Privacy policy

Last updated: March 1, 2026

ChalkWave operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). arrampica.shop is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Data Controller (EU/EEA)

For the purposes of the General Data Protection Regulation (“GDPR”) and applicable data protection laws, the data controller of your personal information is:

Alberto Silvestrini – arrampica!
Piazza Repubblica, 22
38074 Dro (TN), Italy
VAT: 02822220220
Email: info@arrampica.it

Personal Information We Collect or Process

When we use the term “personal information,” we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including payment card information, payment confirmation and other payment details. (Note: payment processing is handled by Shopify and/or payment providers; we do not store full payment card numbers.)
  • Account information including your username, password, preferences and settings (if you create an account).
  • Transaction information including items you view, put in your cart, add to your wishlist, or purchase, as well as returns, exchanges, cancellations, and past transactions.
  • Communications with us including information you include when you contact customer support or otherwise communicate with us.
  • Device information including information about your device, browser, network connection, IP address and other unique identifiers.
  • Usage information including information about how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you including when you create an account, place an order, contact us, subscribe to marketing communications, or otherwise provide information to us;
  • Automatically through the Services including from your device when you use our Services, through cookies and similar technologies;
  • From our service providers including Shopify and other vendors who collect or process personal information on our behalf to provide the Services;
  • From partners or other third parties where you choose to interact with them (for example, social media tools) or where permitted by law.

Legal Basis for Processing (EU/EEA)

If you are located in the European Union/European Economic Area, we process your personal information on the following legal bases under Article 6 GDPR:

  • Performance of a contract (Art. 6(1)(b)) – to process and fulfill your orders, payments, shipping, returns, exchanges, and to provide customer support.
  • Compliance with legal obligations (Art. 6(1)(c)) – to comply with tax, accounting, consumer protection and other legal requirements.
  • Legitimate interests (Art. 6(1)(f)) – to secure our Services, prevent fraud, debug issues, improve our store performance, and understand how customers use our Services.
  • Consent (Art. 6(1)(a)) – where required, for marketing communications and for non-essential cookies/trackers (such as analytics and advertising cookies). You can withdraw consent at any time.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, process payments, fulfill orders, manage accounts, arrange shipping, facilitate returns/exchanges, and provide customer support. We may also use information to improve the Services and user experience.
  • Marketing and Advertising. Where required by applicable law, we use your personal information to send marketing communications (for example via Shopify Email) and to show you advertisements for products or services. We use marketing/advertising technologies such as the Meta Pixel to help measure and improve advertising performance and to show relevant ads. Marketing cookies and trackers are used only after you provide consent through our cookie banner where required.
  • Analytics. We use analytics tools such as Google Analytics to understand how visitors use our store, measure performance, and improve our Services. Analytics cookies are used only after you provide consent through our cookie banner where required.
  • Security and Fraud Prevention. We use personal information to authenticate accounts, provide a secure experience, detect and prevent fraud or malicious activity, and protect the Services.
  • Communicating with You. We use personal information to provide customer support, respond to inquiries, and maintain our relationship with you.
  • Legal Reasons. We use personal information to comply with law, respond to legal process, and enforce or investigate potential violations of our terms or policies.

Cookies and Tracking Technologies

We use cookies and similar technologies (such as pixels and tags) to operate and improve our Services. Cookies may be “necessary” (required for the website to function) or “non-essential” (such as analytics or marketing cookies).

  • Necessary cookies help the website function (e.g., shopping cart, checkout, security).
  • Analytics cookies help us understand how visitors use the website (e.g., Google Analytics).
  • Marketing cookies help us deliver and measure advertising (e.g., Meta Pixel).

Where required by law, we use non-essential cookies only after you provide consent through our cookie banner. You can manage or withdraw your consent at any time through the cookie settings available on our website.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • Service providers such as Shopify and vendors who perform services on our behalf (e.g. payment processing, IT management, data analytics, customer support, cloud storage, fulfillment and shipping).
  • Marketing and advertising partners to provide marketing services and advertise to you (for example, Meta). Where required, such sharing occurs only with your consent through our cookie banner.
  • When you direct or consent to our disclosure of certain information to third parties (for example, to ship products or through social media integrations).
  • Legal and safety to comply with legal obligations, respond to lawful requests, enforce terms and policies, and protect the Services, our rights, and the rights of users or others.
  • Business transfers in connection with a business transaction such as a merger, acquisition, restructuring or insolvency.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify and other third parties that may be located in countries other than where you reside, in order to provide the Services. To learn more about how Shopify uses personal information, please review the Shopify Consumer Privacy Policy and, where available, the Shopify Privacy Portal.

Third Party Websites and Links

The Services may provide links to websites or platforms operated by third parties. If you follow links to sites not affiliated with us, you should review their privacy and security policies and other terms. We are not responsible for the privacy or security practices of third-party websites.

Children’s Data

The Services are not intended for individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

Security and Retention of Your Information

No security measures are perfect, and we cannot guarantee absolute security. We recommend that you do not use unsecured channels to communicate sensitive information.

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements and policies. Retention periods may vary depending on the type of information and the purposes for which it is processed.

Your Rights and Choices (EU/EEA)

If you are located in the EU/EEA, you have rights under the GDPR, subject to exceptions and limitations provided by law. These may include:

  • Right of access – obtain confirmation as to whether we process your personal information and access to that information.
  • Right to rectification – request correction of inaccurate or incomplete personal information.
  • Right to erasure – request deletion of your personal information in certain circumstances.
  • Right to restrict processing – request limitation of processing in certain circumstances.
  • Right to data portability – receive a copy of certain personal information in a structured, commonly used format and request transfer to another controller.
  • Right to object – object to processing based on legitimate interests in certain circumstances, including direct marketing.
  • Withdrawal of consent – where we rely on consent, you can withdraw consent at any time.

Marketing preferences: If you receive promotional emails, you may opt out at any time by using the unsubscribe link in the emails. If you opt out, we may still send non-promotional messages related to your account or orders.

To exercise your rights, please contact us using the details in the “Contact” section below. We may need to verify your identity before responding.

Complaints

If you have concerns about how we process your personal information, please contact us first and we will try to resolve the issue. You also have the right to lodge a complaint with your local data protection authority. For the EEA, you can find a list of supervisory authorities here.

International Transfers

We may transfer, store and process your personal information outside the country where you live, including outside the European Economic Area.

Where required, if we transfer your personal information outside the EEA, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms under applicable data protection law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website and update the “Last updated” date.

Contact

If you have questions about this Privacy Policy or would like to exercise your rights, please contact us at:

Email: info@arrampica.it
Address: Piazza Repubblica, 22, 38074 Dro (TN), Italy