Privacy

Controller and contact

The controller is InCloud S.r.l., Via Unità d'Italia 135, 41058 Vignola (MO), Italy. VAT number, tax code and Modena Companies Register number: 04209270364. REA: MO-451901. PEC: [email protected]. For PokeShop.it privacy requests, contact [email protected] with the subject Privacy request.

This is the privacy notice for the current staging preview. The provider map, retention schedule, international-transfer assessment and DPO status are being completed before live sales.

Data and purposes

Depending on how you use the shop, we process account and contact details; delivery and billing information; cart, order, payment-reference and shipment information; support messages; session, verification and security data; and communication preferences where an optional programme is enabled.

We use these data to provide the account, requested checkout, delivery, support, withdrawal and legal-guarantee processes; meet accounting and legal obligations; and protect the service against fraud, abuse and unauthorised access. Optional marketing or repeated abandoned-cart reminders require a separate, voluntary choice for the relevant purpose and channel.

Data needed to process an order, payment verification or delivery are necessary for that request. Marketing data are optional and do not condition an account, order or support request.

Recipients and transfers

We share data only with recipients needed for the stated purposes, such as infrastructure, payment, carrier, email or communications, address-autocomplete and support providers, professional advisers and public authorities where required by law.

The final published notice will identify the relevant provider roles, processing locations and safeguards for transfers outside the EEA where applicable. We do not state that all processing takes place only in the EEA.

Retention and security

The current application uses specific limits for some security records: verification challenges expire after 10 minutes; non-remembered authenticated sessions expire after 12 hours; remembered sessions can last up to 90 days; and certain challenge or quota records are scheduled for deletion after seven days. An encrypted checkout draft is cleared after its 30-minute threshold by scheduled cleanup.

Before live sales, PokeShop.it will publish category-specific retention information for accounts, orders and invoices, support, security logs, backups, payment records, withdrawal notices, abandoned carts and communication preferences.

Your rights

Subject to the conditions in applicable law, you may request access, rectification, erasure, restriction, objection, portability and withdrawal of consent where consent is the legal basis. You may complain to the Italian Data Protection Authority or, where applicable, the authority in your usual place of residence, work or alleged infringement.

Send a request to [email protected]. We may ask for proportionate information to verify your identity. The current application does not provide a self-service privacy export or erasure tool.

Communications and cookies

A verified phone number, account creation, cookie-notice acknowledgement, accepted terms or completed payment is not marketing consent. Service messages about security, orders, payments and shipping have separate purposes and must not contain upselling.

The Cookie Policy explains the technical storage observed in this preview. Communication preferences are separate account choices and are not cookie choices.