Lemei
Privacy Policy
How Lemei collects and uses personal data, under the EU General Data Protection Regulation.
Last updated: 25 October 2026
Who is responsible for your data
The data controller is Alessandra Marangione, trading as LEMEI di Alessandra Marangione, Via Giuseppe Compagnoni 60, 20129 Milano (MI), Italy, Partita IVA IT12027390967. For any privacy question or request, write to support@lemei-factory.com or call +39 02 4946 3537.
What data we collect
- Order data: name, email address, billing and delivery address, phone number if you give it, the products you buy and the order history.
- Payment data: card payments are handled by Stripe. We receive only limited information such as the card brand, the last four digits and the payment result. We never see or store your full card number.
- Account data: if you create an account, your login email and a password stored in encrypted form.
- Messages: what you write to us by email or through the contact form.
- Technical data: IP address, browser type and the pages requested, recorded in server logs for security, and the technical cookies described in our Cookie Policy.
Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Taking, paying for, delivering and returning your order; customer service | Performance of a contract, art. 6(1)(b) |
| Accounting, invoicing and tax records | Legal obligation, art. 6(1)(c) |
| Preventing payment fraud and keeping the website secure | Legitimate interest, art. 6(1)(f) |
| Answering messages sent through the contact form | Steps at your request before a contract, or legitimate interest, art. 6(1)(b) and (f) |
We do not send marketing emails and we do not sell your data. We do not use advertising or analytics cookies.
Who receives your data
- Stripe Payments Europe, Ltd. (Ireland), to process card payments and screen for fraud.
- Poste Italiane S.p.A. (Italy), to deliver orders and returns. We share your name, delivery address and, if given, phone number.
- Hostinger, our website hosting provider, which stores the website and its database.
- Our email service provider, to send order emails and answer messages.
- Our accountant and public authorities, where the law requires it.
These providers act on our instructions or as independent controllers for their own legal duties. Some providers, such as Stripe, may transfer data outside the European Economic Area. In that case they rely on an adequacy decision of the European Commission or on the Commission's Standard Contractual Clauses.
How long we keep it
- Order, invoice and accounting records: 10 years, as required by Italian law (article 2220 of the Civil Code).
- Contact form messages and emails not linked to an order: up to 24 months.
- Account data: until you delete your account or ask us to delete it, except data we must keep by law.
- Server logs: up to 30 days, unless needed to investigate a security incident.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its use, and receive it in a portable format (articles 15 to 22 GDPR). Write to support@lemei-factory.com. We reply within one month. You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali.
Automated decisions
Stripe uses automated checks to detect payment fraud. A payment may be declined as a result. You can contact us to have a decision reviewed by a person.
Children
Our shop is not aimed at children under 14 and we do not knowingly collect their data.
Security
The whole website, including checkout, uses an encrypted HTTPS connection. Access to order data is limited to the people who need it to run the shop.
Changes
We may update this policy. The date at the top shows the latest version.