---
title: "Privacy Policy — èOLI Essence"
description: "Privacy policy of the èOLI Essence website."
lang: en
json-ld: |
  [
    {
      "@context": "https://schema.org",
      "@type": "Organization",
      "name": "èOLI Essence",
      "url": "https://eoliessence.com",
      "logo": "https://eoliessence.com/logo-eoli.png",
      "description": "Olio fitocosmetico viso corpo multifunzione con 5 attivi botanici. Skincare ad alto indice di naturalità, Made in Tuscany, packaging plastic-free.",
      "sameAs": []
    },
    {
      "@context": "https://schema.org",
      "@type": "WebSite",
      "name": "èOLI Essence",
      "url": "https://eoliessence.com",
      "inLanguage": [
        "it",
        "en"
      ]
    }
  ]
---

[Skip to main content](#main)

[![èOLI Essence](/assets/logo-eoli-DK8MDi1F.png)](/en)

[Home](/en)[The Ritual](/en/the-ritual)[The Actives](/en/the-actives)[Ritual Kit](/en/ritual-kit)[Philosophy](/en/philosophy)[Become a Partner](/en/become-partner)[Contact](/en/contact)

IT· EN

IT· EN

# Privacy Policy

_Last update: 5 July 2026._

This Policy explains how personal data collected through the èOLI Essence website (the "Site") is processed under Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003.

## 1\. Data Controller

**Storai Katy** — Via Pistoiese 100 ang. Via Don Tazzoli 1, 59100 Prato (PO), Italy — VAT 02387070978.  
Privacy [contact](/en/contact): [eoliessence@gmail.com](mailto:eoliessence@gmail.com).

## 2\. Data we collect

### 2.1 Data you provide

-   **Contact form**: name, email, optional phone, subject and message.
-   **Become a Partner form**: contact name, business name, city and address, business type, proposal, business email, phone, website/social. These entries also feed our internal B2B lead register.
-   **Support tickets**: name, email and content of the request.
-   **Testimonials**: if you send us a review to be published, we process your name, optional role/city, text, rating and external link (e.g. Trustpilot). Publication only occurs after your explicit consent.

### 2.2 Data collected automatically

-   **Accessibility preferences**: stored locally in your browser (localStorage) and, for authenticated admin users, in the database.
-   **Security and audit logs** (admin activity, IP, user-agent) to prevent abuse.
-   **Technical cookies**: see the [Cookie Policy](/en/cookie-policy).

## 3\. Purposes and legal bases

-   Reply to inquiries submitted through the forms — Art. 6.1.b GDPR (pre-contractual measures) and 6.1.a (consent).
-   Manage B2B [partner](/en/become-partner) applications — Art. 6.1.b GDPR.
-   Publish testimonials — Art. 6.1.a GDPR (consent), revocable at any time.
-   Site security, abuse prevention, admin logs — Art. 6.1.f GDPR (legitimate interest).
-   Tax and legal obligations — Art. 6.1.c GDPR.

## 4\. Recipients and sub-processors

We do not sell or trade your data. We rely on the following technical providers appointed as data processors:

-   **Lovable Cloud / Supabase** — database hosting, authentication and file storage. Servers in the European Union.
-   **Resend** — transactional email delivery (confirmations, internal notifications). Extra-EU transfers covered by Standard Contractual Clauses.
-   **Lovable AI Gateway** — used on the admin side for automatic translation of editorial texts; does not process end-user data.
-   **Trustpilot** — independent third-party platform. The "Leave a review" button redirects you to Trustpilot; from that point their privacy policy applies.

## 5\. Retention

-   Contact and Partner form messages: up to 24 months after the last useful contact.
-   Published testimonials: until consent is revoked or removal is requested.
-   Closed support tickets: 24 months.
-   Admin audit logs: 12 months.
-   Encrypted database backups: up to 90 days.

## 6\. Your rights

You may exercise at any time the rights under Art. 15–22 GDPR: access, rectification, erasure, restriction, portability, objection and consent withdrawal. You may also lodge a complaint with the Italian Data Protection Authority ([garanteprivacy.it](https://www.garanteprivacy.it)).  
To exercise your rights, write to [eoliessence@gmail.com](mailto:eoliessence@gmail.com).

## 7\. Security

We adopt appropriate technical and organisational measures: TLS encryption in transit, role-based access control, database Row Level Security policies, logging of sensitive operations and encrypted periodic backups.

## 8\. Children

The Site is not addressed to children under 16 and we do not knowingly collect data relating to minors.

## 9\. Changes

This policy may be updated. Changes will be published on this page with the new update date.

![èOLI Essence](/assets/logo-eoli-DK8MDi1F.png)

Natural Tuscan cosmetics.

##### Navigate

[The Ritual](/en/the-ritual)[The Actives](/en/the-actives)[Ritual Kit](/en/ritual-kit)[Become a Partner](/en/become-partner)[Where to find us](/en/where-to-find-us)[Contact](/en/contact)[Testimonials](/en/testimonials)

##### Legal

[Privacy Policy](/en/privacy-policy)[Cookie Policy](/en/cookie-policy)[Terms & Conditions](/en/terms-conditions)[Accessibility](/en/accessibility)

##### Contact

[eoliessence@gmail.com](mailto:eoliessence@gmail.com)

[@eoli\_essence](https://www.instagram.com/eoli_essence/)

© 2026 èOLI Essence — All rights reserved - Storai Katy - Via Pistoiese, 100 ang. Via Don Tazzoli, 1 - 59100 Prato (PO) - P.IVA: 02387070978

Utilizziamo cookie tecnici necessari al funzionamento del sito. Con il tuo consenso, potremmo utilizzare anche cookie analitici per migliorare la tua esperienza. [Leggi la Cookie Policy](/cookie-policy)

Rifiuta tuttiPersonalizzaAccetta tutti