Policy Privacy | Durgin Paint Forge

1. Who we are

This Privacy Policy explains how Durgin Paint Forge collects and uses your personal data when you visit durginpaintforge.com, buy from the store, create an account or subscribe to our newsletter. We wrote it in plain English: no crows were harmed, and no legalese was used where it could be avoided.

The data controller is:

Durgin Paint Forge di Matteo Donzelli (sole proprietorship)

Via Circonvallazione 28, 18012 Bordighera (IM), Italy

VAT number: IT12390090012 Email: info@durginpaintforge.com

For any question about your data, or to exercise your rights, write to info@durginpaintforge.com.

2. What data we collect

Order data: name, email address, shipping and billing address, phone number (if you give it), the products you buy and your order history.
Payment data: card payments are processed by Wix Payments and PayPal payments by PayPal. We never see or store your full card number.
Account data (optional): if you create an account, your name, email, password (stored encrypted by Wix), order history and saved items. You can buy without an account.
Newsletter data: your email address, your subscription status and basic statistics on our emails (for example, whether an email was opened).
Messages: what you write to us by email or through the site.
Browsing data and cookies: IP address, browser and device type, pages visited and actions on the site, collected through cookies and similar technologies (see section 8).

3. Why we use your data

Each use of your data rests on a legal basis under the EU General Data Protection Regulation (GDPR).

Processing, shipping and following up your orders; customer support: performance of a contract (Art. 6(1)(b)).
Invoicing, accounting and tax obligations: legal obligation (Art. 6(1)(c)).
Managing your account, if you create one: performance of a contract (Art. 6(1)(b)).
Sending the newsletter ("Letters by Crow"): your consent (Art. 6(1)(a)), which you can withdraw at any time.
Protecting the site from spam and fraud (e.g. reCAPTCHA): legitimate interest (Art. 6(1)(f)).
Site statistics, heatmaps and session recordings (Wix Analytics, Hotjar): your consent via the cookie banner (Art. 6(1)(a)).
Measuring our ads on Facebook and Instagram (Meta Pixel) and playing embedded YouTube and Facebook videos: your consent via the cookie banner (Art. 6(1)(a)).

We do not sell your personal data, and we do not use it for automated decision-making.

4. Who we share it with

We share your data only with the providers we need to run the shop, and only the data each one needs.

Wix.com Ltd. hosts the site, store, member accounts and newsletter (Wix Email Marketing). Data: all the data listed in section 2.
Wix Payments processes card payments. Data: payment and order data.
PayPal (Europe) S.à r.l. et Cie, S.C.A. processes PayPal payments. Data: payment and order data.
G3 Worldwide Mail (Italy) S.r.l. (Spring GDS) delivers your parcels. Data: name, shipping address, email and phone for delivery updates.
Hotjar Ltd. (Malta) provides heatmaps and anonymous session recordings, only if you accept statistics cookies. Data: browsing data, clicks, scrolling and device information.
Meta Platforms Ireland Ltd. provides the Meta Pixel and embedded Facebook videos, only if you accept marketing cookies. Data: browsing data and cookie identifiers.
Google Ireland Ltd. provides reCAPTCHA spam protection on forms, and embedded YouTube videos only if you accept marketing cookies. Data: IP address and browser data.
Usercentrics GmbH manages your cookie consent choices. Data: consent choices and a consent identifier.
Our accountant and public authorities, for tax and legal obligations. Data: invoicing data.

Wix acts on our behalf as a data processor. PayPal, Meta and the courier may also act as independent controllers under their own privacy policies.

5. Transfers outside the EU

Some providers (Wix, Meta, Google, PayPal) may process data outside the European Economic Area, for example in Israel or the United States. Israel benefits from an EU adequacy decision; transfers to the United States rely on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

6. How long we keep it

Orders and invoices: 10 years, as required by Italian tax law.
Account data: until you delete your account.
Newsletter email: until you unsubscribe.
Messages you send us: as long as needed to answer, then up to 24 months.
Cookies: as set out in the cookie banner, or until you delete them from your browser.

7. Your rights

Under the GDPR you can ask us at any time to:
access the personal data we hold about you;
correct it if it is wrong;
delete it, unless we must keep it by law (for example, invoices);
restrict or object to its use;
receive it in a portable format;
withdraw your consent (for the newsletter, use the unsubscribe link in any email).
Write to info@durginpaintforge.com and we will reply within one month. If you think we have mishandled your data, you can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. Cookies

We use three kinds of cookies:
Essential cookies, set by Wix to make the site, cart and checkout work. These do not need your consent.
Statistics cookies (Wix Analytics and Hotjar), to understand how the site is used, including heatmaps and anonymous session recordings. Only with your consent.
Marketing cookies (Meta Pixel, embedded YouTube and Facebook videos), to measure our ads on Facebook and Instagram and to play embedded videos. Only with your consent: if you refuse, videos are replaced by a placeholder until you accept.
When you first visit the site, a banner lets you accept, reject or choose which cookies to allow. You can change your choice at any time through the "Cookie settings" link at the bottom of every page.

9. Children and changes to this policy

Our site and products are not intended for children under 14, and we do not knowingly collect their data.
We may update this policy when our services or the law change. The date at the top always shows the latest version; for significant changes, we will let newsletter subscribers know.
Last updated: 10 October 2026.