S.r.l.
Via Pio VI 36
04100 Latina (LT), Italy
E-mail: info@100carati.com
Customer Care / WhatsApp: +39 375 613 0026

Last update: October 2026