What personal data we collect, why we use it, the legal bases under the GDPR, and the rights you have over it. Plain language, no games.
This policy explains our processing of personal data under the GDPR (Regulation (EU) 2016/679). Last updated 5 July 2026.
The controller of your personal data is VINAI S.r.l., Via Corsica 143, 25125 Brescia, Italy — VAT no. IT03618400984. For any privacy matter you can email us at support@vinaiplugins.com or reach us from the Support page.
We collect only what we need to run the shop and support you:
| Account & order | Name, email address, account credentials, purchases and license/activation information |
| Payment | Handled by our payment provider — we receive confirmation of payment but never store your full card details |
| Newsletter | The email address you enter when you subscribe |
| Technical | Basic technical data your browser sends (e.g. IP address, device / browser type) and any aggregate usage data needed to run and secure the site |
We process your data for the following purposes, each with a legal basis under Article 6 of the GDPR:
| Process orders & deliver licenses | Performance of the contract — Art. 6(1)(b) |
| Customer support | Performance of the contract / our legitimate interest — Art. 6(1)(b)/(f) |
| Marketing to existing customers | Legitimate interest, on the "soft opt-in" of Art. 130(4) of the Italian Data Protection Code (D.Lgs. 196/2003) — own similar products, with opt-out — Art. 6(1)(f) |
| Newsletter | Your consent — Art. 6(1)(a) |
| Accounting & legal obligations | Legal obligation (e.g. invoicing / tax) — Art. 6(1)(c) |
| Security & fraud prevention | Our legitimate interest — Art. 6(1)(f) |
We share data only with service providers who help us run the shop — our payment provider, email / newsletter provider and hosting / infrastructure provider — acting as data processors under agreements that bind them to protect it. We do not sell your personal data. Where a provider is located outside the European Economic Area, any transfer relies on an adequacy decision or on Standard Contractual Clauses approved by the European Commission.
The site uses only what it needs to work — for example your browser's local storage to remember your cart. We don't use advertising or profiling cookies. The pages currently load web fonts from a third-party provider (Google Fonts), which may involve your IP address; if you'd rather avoid that, the fonts can be self-hosted. If we ever add analytics or marketing cookies, we will ask for your consent first through a cookie banner.
We keep your account and license data for as long as you have an account or as needed to support your purchase. Invoicing and accounting records are kept for the period required by law (in Italy, ten years). Newsletter data is kept until you unsubscribe. After that, data is deleted or anonymised unless we must keep it to meet a legal obligation or defend a legal claim.
Under the GDPR you have the right to access your data and to rectify, erase, restrict or port it, to object to processing based on legitimate interest, and to withdraw consent at any time (which does not affect processing already carried out). You can unsubscribe from marketing at any time via the link in any message.
To exercise any right, contact us from the Support page. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with your local data-protection authority.
We apply reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. No method of transmission or storage is ever completely secure, but we work to keep your data safe and to limit access to it.
Our products and shop are intended for adults and are not directed at children. We do not knowingly collect personal data from minors; if you believe a minor has provided us data, contact us and we will remove it.
We may update this Privacy Policy as our shop and practices evolve. Material changes will be reflected here with a new "last updated" date. Please check back from time to time.
Questions about your data or this policy? The studio answers directly — reach us from the Support page. See also our Terms & Conditions.