Last updated: August 2026

1. Data Controller

Personal data collected through the Ilario Store website is processed under the responsibility of:

Ilario CHIERA – Carbone43
Sole trader
3 Impasse les Trembles
74330 La Balme-de-Sillingy
France

SIREN: 330 412 560
SIRET: 330 412 560 00030
EU VAT number: FR27330412560

Registration: French National Business Register (RNE)

Email: contact@ilario.com
Phone: +33 (0)4 50 77 76 35

2. Personal Data We Collect

As part of the operation of the website and the management of orders, Ilario Store may collect the information necessary to identify the customer, deliver orders and manage the customer relationship.

Depending on the circumstances, this information may include:

• first and last name;
• postal address;
• email address;
• telephone number, when provided or required for delivery;
• order-related information;
• delivery address and, where applicable, billing address;
• information voluntarily provided in the message field;
• customer account information when an account is created;
• preferences regarding newsletter subscription.

Creating a customer account is not required to make a purchase. An order may be placed as a guest, including when paying through PayPal.

Some information may be necessary to process and deliver an order. Failure to provide mandatory information may prevent Ilario Store from processing or delivering the order.

3. Purposes of Processing

Personal data is used only for purposes necessary for the operation of Ilario Store, including:

• processing and managing orders;
• invoicing;
• organising shipment and delivery;
• communicating with customers regarding their orders;
• sending order, payment and shipping confirmations;
• managing customer accounts when an account is created;
• responding to enquiries submitted through the contact form;
• ensuring the operation and security of the website;
• handling requests relating to data protection rights;
• sending newsletters, new product announcements, information about available models and promotional offers when the customer has consented to receive them;
• communicating with customers in exceptional circumstances when necessary, for example in the event of an interruption or significant issue affecting the website or services.

Communications necessary for the performance of an order or management of the contractual relationship are separate from commercial communications.

4. Newsletter and Commercial Communications

When creating a customer account, customers may choose to receive the Ilario Store newsletter.

Subscription is optional and is based on the customer's choice expressed by selecting the relevant checkbox.

Communications may include:

• new models becoming available;
• news from Ilario and Ilario Store;
• promotions and commercial offers;
• certain information relating to the Ilario and Ilario Store websites;
• exceptional communications when circumstances require them.

Email addresses used for these communications may be manually imported into MailerLite. There is no automatic synchronisation between PrestaShop and MailerLite.

Each commercial communication provides the recipient with the option to unsubscribe.

Consent may also be withdrawn at any time.

5. Payments

Ilario Store does not collect or retain customers' banking information or payment card details.

Payments are made through external payment service providers, including PayPal and, where offered, through a secure Up2pay payment link.

The information required to process a payment is handled directly by the relevant payment provider in accordance with its own terms and privacy policy.

Ilario Store does not receive customers' complete payment card details and does not store them on its own systems.

6. Service Providers and Processors

In order to operate the website and provide services to customers, certain data may be processed by technical service providers acting on behalf of Ilario Store.

These providers may include:

Hostinger
Technical hosting of the website and its data.

MailerLite
Service used to send newsletters and commercial communications to recipients who have agreed to receive them.

Payment service providers
PayPal and, depending on the payment method used, Up2pay, for secure payment processing.

Personal data is not sold or rented to third parties for commercial purposes.

7. Emails and Communications

Emails strictly necessary for the operation of the store, including account creation confirmations, order confirmations, payment confirmations and shipping notifications, are sent as part of the operation of PrestaShop and the order process.

Commercial communications and certain exceptional communications may be sent using MailerLite or Gmail.

8. Cookies and Technical Data

Ilario Store uses cookies and technical data that are necessary for the operation of the website, including to provide certain essential functions such as:

• shopping cart management;
• authentication and customer account management;
• maintaining the user's session;
• language selection;
• general operation and security of the store.

At present, Ilario Store does not use Google Analytics or any other audience measurement tool for statistical or advertising purposes.

Links to Facebook and Instagram are provided on the website to access these external services. The mere presence of these links does not, in itself, constitute data collection by these social networks.

Cookies that are strictly necessary for the operation of a website may be used without prior consent; other categories of trackers are subject to the applicable consent requirements.

9. Data Retention

Personal data is retained for no longer than necessary for the purposes for which it is processed, subject to applicable legal retention requirements, particularly those relating to accounting, tax and commercial obligations.

Data required for order management may therefore be retained for as long as necessary to manage the customer relationship and comply with the resulting legal obligations.

Data used for commercial communications is retained in accordance with applicable rules and until consent is withdrawn where consent constitutes the legal basis for such communications.

10. Data Protection Rights

In accordance with applicable data protection regulations, individuals have, subject to the conditions provided by law, various rights concerning their personal data, including:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to object to certain processing activities;
• the right to data portability where applicable;
• the right to withdraw consent where processing is based on consent.

To exercise these rights, please contact:

contact@ilario.com

The request must contain sufficient information to verify the identity of the requester where necessary.

Individuals also have the right to lodge a complaint with the French Data Protection Authority (CNIL – Commission Nationale de l'Informatique et des Libertés) if they believe that their personal data is being processed in violation of applicable regulations.

11. Security

Ilario Store implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or unlawful disclosure.

Communications with the website are protected by the HTTPS protocol.

Payment information is not stored by Ilario Store.

12. Changes to This Privacy Policy

This Privacy Policy may be updated when necessary, particularly if the operation of the website, the services used or applicable regulations change.

The version published on this page is the current version.

Last updated: August 2026