Last updated: 19 October 2026

This policy explains what personal data All’Amarone collects when you browse or buy on shop.allamarone.com, why we collect it, who else handles it and what you can ask us to do with it. It follows the EU General Data Protection Regulation (GDPR) and Italian privacy law (D.Lgs. 196/2003). For the wine bar and www.allamarone.com, see the policy on that site.

1. Who is responsible for your data

Depietri Alfredo di Laloum Nicole & C. S.a.s., trading as All’Amarone
San Polo 1131, 30125 Venezia, Italy
VAT IT04142720277
Email: info@allamarone.com, Telephone: +39 041 5231184

We have not appointed a Data Protection Officer. For any privacy question, write to info@allamarone.com.

2. What we collect and why

Orders, payment and delivery

When you place an order we collect your name, email address, telephone number, billing and delivery address, the wines you buy and any note you add. We use them to take payment, issue the invoice, ship the parcel and keep you informed about it. Legal basis: contract (Art. 6(1)(b) GDPR) and our legal duty to keep tax and accounting records (Art. 6(1)(c)).

Payments are handled by Stripe, including Apple Pay, Google Pay, Link and Klarna when you choose them. Your card details go straight to Stripe and never reach our website or our staff. If you choose Klarna, Klarna receives your order and contact details to decide on and manage the payment, under its own privacy terms.

While you type your address at checkout, Google Maps suggests matching addresses. What you type and your IP address are sent to Google for that purpose only. Legal basis: our legitimate interest in correct delivery addresses (Art. 6(1)(f)).

Customer account

If you create an account we keep your login details, addresses and order history so you can see past orders and buy again faster. You can ask us to close the account at any time. Legal basis: contract (Art. 6(1)(b)).

Wine Club subscriptions

If you subscribe to one of our Wine Clubs we keep your subscription, delivery and payment references so each shipment can be prepared, charged and sent. Legal basis: contract (Art. 6(1)(b)).

Unfinished orders

If you enter your email address at checkout but do not complete the order, we keep that address with the contents of your cart. We may send you up to two reminders within a few days, each with a link to stop them, and we may record the request in our customer records so we can help you finish it. Legal basis: our legitimate interest in helping customers complete an order they started (Art. 6(1)(f)). You can object at any time with the link in the email or by writing to us.

Newsletter and guides

If you subscribe, or ask for one of our guides, we use your email address and name to send our newsletter through Mailchimp. Every email has an unsubscribe link. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.

Contact forms, chat, email and telephone

If you write to us through a form, the chat window, email, telephone or WhatsApp, we use your contact details and message to answer you. The chat is run by Zoho SalesIQ; WhatsApp is run by WhatsApp Ireland Limited (Meta), whose own privacy terms apply to the messages you send through it. Legal basis: steps at your request (Art. 6(1)(b)).

Website statistics

Only if you click “Accept” in our cookie notice, we use Google Analytics 4 to count visits and see which wines and pages are viewed and bought, and Hotjar to see how pages are used (clicks, scrolling, device type), so we can improve the shop. Advertising storage and personalisation stay switched off. Legal basis: your consent (Art. 6(1)(a)). If you choose “Only essential”, neither is loaded.

Security and technical data

Our hosting provider records technical data such as IP address, browser and the pages requested, to keep the shop running and protect it from attacks and fraud. Legal basis: our legitimate interest in a secure shop (Art. 6(1)(f)).

3. Cookies

You can change your choice at any time with the “Cookie preferences” link at the bottom of every page.

Essential cookies, needed for the shop to work, always set:

  • amsh_consent (ours): remembers your cookie choice. Kept 6 months.
  • wp_woocommerce_session_*, woocommerce_cart_hash, woocommerce_items_in_cart (ours): keep your cart and checkout. Kept up to 2 days.
  • wordpress_logged_in_*, wordpress_sec_* (ours): keep you signed in to your account. Kept until you sign out, or up to 14 days if you tick “Remember me”.
  • wp-wpml_current_language, amsh_ship_cc (ours): remember your language and the country you ship to. Kept 1 day and 1 year.
  • woodmart_recently_viewed_products (ours): shows the wines you looked at last. Kept 1 week.
  • __stripe_mid, __stripe_sid (Stripe): prevent payment fraud. Kept up to 1 year and 30 minutes.
  • portal10577-_zldp, portal10577-_zldt (Zoho SalesIQ): keep the chat conversation going between pages. Kept up to 1 year.

Statistics cookies, only after “Accept”:

  • _ga, _ga_* (Google Analytics): tell visits apart for statistics. Kept up to 2 years.
  • _hjSessionUser_*, _hjSession_* (Hotjar): tell visits apart for usage analysis. Kept up to 1 year.

Our pages also load fonts from Adobe Fonts and reviewer photos from Google servers. These requests pass your IP address to those providers but set no cookies.

4. Who else handles your data

We never sell your data. We share it only with the providers that help us run the shop, each bound by a data processing agreement or acting under its own privacy terms:

  • SiteGround (shop hosting)
  • Stripe and Klarna (payments)
  • Google (business email, address suggestions at checkout and, with your consent, Google Analytics)
  • Hotjar (usage analysis, with your consent)
  • Mailchimp, by Intuit (newsletter)
  • Zoho (customer records and chat)
  • Zapier (passes order details to our customer records)
  • TeamSystem, Fatture in Cloud and Cassa in Cloud (invoicing and stock)
  • Mail Boxes Etc. and the couriers it works with (delivery)
  • Meta, WhatsApp (only if you contact us on WhatsApp)
  • Our accountant, and public authorities and customs offices when the law or an export requires it

5. Transfers outside the EU

Some of these providers are based in the United States or may process data there (Google, Stripe, Mailchimp, Zapier, Meta). Such transfers rely on the EU US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses. When you ship wine outside the EU, your name and address also travel with the parcel to the carriers and customs authorities of the destination country.

6. How long we keep it

  • Orders, invoices and accounting records: 10 years, as Italian law requires.
  • Customer account: until you ask us to close it; the orders inside it are then kept as above.
  • Unfinished orders and contact requests: kept in our records so we can follow up and recognise returning customers, until you ask us to delete them.
  • Newsletter: until you unsubscribe.
  • Google Analytics data: up to 14 months.

7. Your rights

You can ask us at any time to see the data we hold about you, correct it, delete it, limit its use, receive it in a portable format, or object to its use. Where we rely on your consent you can withdraw it at any time, without affecting what was done before. Write to info@allamarone.com; we answer within one month. Records we must keep by law, such as invoices, cannot be deleted before the legal period ends.

You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority in your own EU country.

8. Age

We sell alcohol only to adults. The shop is not meant for anyone under 18, and we do not knowingly collect their data.

9. Changes

We may update this policy when our services or the law change. The date at the top shows the latest version.