Privacy Policy
What we collect, why we collect it, who we share it with, and how to get it deleted.
Last updated 25 August 2026
This policy explains what personal information Dellisanti Design collects at dellisantidesign.com, why we collect it, who we share it with, and what control you have over it. We do not sell your personal information.
Information you give us
- Order information. Name, billing address, shipping address, email address and phone number.
- Payment information. Card details are entered directly into our payment provider and are processed by them. We receive only a transaction reference, the result, and the last four digits of the card. We never see or store your full card number or security code.
- Account information. Email address, password in hashed form, and your saved addresses and order history if you create an account.
- Messages. Anything you send through our contact form or by email, including the content of your enquiry.
- Marketing preferences. Your email address if you subscribe, and whether you have opted in or out.
Information collected automatically
- IP address, browser type and version, operating system and device type
- Pages viewed, products viewed, time on page and the link that brought you here
- Cart and session data needed to keep your basket working while you shop
How we use your information
| Purpose | Basis |
|---|---|
| Processing, packing, shipping and tracking your order | Performance of our contract with you |
| Taking payment and preventing fraud and chargebacks | Contract and our legitimate interest in preventing fraud |
| Answering your questions and handling returns | Contract and legitimate interest |
| Keeping tax, accounting and transaction records | Legal obligation |
| Sending marketing email | Your consent, withdrawable at any time |
| Improving the site and understanding how it is used | Legitimate interest, or consent where cookies require it |
Who we share it with
We share personal information only with the service providers who make the store work, and only with what they need to do their job:
- Payment processors, to take payment and screen for fraud
- Shipping carriers and fulfilment partners, to pick, pack and deliver your order
- Our hosting and email providers, to run the site and send transactional email
- Analytics providers, to understand aggregate site usage
- Professional advisers and authorities, where the law requires it or to protect our legal rights
We do not sell or rent your personal information, and we do not share it with anyone for their own independent marketing.
Cookies and tracking
We use cookies and similar technologies for three things. Strictly necessary cookies keep your cart, your login and checkout security working, and the site cannot function without them. Analytics cookies tell us which pages and products people look at, in aggregate. Marketing cookies, where used, measure whether an advert led to a visit.
You can block or delete cookies in your browser settings at any time. Blocking strictly necessary cookies will break the cart and checkout. Most browsers also offer a Do Not Track signal, and where the law requires us to honour it as an opt out, we do.
How long we keep it
Order and transaction records are kept for 7 years to meet tax and accounting obligations. Account data is kept while your account is open and for 24 months after your last activity. Support emails are kept for 24 months. Marketing contacts are kept until you unsubscribe. Analytics data is kept in aggregate for 26 months.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected, to have it deleted, to object to or restrict how we use it, to receive a portable copy, and to withdraw consent at any time.
If you are a California resident, the CCPA and CPRA also give you the right to know what we collect and disclose, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right not to be discriminated against for exercising any of them. We do not sell or share personal information as those terms are defined, and we do not knowingly collect information from anyone under 16.
To exercise any right, email info@dellisantidesign.com. We will verify your identity, usually by confirming details of a recent order, and respond within 30 days. You may use an authorised agent, and we will not charge you for a reasonable request.
Marketing email
We only send marketing to people who have asked for it. Every marketing email has an unsubscribe link in the footer, and unsubscribing takes effect immediately. Transactional email about an order you have placed is not marketing and will still be sent.
Security
The whole site is served over TLS encryption. Payment pages are handled by PCI DSS compliant providers. Access to customer data is limited to staff who need it. No system is completely secure, so we cannot promise absolute security, but if a breach affects your personal information we will notify you and the relevant authority as the law requires.
Children
This store is not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we will delete it.
International transfers
We operate from the United States and our providers may process data in other countries. Where information leaves your country we rely on appropriate safeguards, such as standard contractual clauses, to protect it.
Third party sites
Our pages may link to sites we do not control. This policy does not cover them, so please read their own privacy notices.
Changes
We may update this policy. The date at the top shows when it last changed. Material changes will be announced on this page before they take effect.
Contact
Privacy questions, requests or complaints: info@dellisantidesign.com, or use the contact form.