At Triungulo Lab di Guglielmo Galluccio ("Triungulo Lab", "we", "us"), your privacy matters to us. This Privacy & Cookies Policy explains what personal data we collect when you visit our website or purchase our handmade guitar effects, why we collect it, how long we keep it, and what rights you have under the EU General Data Protection Regulation (GDPR) and Italian law (Legislative Decree 196/2003, as amended, and the Garante's Cookie Guidelines).
Data Controller
The Data Controller is Guglielmo Galluccio, trading as Triungulo Lab, VAT/Tax ID IT02994050645, registered address via Vidicito SNC, 83020, Contrada, Italy. You can contact us at will@triungulolab.com for any question about this policy or your personal data.
Information We Collect
When you browse our store or place an order, we collect the personal data you provide directly, such as your name, billing address, shipping address, email address, and phone number. If you ask to be notified when an out-of-stock item becomes available, we also collect the email address you provide for that specific purpose.
How and Why We Use Your Data
| Purpose | Legal basis | Notes |
|---|---|---|
| Processing and fulfilling your order, invoicing, customer service | Performance of a contract (Art. 6(1)(b) GDPR) | Providing this data is necessary to complete your purchase; without it we cannot process or ship your order. |
| Payment processing | Performance of a contract (Art. 6(1)(b) GDPR) | Handled directly by PayPal and Shopify Payments (Shopify Payments Italy Ltd / Shopify Inc.). We do not receive or store your full card or account details. |
| Shipping your order | Performance of a contract (Art. 6(1)(b) GDPR) | Shared with the courier you choose or we assign (DHL, SDA, BRT, UPS or FedEx). |
| Back-in-stock notifications | Consent (Art. 6(1)(a) GDPR) | Only if you explicitly request it. You can withdraw consent at any time; we will stop contacting you and delete the data. |
| Accounting and tax obligations | Legal obligation (Art. 6(1)(c) GDPR) | Order and invoice data kept for the periods required by Italian tax law. |
We do not send marketing or promotional emails, and we do not carry out profiling or automated decision-making that produces legal or similarly significant effects on you.
Who We Share Your Data With
We share personal data only with the providers strictly necessary to run our store and deliver your order:
- Shopify Inc. – our e-commerce platform and hosting provider.
- PayPal, Klarna and Shopify Payments – payment processing.
- DHL, SDA, BRT, UPS, FedEx – shipping and delivery, limited to the data needed to deliver your order.
These providers act as independent data controllers or as our data processors under Art. 28 GDPR, and may only use your data to provide their service to us. Some of them (e.g. Shopify Inc., PayPal) are based outside the European Economic Area, in particular in the United States. Where this occurs, the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework, as applicable to each provider. We do not sell your personal data to anyone.
How Long We Keep Your Data
- Order, invoice and accounting data: kept for 10 years, as required by Italian tax and civil law.
- Back-in-stock notification requests: kept until the notification is sent or for a maximum of 12 months, whichever comes first, or until you withdraw consent.
- Cookie data: see retention periods in the Cookie table below.
How We Use Cookies
Our website uses cookies and similar technologies. We only set cookies that are strictly necessary without asking for consent first. Any other cookie (analytics, marketing, or third-party) is activated only after you give explicit, opt-in consent through our cookie banner, which you can reopen at any time to change your choices.
| Category | Purpose | Consent required? |
|---|---|---|
| Necessary / technical | Shopping cart, checkout session, security, load balancing, currency and language preferences | No – strictly necessary for the site to function |
| Analytics | [Shopify Analytics, Google Analytics] | Yes – prior opt-in |
| Marketing / third-party | [none] | Yes – prior opt-in |
You can also manage or delete cookies at any time through your browser settings, though this may affect certain site features such as the shopping cart.
Your Rights
Under the GDPR, you have the right to: access your personal data; request rectification or erasure; request restriction of processing; object to processing; request data portability; and withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us at will@triungulolab.com.
You also have the right to lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of your EU country of residence.
Data Security
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, in line with our obligations under the GDPR.
Changes to This Policy
We may update this Privacy & Cookies Policy from time to time. Changes will be posted on this page with an updated revision date.
Last updated: 17/09/2026.