Privacy policy
This page describes the data we collect, why we collect it, who we entrust it to and how long we keep it. It describes how the site and the application actually work, and nothing else.
WHO IS RESPONSIBLE
PAKOFF GLOBAL BRAND S.R.L., Via Enrico Mattei 2, 27038 Robbio (PV), Italy, registered with the Registro Imprese di Cremona-Mantova-Pavia under number 02696200027.
For any question about your data: contacts@pakoff.com
WHAT WE COLLECT, AND WHY
• Your account
First name, surname, email address and, if you provide it, your telephone number. This lets us recognise you, keep you informed about your orders and find your addresses again next time. Legal basis: performance of our contract.
• Your order
Delivery address, city, postcode, country, telephone, delivery instructions, basket contents, amounts and VAT rates applied. Without this, the order can neither be prepared, nor delivered, nor invoiced. Legal basis: performance of the contract.
• Your address, as you type it
To know whether we serve an address and how quickly, we convert it into geographic coordinates. That conversion is carried out by Nominatim, a service of the OpenStreetMap foundation. We send it only the text of the address searched, never your name nor your identity.
• The courier's position, during delivery only
While a courier is on the way, his position is broadcast live so that you can follow his approach. That broadcast is never written down: it passes and disappears. Only the pick-up point and the hand-over point are kept, attached to the run, as proof of delivery.
• Proof of delivery
The courier photographs the parcel handed over. That photograph serves to prove delivery in the event of a dispute.
• Payment
We never see your card number. It is entered directly with Stripe, our payment provider, which returns only the result of the transaction and its identifier. Legal basis: performance of the contract and our accounting obligations.
• The invoice
Each delivery gives rise to an invoice, which freezes your billing identity, the lines purchased and the VAT applied. Legal basis: our legal and accounting obligations.
• Signing in with Google or Apple
If you choose this method, Google or Apple passes us your email address, your name and your account identifier with them. We access them only at sign-in, we use them only to identify you, and we share them with no one. We receive neither your password, nor the contents of your account, nor your contacts.
• Notifications
If you accept notifications, your device's notification identifier and its operating system are recorded so we can inform you of an order's progress.
• Business accounts
A business account requires the company name, the VAT number and a telephone. A courier or a partner house also provides bank details, needed for payment.
WHAT WE DO NOT DO
We sell no data. We do not rent it. We place no advertising tracker and we do not measure your browsing for targeting purposes. The site opens neither comments nor any public space: nothing you entrust to us is visible to another customer.
WHO WE ENTRUST IT TO
• Supabase, for the database and accounts. Data hosted within the European Union, on Amazon Web Services infrastructure, Europe region.
• Cloudflare, for hosting the site, distributing images and storing proofs of delivery.
• Stripe, for payment.
• Brevo, for sending the emails and text messages related to your orders.
• Google and Apple, if you choose to sign in through them.
• Nominatim, OpenStreetMap foundation, for address search.
• Mapbox, for displaying maps.
• The house preparing your order and the carrier delivering it, which receive what they need to prepare and deliver: your first name, your address, your telephone.
Some of these providers are established outside the European Union. Such transfers are governed by the European Commission's standard contractual clauses.
HOW LONG WE KEEP IT
• Delivery photographs and proofs of delivery: 120 days, then automatically erased. That period covers the time allowed to dispute a card payment.
• Orders and invoices: ten years, as required by accounting obligations.
• Your account and its addresses: as long as the account exists. You may ask for it to be deleted at any time.
YOUR RIGHTS
You may at any time request access to your data, its rectification, its erasure, the restriction of its processing, or object to that processing.
Two of these rights are exercised directly from your account, without writing to us: the application returns all of your data, and lets you request the deletion of your account. What must be kept for accounting reasons, invoices in particular, is then kept without any link to your account.
For everything else: contacts@pakoff.com
You may also lodge a complaint with the data protection authority of your country of residence.
COOKIES AND LOCAL STORAGE
We use no advertising cookie and no audience measurement cookie.
The site keeps in your browser only what it strictly needs: your session if you are signed in, the contents of your basket, your favourites, the language and theme chosen, the delivery address being entered and the area it designates, and the information messages you have already seen or dismissed. This stays on your device, is not sent to us, and you can erase it by clearing the site's data in your browser.
CHANGES
This page may be updated to reflect a change in the service. The version in force is the one published here.