Privacy Policy

What we use, and on what basis

Meta Pixel (Meta Platforms Ireland Ltd) — measures how our ads perform and attributes purchases back to them. Legal basis: your consent if you are in the EU, the EEA, the UK or Switzerland; elsewhere, our legitimate interest in measuring our ads, with the right to opt out at any time (see below).

Microsoft Clarity (Microsoft Ireland Operations Ltd) — records anonymised session activity: pages viewed, scrolling, clicks and mouse movement, so we can see where the site confuses people. Legal basis: your consent if you are in the EU, the EEA, the UK or Switzerland; elsewhere, our legitimate interest in improving the site, with the right to opt out at any time (see below).

Shopify (Shopify International Ltd) — processes your order, your payment and the delivery of your files. Legal basis: performance of our contract with you.

MailerLite (UAB MailerLite, Lithuania) — sends the emails you asked to receive. Legal basis: your consent.

Gumroad (Gumroad, Inc., United States) — when you buy through our Gumroad page, Gumroad acts as merchant of record: it processes your order and payment, collects any applicable sales tax or VAT, and delivers your files. Legal basis: performance of our contract with you.

Tally (Tally BV, Belgium) — hosts the form we use to collect reviews, only when you choose to fill it in. Legal basis: your consent.

Zoho Mail (Zoho Corporation) — hosts our mailbox info@thequietgarden.shop and stores the emails you send us. Legal basis: our legitimate interest in answering you.

Website hosting (Lovable) — serves the pages of this site and, like any web host, processes technical data such as your IP address and browser type to deliver them securely. Legal basis: our legitimate interest in running the site.

Google Fonts (Google Ireland Ltd) — delivers the typefaces used on this site; your browser connects to Google and shares your IP address to load them. Legal basis: our legitimate interest in displaying the site correctly.

Meta lead forms — if you requested a free guide through a form on Facebook or Instagram, Meta passes us the name and email you typed so we can send it to you. Legal basis: your consent.

Abandoned checkout reminders — if you entered your email at checkout and did not finish, we may send you one reminder about that specific order. Legal basis: our legitimate interest in completing a transaction you started. You can opt out from any such email.

Cookies and consent

If you visit from the EU, the EEA, the UK or Switzerland, cookies and similar technologies that are not strictly necessary — including the Meta Pixel and Microsoft Clarity — are only loaded after you accept them. If you decline, they are not loaded at all. We estimate your region from your browser's time zone; if it can't be determined, we treat you as a visitor from the EU.

If you visit from anywhere else, including the United States, the Meta Pixel and Microsoft Clarity load by default. We never sell your personal information for money, but some US state privacy laws (such as California's CCPA/CPRA) treat advertising pixels as "sharing" personal information for cross-context behavioral advertising. You can opt out at any time through the "Do Not Sell or Share My Personal Information" link in the footer of every page. We also honor the Global Privacy Control (GPC) signal: if your browser sends it, the Meta Pixel and Microsoft Clarity are not loaded.

You can change or withdraw your choice at any time through the "Cookie preferences" link in the footer of every page. Withdrawing is as easy as giving consent, and has no effect on processing carried out beforehand.

Where your data goes

Some of the providers above process data outside the European Union, mainly in the United States. Those transfers rely on the EU–US Data Privacy Framework and, where applicable, on the European Commission's Standard Contractual Clauses.

How long we keep it

Email subscribers: until you unsubscribe, plus 12 months.
Order and payment records: 10 years, as Italian tax law requires.
Session analytics: up to 13 months.
Abandoned checkout data: 90 days.

Your rights

You can ask us to access, correct, delete, restrict or port your personal data, and you can object to processing based on legitimate interest. Write to info@thequietgarden.shop and we will reply within 30 days.

If you live in a US state with a consumer privacy law, you can also ask to know, correct or delete the personal information we hold about you, and opt out of its sale or sharing. We will never treat you differently for exercising these rights.

If you believe we are handling your data unlawfully, you have the right to lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali, www.garanteprivacy.it — or with the authority in your country of residence.