Privacy Policy

Last updated: 18 July 2026

Data controller: THAT'S IT BY FABRIZIO ROSA SRL, VAT number IT04122710124, with registered office at Via Alessandro Volta 1, 21052 Busto Arsizio (VA), Italy. Email: info@thatsitbeauty.com.

Online withdrawal: when you use the withdrawal function, we process your name, order or contract identifier, email address and any optional product details to receive, acknowledge and handle the declaration, comply with legal duties and perform the contractual relationship. Do not enter health information or other sensitive data in the optional field. We send the acknowledgment through our email provider Resend; any international transfers follow the safeguards described in this policy. We retain the data for as long as needed to handle the declaration and meet subsequent legal, accounting and legal-claims requirements. You may exercise the rights described below by emailing info@thatsitbeauty.com.

This Privacy Policy describes how That's It by Fabrizio Rosa (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from https://thatsitbeauty.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services.

Please read this Privacy Policy carefully. It explains our processing activities and your rights. Where the law requires consent, we request it separately; merely using the site does not replace a required consent.

Information We Collect

We collect information that you provide directly to us, information obtained automatically when you access our Services, and information obtained from third-party sources.

Information You Provide:

• Contact details (name, email, phone number, mailing address)
• Order information (billing address, shipping address, payment confirmation)
• Account information (username, password, account preferences)
• Customer support information (messages, feedback, survey responses)
• Any other information you choose to provide

Information Collected Automatically:

• Device information (operating system, browser type, device identifier)
• Usage data (pages viewed, links clicked, browsing actions)
• Location data (IP address, time zone, approximate location)
• Cookies and similar tracking technologies

How We Use Your Information

• To provide, maintain, and improve our Services
• To process transactions and send related information
• To send you marketing communications (with your consent)
• To respond to your comments, questions, and customer service requests
• To comply with legal obligations
• To detect, prevent, and address fraud and security issues

How We Share Your Information

We may share your personal information with:

• Service providers: Third parties that provide services on our behalf, such as payment processing, shipping, data analysis, email delivery, and customer service.
• Business partners: Third parties with whom we partner to offer certain products, services, or promotions.
• Legal compliance: When required by law, regulation, or legal process.

We do not sell your personal information for money. However, certain disclosures for advertising can be treated as a “sale”, “sharing” or targeted advertising under some laws. Where applicable, you can exercise the relevant opt-out through our data-sharing opt-out page; Global Privacy Control signals are also honored automatically. You can manage consent choices through our cookie-preference tools.

Shopify Hosting, Enhanced Services and Advertising

Our store is hosted by Shopify, which collects and processes personal information when you visit the store or make a purchase so that it can provide, secure and improve the commerce services used by us and by you. Shopify Network Intelligence and the relevant Shopify Enhanced Services are enabled for this store. Shopify therefore also processes data from your interactions with this store, with other merchants and with Shopify to provide services such as personalization, analytics and more relevant advertising.

Information you submit and activity data may be shared with Shopify and other third parties, including service providers, in countries outside the country where you live, subject to applicable transfer safeguards. For Enhanced Services processing, Shopify acts as an independent data controller (or “business” under applicable US laws), as described in its Consumer Privacy Policy; we remain controller for our own processing. You can withdraw consent or object to certain Shopify processing through our cookie-preference tools and the Shopify Privacy Portal. For people in the EEA, United Kingdom or Switzerland, advertising based on interactions with this store, other merchants and Shopify is carried out only after the consent required by law has been obtained; that choice can be changed or withdrawn through our cookie-preference tools. Where US privacy law applies, you can opt out of sale, sharing or targeted advertising through our data-sharing opt-out page or by using Global Privacy Control.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings and other tools. However, if you block certain cookies, you may not be able to use certain features of the Services.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Your Rights

Depending on where you live, you may have some or all of the following rights in relation to your personal information:

• Right of Access: Request a copy of your personal information.
• Right of Rectification: Request correction of inaccurate information.
• Right of Erasure: Request deletion of your personal information.
• Right to Restrict Processing: Request that we restrict the processing of your information.
• Right to Data Portability: Request a copy of your information in a structured, machine-readable format.
• Right to Object: Object to our processing of your personal information.
• Right to Withdraw Consent: Withdraw your consent at any time.

To exercise any of these rights, please contact us using the details below. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities here.

International Users

Please note that we may transfer, store and process your personal information outside the country you live in. Your personal information is also processed by staff and third party service providers and partners in these countries.

If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact