This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from our Site. Ensuring the transparency and protection of your personal data is our utmost priority.

1. Data Controller

The Data Controller is Mason Editions, with registered office at Castelfranco Veneto – Treviso – Italia, Email: admin@mason-editions.com.

2. Types of Data Collected

We collect only the information necessary to provide you with an exceptional experience:

• Identity Data: Name, surname, email address, and phone number.

• Shipping & Billing Data: Delivery address, tax ID/VAT number.

• Technical & Usage Data: IP address, browser type, and time spent on the site (collected via cookies).

• Payment Data: Processed exclusively through secure third-party gateways (we do not store your credit card details on our servers).

3. Purpose of Processing

Your data is processed for the following purposes:

• Contract Fulfillment: To manage your orders, shipping, and customer support.

• Legal Obligations: For invoicing, accounting, and tax compliance.

• Marketing (Subject to Consent): To send newsletters, collection previews, and invitations to exclusive events.

• Service Improvement: For anonymous statistical analysis to enhance site performance and user experience.

4. Legal Basis for Processing

We process your data only when:

• It is necessary for the performance of a contract (e.g., purchasing a product).

• There is a legal obligation to do so.

• You have provided explicit consent (e.g., subscribing to a newsletter).

• There is a legitimate interest (e.g., maintaining site security).

5. Data Sharing with Third Parties

Your data will never be sold. It may be shared exclusively with technical partners strictly necessary for the provision of our services:

• Logistics and shipping providers.

• Secure payment gateway providers.

• Tax and legal advisors.

• IT service and hosting providers.

6. International Data Transfers

Should your data be transferred outside the European Economic Area (EEA), we ensure that such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission to guarantee an adequate level of protection.

7. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined above:

• Order-related data: Retained for 10 years to comply with tax and legal requirements.

• Marketing data: Retained until you withdraw your consent or request erasure.

8. Your Rights

Under the GDPR and other applicable data protection laws, you have the right to:

• Access your data and request a copy.

• Request rectification or completion of inaccurate data.

• Request the erasure of your data (the “right to be forgotten”).

• Object to the processing of your data for marketing purposes.

• Request data portability.

To exercise your rights, please contact us at: [Insert Support Email].

9. Security Measures

We implement rigorous technical and organizational security measures (such as SSL encryption) to protect your data from unauthorized access, loss, or destruction.