Privacy policy
Last updated: 2 September 2026
This Privacy Policy describes how LI BASSI FASHION GROUP S.R.L., owner of the AM2STORE brand, collects and processes the personal data of users who visit the website https://am2store.com, make a purchase, create an account, subscribe to the newsletter, submit a support request or use the other services available on the website.
Personal data is processed in compliance with Regulation (EU) 2016/679 (“GDPR”), Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, and other applicable personal data protection provisions.
1. Data controller
The data controller is:
LI BASSI FASHION GROUP S.R.L.
Via Tevere 27, 51039 Le Fornaci (PT), Italy
VAT number: 01986320479
Email: info@am2store.com
Telephone: +39 376 017 4734
No Data Protection Officer (DPO/RPD) has been appointed. All requests relating to privacy and the exercise of rights may be sent directly to the controller at the email address given above.
2. Scope
This policy applies to data processed through the AM2STORE website, the Shopify shop, the contact form, customer service, the newsletter, reviews, payment systems, advertising features and other tools connected to the website.
Third-party websites, applications and services accessible through external links operate under their own privacy policies, which users are encouraged to read.
3. Personal data collected
Depending on how the website is used, we may process the following categories of data:
- Identification and contact details: first name, surname, email address, telephone number, billing address and shipping address.
- Order data: products purchased, amounts, order date, any returns, exchanges, refunds, communications and information needed for delivery.
- Payment data: chosen payment method, transaction status and identifier. Full payment card details are processed by payment providers and are not stored directly by AM2STORE.
- Customer account data: account information, order history, saved addresses and preferences.
- Communication data: content of requests sent through the contact form, email, telephone or WhatsApp, including any attachments.
- Review data: name or pseudonym, rating, text, images and other information voluntarily published.
- Technical and browsing data: IP address, device type, operating system, browser, language, pages visited, access dates and times, online identifiers, cookie data and interactions with the website.
- Marketing data: email address, preferences, consents and interactions with newsletters, campaigns and promotional communications.
We do not intentionally request special categories of personal data, such as health, biometric, political or religious information. Please do not provide such information through the contact form or other support channels unless strictly necessary.
4. Data sources
Data may be collected:
- directly from you when you place an order, create an account, complete a form, subscribe to the newsletter or communicate with us;
- automatically during website use, through cookies, pixels, technical logs and similar technologies;
- from providers supporting our services, payments, shipping, security, reviews and marketing activities;
- from advertising partners, strictly within the limits permitted by law and the preferences expressed.
5. Purposes and legal bases for processing
Management of orders and the contractual relationship
We process data to receive and manage orders, process payments, organise shipping, provide updates and manage exchanges, returns, refunds and after-sales support. The legal basis is the performance of a contract or pre-contractual steps requested by the data subject, under Article 6(1)(b) of the GDPR.
Account creation and management
We process data to create and administer the customer account, display order history and save requested preferences. The legal basis is the performance of the contract or steps requested by the user.
Support and communications
We process data to respond to requests received through the contact form, email, telephone or WhatsApp. The legal basis is the performance of pre-contractual or contractual steps, or the controller's legitimate interest in providing support and managing customer relationships.
Administrative, tax and legal obligations
We process data to issue tax documents, keep accounts, fulfil legal obligations and respond to requests from authorities. The legal basis is compliance with a legal obligation under Article 6(1)(c) of the GDPR.
Security and fraud prevention
We process technical, account and transaction data to protect the website and prevent unauthorised access, fraud, non-payment and unlawful activities. The legal basis is the controller's legitimate interest in shop security and the protection of its rights, together with any applicable legal obligations.
Newsletter and promotional communications
With your consent, we may use your email address to send news, promotions and commercial communications about AM2STORE. The legal basis is consent under Article 6(1)(a) of the GDPR.
You can withdraw your consent at any time by clicking the unsubscribe link in the emails or by writing to info@am2store.com. Withdrawal does not affect the lawfulness of processing carried out previously.
Product reviews
We may use order data to invite you to leave a review and verify its authenticity. Review management serves the controller's legitimate interest in collecting genuine feedback and improving products and services. Additional content or identifiable images are published based on the user's choice and, where necessary, consent.
Analytics, personalisation and advertising
With prior consent where required, we may use cookies, pixels and similar tools to measure website use, assess campaign performance, personalise content and display relevant advertising. The legal basis is consent, which can be changed or withdrawn through the cookie banner preferences.
Defence of rights
Data may be used to establish, exercise or defend a right of the controller in or out of court. The legal basis is the legitimate interest in protecting its rights.
6. Whether providing data is mandatory
Data marked as mandatory during purchase is necessary to conclude and perform the contract. Failure to provide it may prevent the order, payment or shipping from being processed.
Providing data for newsletters, marketing, analytics cookies and advertising cookies is optional. Refusing or withdrawing consent does not prevent browsing the website or making purchases using its essential features.
7. Payments
Payments are handled through Shopify and the providers selected at checkout, which may include Shopify Payments, Shop Pay, PayPal, Klarna, Scalapay and other available payment networks or digital wallets.
When you choose one of these services, the data needed for the transaction is shared with the relevant provider. PayPal, Klarna and Scalapay may process data as independent controllers, including for fraud checks, identification, assessment of eligibility for deferred payments and regulatory compliance.
For more information, please see:
8. Shopify
The website and online shop are hosted and supported by Shopify. Shopify processes personal data needed to operate the website, checkout, accounts, payments, fraud prevention and other services connected to the platform.
Some data may be transferred to Shopify and its group companies, including in countries other than the user's own. If Shopify Network Intelligence is enabled, Shopify may use data about interactions with the shop, together with data from other merchants, to provide advanced security, analytics, personalisation and advertising services, in accordance with applicable consent preferences.
You can consult the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
9. Cookies and tracking technologies
The website uses cookies and similar technologies. Cookies may be:
- Necessary: essential for navigation, the basket, checkout, security, authentication and saving preferences. They do not require consent when strictly necessary.
- Functional: enable additional features and better personalisation of the experience.
- Analytics: help us understand how the website is used and improve its performance and content.
- Advertising: allow campaigns to be measured and more relevant promotional communications to be displayed.
The website may use Shopify, Google Tag Manager and any Google tools configured through it, Google reCAPTCHA, YouTube, Meta Pixel, WhatsApp, Judge.me, AfterShip/Automizely and other tools needed for the requested features.
In regions where required, non-essential cookies and tracking tools are used on the basis of consent given through the cookie banner. You can accept, reject or change your preferences using the controls available in the banner.
Cookie lifetimes vary according to their function and provider. Non-essential cookies are stored according to the settings of the relevant tools and generally for no more than 24 months, unless consent is renewed or different technical and legal obligations apply.
For more information about Google services, see the Google Privacy Policy. For Meta services, see the Meta Privacy Policy.
10. Providers and data recipients
Data may be disclosed, to the extent necessary, to the following categories of recipients:
- Shopify and e-commerce platform providers;
- payment providers, banks and financial networks;
- carriers, logistics operators and parties responsible for delivery;
- Judge.me for collecting and managing reviews;
- AfterShip/Automizely for pop-ups, newsletters and communications, when used;
- Google and Meta for analytics, security, content and advertising, within the scope of the consent given;
- IT, hosting, maintenance, security and technical support providers;
- accountants, consultants, lawyers and other professionals subject to confidentiality obligations;
- public, administrative, tax, judicial or public security authorities where required by law.
Providers processing data on our behalf are appointed as processors where required by Article 28 of the GDPR. Some parties, particularly payment providers and third-party platforms, may act as independent data controllers.
We do not sell personal data for money. Some technical data may be shared with advertising partners for measurement or personalised advertising, strictly within the limits permitted by law and in accordance with the user's stated preferences.
11. International transfers
Some providers may process personal data outside the European Economic Area. In such cases, transfers are based on a European Commission adequacy decision, Standard Contractual Clauses approved by the European Commission or another mechanism recognised by applicable law.
For more information about the safeguards applied by a particular provider, you can consult its privacy policy or contact us using the details on this page.
12. Data retention
Data is retained only for as long as necessary for the purposes for which it was collected, taking account of legal obligations and the need to protect the controller's rights. In particular:
- order, invoice, payment and accounting records are generally kept for 10 years, unless longer periods are required by audits, disputes or law;
- account data is retained until the account is closed or deletion is requested, except for data needed to meet legal obligations or protect rights;
- support requests are generally kept for up to 24 months after they are resolved, unless disputes or further needs arise;
- data used for newsletters and marketing is retained until consent is withdrawn or the user unsubscribes, and is reviewed periodically; inactive contacts are generally deleted or anonymised within 24 months of the last meaningful interaction;
- reviews are retained while published or until deletion is requested, unless needed to verify authenticity or defend a right;
- technical and security data is retained for the time strictly necessary to protect the website and manage any incidents;
- cookies are retained for the period specified by the relevant tool and the user's stated preferences.
At the end of the applicable periods, data is deleted or anonymised unless further retention obligations apply.
13. Security
We take reasonable technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or destruction. However, no IT system or method of transmission over the Internet can guarantee absolute security.
Please use strong passwords, protect your account credentials and avoid transmitting confidential information through insecure channels.
14. Minors
The website and its services are not specifically intended for people under 18. We do not knowingly collect minors' data without authorisation from a person with parental responsibility.
If you believe a minor has improperly provided us with personal data, contact us at info@am2store.com to request verification and, where applicable, deletion.
15. Profiling and automated decisions
With prior consent, browsing and interaction data may be used to create audience segments, measure campaigns and personalise advertising messages. This activity does not result in solely automated decisions with legal or similarly significant effects being made directly by AM2STORE.
Payment providers such as PayPal, Klarna or Scalapay may independently carry out fraud checks, risk assessments or automated decisions relating to their services. Their respective privacy policies apply to such processing.
16. Data subject rights
In the cases provided for by the GDPR, you may exercise the following rights:
- obtain confirmation that processing is taking place and access your data;
- request correction of inaccurate data or completion of incomplete data;
- request erasure of data;
- request restriction of processing;
- receive data in a structured format and request its portability;
- object to processing based on legitimate interests;
- object to direct marketing at any time;
- withdraw consent without affecting the lawfulness of prior processing;
- lodge a complaint with the competent supervisory authority.
To exercise your rights, you can write to info@am2store.com, stating your request and the information needed to identify the data concerned. We may request additional information to verify the applicant's identity.
We will respond within the periods required by law, normally within one month of receiving the request, subject to any permitted extension for particularly complex cases.
17. Complaint to the data protection authority
If you believe that the processing of your data breaches applicable law, you have the right to complain to the Italian Data Protection Authority, Garante per la protezione dei dati personali, or to the supervisory authority in the European Union country where you live or work.
You can find information and forms on the website of the Italian Data Protection Authority.
18. Changes to this policy
This policy may be updated to reflect legal, technical, organisational or service-related changes. The updated version will be published on this page with the date of the latest update.
For significant changes, we may provide an additional notice through the website or other available channels.
19. Contact details
For questions about this policy or the processing of personal data, please contact:
LI BASSI FASHION GROUP S.R.L.
Via Tevere 27, 51039 Le Fornaci (PT), Italy
Email: info@am2store.com
Telephone: +39 376 017 4734