Privacy & Cookie Policy

Last updated: October 2026

This page describes how OrigineResell ("we", "us") collects and processes personal data when you visit origineresell.com and when you place an order, in compliance with the EU General Data Protection Regulation (GDPR — Regulation 2016/679) and Italian law (D.Lgs. 196/2003 as amended).

1. Data Controller

OrigineResell
Email: origineresell@gmail.com
WhatsApp: +39 352 076 9859

2. What Data We Collect

When you place an order, we collect the data needed to process and ship it:

Full name
Email address
Phone number
Billing and shipping address
Order details (products, sizes, amounts)

Payment data (card details) are never collected or stored by us. Payments are processed directly and securely by Stripe, our payment provider. We only receive confirmation that a payment succeeded, together with the billing/shipping details you enter at checkout.

When you browse the site (without ordering), we do not collect personal data directly. The following third-party services, which we use to run the shop, may process your data:

Stripe — processes card payments and the personal/billing/shipping data you enter at checkout, acting as data processor and independent controller for payment and anti-fraud purposes. See Stripe Privacy Policy.
Resend — sends your order confirmation email (to your email address, with the order details). See Resend Privacy Policy.
Supabase — stores the product catalogue and order/availability status. See Supabase Privacy Policy.
Vercel — hosts the site and may process technical connection data (such as IP addresses) to serve it. See Vercel Privacy Policy.
Google Fonts — web fonts are self-hosted with the site, so no request is sent to Google servers when you browse.

If you contact us via WhatsApp or email, we will process your contact details solely to respond to your enquiry.

3. Analytics

We use our own first-party analytics to understand how the shop is used (for example which products are viewed and how orders are completed). We do not use third-party advertising or profiling tools such as Google Analytics, and we do not track you across other websites.

Only with your consent — analytics runs only if you accept cookies in the consent banner. If you decline, no analytics events are collected.
What we measure — pages and products viewed, add-to-cart, checkout and completed purchases, and limited technical information (approximate traffic source, device/browser type). Admin and API pages are excluded.
Pseudonymous — visitor identifiers are generated on our server and pseudonymised with a daily rotating secret; the keys that would allow re-identification are deleted after 2 days. We do not build advertising profiles.
Daily device token — only after you accept analytics, your browser stores in localStorage a random token valid for the current day only. It is used exclusively to tell different devices/browsers apart in our first-party analytics. It is not a persistent identifier: a new random token is generated every day, it is deleted if you withdraw consent, and it is never used for advertising or profiling.
Where — analytics data is stored in our own database and is never sold or shared for marketing.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie banner.

4. Cookies

This site uses the following local storage entries (no third-party profiling cookies):

cookieConsent (localStorage) — stores your cookie preference. No expiry.
origineresell_cart (localStorage) — stores the contents of your cart. No expiry.
origine_analytics_did (localStorage, only after analytics consent) — random token for first-party analytics, valid for the current day only and replaced every day. Deleted if you withdraw consent.
dropBannerClosed (sessionStorage) — remembers if you closed the announcement banner. Deleted when you close the browser.

During checkout, Stripe may set its own technical and fraud-prevention cookies on the payment form; these are necessary to process the payment securely.

5. Legal Basis

Order processing, payment, shipping and order confirmation — performance of a contract with you (Art. 6(1)(b) GDPR).
Tax and accounting obligations — compliance with a legal obligation (Art. 6(1)(c) GDPR).
Fraud prevention and site security — our legitimate interest (Art. 6(1)(f) GDPR).
Technical cookies and local storage are strictly necessary for the site to function and do not require consent. Any optional processing is based on your consent (Art. 6(1)(a) GDPR).

6. Data Retention

Order and transaction data are retained for the period required by applicable tax and accounting law (generally up to 10 years in Italy). Analytics data is retained for up to 13 months, and the pseudonymisation keys are deleted after 2 days. Contact correspondence is kept only as long as needed to handle your request. Data processed by third-party services is also subject to their respective retention policies.

7. Your Rights

Under GDPR, you have the right to:

Access, correct or delete your personal data
Withdraw consent at any time (clear your browser's localStorage to reset cookie preferences)
Lodge a complaint with the Italian Data Protection Authority (Garante): www.garanteprivacy.it

To exercise your rights, contact us at origineresell@gmail.com.

8. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance.