Privacy Policy
Last updated · 22 September 2026
How we collect, use, and protect your personal data. Written to be readable — no legalese.
1. Who we are
Grove Street ("we", "us") operates this store. The data controller is Grove Street, Via del Commercio 42, 20100 Milano, Italy. Contact: radiofm90.com.
2. Information we collect
| Category | Examples | Why |
|---|---|---|
| Account | Name, email, hashed password | To run your account and log you in |
| Order | Shipping address, phone, order history | To process and deliver your orders |
| Payment | Card details (via Stripe only) | To take payment securely |
| Technical | IP address, browser, pages visited | Security, fraud prevention, analytics |
| Marketing | Email preferences | To send you offers you opted into |
3. Legal basis (GDPR Art. 6)
- Contract — to fulfil your order and provide the service.
- Legitimate interest — fraud prevention, security, service improvement.
- Consent — marketing emails and non-essential cookies.
- Legal obligation — tax and accounting records.
4. Sharing
We share data only with what's needed to run the store:
- Stripe — payment processing
- Resend — transactional emails
- Neon — database hosting
- Vercel — application hosting
We never sell your data.
5. Retention
Account data is kept while your account is active. Order and tax records are kept for 7 years as required by Italian law. When you delete your account, we erase personal data except what's legally required.
6. International transfers
Some providers are outside the EU. Where that happens, they operate under standard contractual clauses or equivalent safeguards approved by the European Commission.
7. Your rights
You have the right to access, correct, delete, port, restrict, or object to processing of your data. See Manage Your Data for how to exercise them.
8. Security
9. Changes
We may update this policy occasionally. The "Last updated" date at the top reflects the current version.