Privacy policy

Privacy policy

This policy explains how personal data of LEONELLA MILANO users is collected and processed under the GDPR.

1. Controller

2. Data collected

Data may include identity, contact details, delivery addresses, account data, order history, browsing data, cookies and marketing preferences.

3. Purposes

Data is used for orders, customer accounts, consented marketing, legal obligations, security and website improvement.

4. Recipients

Data is intended for FOTI LEONELLA and, where required, payment providers, carriers, host o2switch and competent authorities.

5. Retention

Data is kept for the following periods: customer account until the user deletes it ; orders and invoices 10 years (legal accounting obligation) ; newsletter signup until consent is withdrawn ; browsing statistics 14 months maximum (anonymized IP addresses) ; security logs 30 days ; admin logs 12 months.

6. Rights

You may request access, correction, erasure, restriction, objection, portability and consent withdrawal by writing to contact@leonellamilano.fr. A data export is also available from your account. You also have the right to lodge a complaint with your data protection authority (in France, the CNIL — www.cnil.fr).

7. Security

Technical and organizational measures protect data against loss, unauthorized access and disclosure.

8. Cookies

Read the cookie policy.

9. Transfers

Where transfers outside the European Union are needed, appropriate safeguards are sought.

10. Updates

The version published on the website at the visit date applies.

Last updated: 11/11/2026