Privacy Policy

Last updated: September 9, 2026

This Privacy Policy describes how FPSC International Srls (trading as Cameo & Beyond, "the Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from cameoandbeyond.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

1. Data Controller Details

For the purpose of applicable data protection laws (including the EU General Data Protection Regulation - GDPR), the Data Controller responsible for your personal information is:

Company Name: FPSC International Srls

Trading Name: Cameo & Beyond

Address: Piazza Duca D'Aosta 27, 31021 Mogliano Veneto (TV), Italy
VAT Number: IT05106220261
Trade Number (REA): TV426133
Phone Number: +39 041 5904284
Email: info@cameoandbeyond.com

2. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

3. How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

4. What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term "personal information", we refer to information that identifies, relates to, describes, or can be associated with you.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

Contact details: Your full name, billing address, shipping address, phone number, and email address.
Order information: Purchase history, payment confirmations, shipping details, and billing information.
Account information: Username, password, security questions, and preferences associated with your registered account.
Customer support information: Information you choose to include in your communications with us (e.g., customer service inquiries or feedback).

Information We Collect Automatically (Usage Data)

We automatically collect certain information about your interaction with the Services ("Usage Data") using cookies, pixels, and similar tracking technologies. Usage Data may include:

IP address, device type, operating system, and browser type.
Connection details, network details, and geographic location (country/city level).
Pages viewed, links clicked, time spent on the Site, referring URLs, and shopping cart interactions.

Information We Obtain from Third Parties

We may receive personal data about you from third-party service providers, including:

E-commerce Platform: Shopify, which powers our store infrastructure.
Payment Processors: Payment gateways that process your payment details (e.g., credit card information, bank account details) securely on our behalf.
Logistics & Shipping Partners: Courier services that require recipient details to fulfill order deliveries.
Marketing & Analytics Providers: Third-party networks that assist us with advertising, traffic analysis, and performance tracking.

5. Legal Bases for Processing (EEA & UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases pursuant to Article 6(1) of the GDPR:

Performance of a Contract (Art. 6(1)(b) GDPR): Processing is necessary to process payments, manage orders, organize shipping, handle exchanges/returns, and manage customer support requests.
Consent (Art. 6(1)(a) GDPR): Processing for non-essential cookies, analytics, targeted online advertising, and direct marketing communications (newsletters, SMS promotions) is conducted only with your prior explicit consent. You may withdraw consent at any time.
Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary for our legitimate interests to secure our store, prevent fraudulent transactions, analyze website performance, and improve our product offerings.
Legal Obligation (Art. 6(1)(c) GDPR): Processing is necessary to comply with legal, statutory, tax, and accounting duties under Italian and EU law.

6. Cookies and Tracking Technologies

We use Cookies and similar tracking technologies (pixels, web beacons) to power and optimize our Site, store user preferences, analyze traffic, and display personalized advertising.

For details regarding Shopify's standard cookie usage, visit Shopify Cookie Policy.
Managing Preferences: You can manage or revoke your consent for non-essential cookies via the Cookie Banner present on our Site or through your web browser settings.
Global Privacy Control (GPC): If your browser sends an opt-out preference signal (such as GPC), we recognize and honor it in accordance with applicable legal requirements.

7. How We Disclose Personal Information

We may share your personal data with third parties in the following circumstances:

Service Providers: Third-party vendors operating on our behalf, including IT infrastructure providers, payment gateways, analytics providers, logistics/courier services, and customer care software.
Business & Advertising Partners: Marketing networks that assist in delivering promotional messages and customized ads (subject to your consent where required).
Corporate Group & Business Transfers: In connection with corporate reorganizations, mergers, asset sales, or legal transfers.
Legal Requirements & Fraud Prevention: When required by law, court order, subpoena, or government regulation, or to enforce our terms and protect our rights, privacy, safety, or property.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

Transactional & Accounting Data: Retained for 10 years following the end of the tax year to comply with mandatory Italian tax and commercial code obligations (Art. 2220 Italian Civil Code).
Customer Account Data: Retained for as long as your account remains active or until you request account deletion.
Marketing & Newsletter Data: Retained until you unsubscribe or withdraw your consent.
Technical & Usage Logs: Retained in accordance with internal security standards and automated deletion cycles.

9. International Data Transfers

As part of our operations (and through global service providers like Shopify), your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States.

When transferring personal data outside the EEA, we ensure appropriate safeguards are implemented in compliance with Chapter V of the GDPR, such as relying on standard contractual clauses (SCCs) approved by the European Commission or EU-US Data Privacy Framework certifications.

10. Your Privacy Rights

Depending on your jurisdiction, you have specific rights regarding your personal information under the GDPR and applicable privacy legislation:

Right to Access / Know: Request confirmation of whether we process your personal data and obtain a copy of it.
Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer necessary or when processing is unlawful, subject to statutory retention obligations.
Right to Restrict Processing: Request temporary suspension of data processing in specific scenarios.
Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format or request its transfer to another controller.
Right to Object: Object to processing based on legitimate interests or object to processing for direct marketing purposes at any time.
Right to Withdraw Consent: Revoke your consent for consent-based processing at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the contact details provided below. We will verify your identity before processing your request and respond within the timeframe mandated by law.

11. Complaints

If you believe that our processing of your personal data infringes applicable data protection laws, you have the right to lodge a complaint with your local supervisory authority.

In Italy, the competent authority is the Garante per la protezione dei dati personali (garanteprivacy.it).

12. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy, or if you wish to exercise your data rights, please contact us: