Privacy Policy
Last updated: Luglio 16, 2026
This Privacy Policy sets out how arboressa.com (hereinafter referred to as the “Website”, “we”, “us”, or “our”) collects, uses, stores, discloses and protects personal data of users (the “User” or “you”) when accessing or interacting with our website, especially when submitting an order through one of our product landing pages.
We are committed to protecting your personal data in compliance with applicable data protection laws, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), as well as international standards where relevant.
1. Data Controller
The data controller responsible for the processing of your personal data is:
arboressa.com
Email: [email protected]
Website: https://arboressa.com
2. What data we collect
We may collect the following categories of personal data:
- Identification data: Name, surname
- Contact details: Email address, telephone number, shipping address
- Order details: Product selected, quantity, delivery preferences
- Usage data: IP address, browser type, device information, access times
- Tracking and cookie data: Pages visited, interactions with landing pages, referrer, session duration (see Cookie Policy)
3. How we collect your data
Your data may be collected directly from you, or automatically during your interaction with the Website, through the following means:
- When you fill out a product order form on one of our landing pages
- When you contact us via email or messaging services
- Via cookies and similar tracking technologies (e.g. pixels, tags)
4. Why we process your data
Your personal data is processed for the following purposes:
- Order forwarding: To transmit your product order to the third-party seller responsible for fulfillment
- Customer contact: To enable the seller to reach you for order confirmation, payment, or delivery
- Affiliate performance: To monitor conversions and campaign performance without storing your data beyond necessity
- Compliance: To meet legal obligations related to data protection, fraud prevention, and cooperation with authorities
- Technical optimization: To improve the functionality, speed, and usability of the Website
5. Legal basis for processing
We process your data only where we have a lawful basis to do so, including:
- Consent: Provided by submitting an order form or contacting us directly
- Contract performance: When necessary to forward your request to the seller for order execution
- Legitimate interests: To operate our affiliate business model and analyze campaign success
- Legal obligations: Where required by law, such as recordkeeping or cooperation with authorities
6. Who we share your data with
We do not sell your data. However, we share your personal data with trusted third parties only when necessary and under the following circumstances:
- Third-party sellers (Final Sellers): When you submit an order, your data is transmitted to the seller who acts as an independent data controller and handles payment, shipping, invoicing, and customer support
- Analytics and tracking providers: We may share anonymized usage data with services like Google Analytics or Meta Pixel to monitor conversions and campaign performance
- Legal entities: If legally required, we may share data with law enforcement or regulatory bodies
7. How long we keep your data
We retain your personal data only for the time necessary to fulfill the purpose for which it was collected. Specifically:
- Order submission data: retained only until it is transmitted to the seller, then deleted
- Form logs and backups (if any): retained for a short technical window for delivery assurance (max 7 days)
- Analytics data: retained in aggregate and anonymized form
8. Data security
We adopt appropriate technical and organizational measures to ensure a high level of security and confidentiality of personal data. These include:
- Secure HTTPS connections and form submission encryption
- Limited access to data only by authorized personnel
- Strict retention policies
- Use of secure hosting providers within the EU or with appropriate safeguards
9. International transfers
In some cases, your data may be transferred outside the European Economic Area (EEA) due to the location of third-party sellers or technology providers. In these cases, we ensure:
- That the destination country is recognized as adequate by the European Commission, or
- That appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs)
10. Your rights under the GDPR
As a data subject, you have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Withdraw your consent at any time
- Lodge a complaint with your local Data Protection Authority
To exercise any of these rights, please contact us at [email protected].
11. Third-party websites and services
Our Website may contain links or integrations with third-party platforms such as Facebook, TikTok, or WhatsApp. These providers act as independent data controllers. We encourage you to review their privacy policies:
12. Updates to this Privacy Policy
We reserve the right to amend this Privacy Policy at any time, in line with changes to legal requirements or our processing practices. The latest version will always be available on this page with the “Last updated” date.
13. Contact us
If you have questions, requests or concerns about this Privacy Policy or your personal data, you can reach us at: