Privacy Policy
Last updated: 24 March 2026
Menabòh S.r.l. (“Menabòh”, “we”, “us”) operates www.menaboh.com and processes personal data in compliance with EU Regulation 2016/679 (GDPR). This policy explains what data we collect, why, for how long, and what rights you have.
Data Controller: Menabòh S.r.l., Via della Resistenza 6, 52025 Montevarchi (AR) — P.IVA 02406260519
Contact: info@menaboh.com
1. Data We Collect
Provided directly by you:
- Name and contact details (email, phone, address)
- Garment photos and descriptions submitted with your brief
- Body measurements
- Style preferences, references, and brief content
- Communications with our team
- Account username and password (for registered users)
- Shipping and billing addresses
- Purchase data (date, quantity, product type, sales amount, VAT number where applicable, complaints, returns, and refunds)
- Any data of third parties entered by you as delivery recipients (e.g. gift recipients) — by providing such data, you confirm you have obtained their prior consent
Collected automatically:
- Browsing data: IP address, device type, pages visited, time on site
- Cookie and analytics data (see Cookie Policy)
- Aggregated behavioural data (e.g. clicks and mouse movements) collected via cookies. For full details, see the Cookie Policy.
Collected through our Social Media Pages:
When you interact with Menabòh's social media pages (e.g. by liking a post, commenting, or sending a message), we may collect information you share publicly or directly with us, including your name, contact details, and profile image. The information available to us depends on your privacy settings on each platform. We invite you to review the privacy policies of the relevant social media platforms.
Payment data: Payment is processed directly by PayPal and Klarna. Menabòh does not store payment card data.
2. Why We Process Your Data
| Purpose | Legal basis |
|---|---|
| Processing and managing your order | Contract performance |
| Communicating about your redesign | Contract performance |
| Responding to enquiries and complaints | Contract performance / Legitimate interest |
| Storing your style profile for future orders | Legitimate interest |
| Sending marketing communications | Consent |
| Fraud prevention and security | Legitimate interest |
| Legal and tax compliance | Legal obligation |
| Improving our website and service | Legitimate interest |
| Interaction with social media pages | Legitimate interest |
| Recruitment (if you submit a CV) | Contract / Pre-contractual measures — data retained for 12 months |
2a. Profiling and Marketing via Digital Platforms
Where you have consented to profiling cookies, Menabòh may process your contact data and social media interaction data to display targeted advertising on digital platforms, including Meta. This may involve: sharing data with platforms via APIs based on your activity on our site (retargeting); matching your interests against user clusters identified by digital platforms (prospecting); and using targeting tools provided by platforms to reach users with similar profiles. Further information is available in the Cookie Policy.
3. Style Profiles
With your consent, we retain a style and aesthetic profile linked to your account. This allows us to personalise future proposals based on your history with us. You may request deletion of your profile at any time.
4. Data Retention
| Data type | Retention period |
|---|---|
| Order data, garment photos, measurements | 10 years from the end of the contract, in accordance with applicable limitation periods under Italian law |
| Style and aesthetic profile | 5 years from your last order |
| Financial and transaction records | As required by Italian tax law (generally 10 years) |
| Marketing preferences | Until you withdraw consent |
| Website analytics | Per cookie/analytics platform settings |
On deletion request: Your personal and contact data is deleted. Garment and design data (photos, sketches, outcome records) is anonymised and may be retained for internal reference and portfolio use.
Note: financial records are retained independently under a legal obligation and cannot be deleted on request.
Social media interaction data is retained for a period equivalent to that determined by each social platform for posts, comments, and user interactions.
5. Who We Share Data With
We do not sell personal data. Data is shared only with:
- Service providers acting as processors (shipping, IT, payment)
- Marketing platforms (e.g. Meta, Google) — only with your consent
- Competent authorities — when required by law
More specifically, data may be shared with: IT and customer service providers, virtual infrastructure providers, CRM providers, postal and data entry companies, event and contest management companies (where applicable), legal, fiscal, and administrative consultants, fraud prevention providers, shipping companies, and collection point managers. In the event of extraordinary corporate operations (e.g. company sale, merger), data may be transferred to buyers or entitled parties. The full list of data processors is available on request at info@menaboh.com.
6. International Transfers
Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place (standard contractual clauses or adequacy decisions).
7. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (subject to legal retention obligations)
- Restrict processing in certain circumstances
- Port your data to another service
- Object to processing based on legitimate interest
- Withdraw consent for marketing at any time
To exercise any of these rights, contact us at info@menaboh.com. We will respond within 30 days. This deadline may be extended by two months in cases of complexity or volume of requests; in such cases we will notify you within the first 30 days, explaining the reason for the delay. Note that deletion requests are subject to existing legal and regulatory document retention obligations. To manage consents given via cookies, follow the instructions in the Cookie Policy. When contacting us, please include your name, email address, and any other contact details you have provided, so we can properly identify and handle your request.
You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali — www.garanteprivacy.it).
8. Security
We implement technical and organisational measures to protect your data, including SSL encryption for data transmitted through the website. No method of internet transmission is completely secure; we cannot guarantee absolute security. We recommend that you periodically update your security software (e.g. antivirus) and verify that your internet provider has adopted appropriate security measures. Access to your personal account is protected by username and password — do not share these credentials with third parties.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or a notice on the website. The date at the top of this page reflects the most recent revision. We invite you to periodically review this page to check the most up-to-date version of the policy.
10. Newsletter
If you subscribe to our newsletter, the following applies:
Purpose A — Direct marketing: We send commercial and promotional communications via email/newsletter. We may track opens, clicks, devices used, and delivery status to measure and improve results. Legal basis: consent. Retention: until you withdraw consent (opt-out).
Purpose B — Profiling: Non-automated analysis of your preferences to send more tailored communications. Legal basis: consent. Retention: 12 months.
Purpose C — Transfer to third parties for marketing: Your data may be shared with Menabòh's partners and sponsors for their own marketing activities, at which point they become independent data controllers. Legal basis: consent. Retention: until you object (opt-out to the third party directly).
Newsletter data is managed via MailerLite (MailerLite Limited, Ireland). To unsubscribe, email marketing@menaboh.com with subject “unsubscribe from newsletter” or use the unsubscribe link in any email. To opt out of profiling only, email marketing@menaboh.com with subject “no profiling”.
Menabòh currently does not appoint a Data Protection Officer (DPO). Phone: +39 335 128 4851.