Privacy policy

Privacy Policy - CRUX Alpine

Last updated: 12/09/2026

This Privacy Policy describes how CRUX Alpine ("we," "us," or "our") collects, uses, and discloses your personal information when you visit or make a purchase from www.cruxalpine.com (the "Site").

1. Who We Are

CRUX Alpine is operated by:

Daniela De Rosa Sole proprietorship registered in Italy ("Sole Proprietorship")

VAT number: IT12165710018 Registered Office: Corso Roma 10/2, Moncalieri (TO), Italy Email: crux.alp@gmail.com.

For the purposes of the EU General Data Protection Regulation (GDPR), we act as the "Data Controller" of your personal information.

2. Personal Information We Collect

When you visit the Site, we automatically collect certain information about your device, including:

  • Information about your web browser, IP address, time zone, and some of the cookies installed on your device
  • Information about the pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site

We refer to this automatically collected information as "Device Information."

When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including:

  • Your name, billing address, shipping address, email address, and phone number
  • Payment details (processed securely by our payment provider - we do not store your full card details)

We refer to this information as "Order Information."

When you subscribe to our newsletter, we collect your email address ("Marketing Information").

3. How We Use Your Information

We use the Order and Device Information we collect to:

  • Fulfill orders placed through the Site, including processing payment, arranging shipping, and providing invoices/order confirmations
  • Communicate with you about your order
  • Screen orders for potential risk or fraud
  • Send marketing communications, where you have opted in, and allow you to unsubscribe at any time
  • Improve and optimize the Site (for example, by generating analytics about how customers browse and interact with the Site)

4. Legal Basis for Processing (GDPR)

Where the GDPR applies, we rely on the following legal bases to process your personal information:

  • Performance of a contract - to process and fulfill your order
  • Legitimate interests - to prevent fraud, maintain security, and improve our Site
  • Consent - for marketing emails and non-essential cookies, which you can withdraw at any time
  • Legal obligation - to comply with tax and accounting requirements

5. Sharing Your Personal Information

We share your Personal Information with third parties to help us provide our services and fulfill your orders, including:

  • Shopify - our e-commerce platform, which powers our online store
  • SwiftPOD / Printify - our print-on-demand production and fulfillment partners, who print and ship your order directly to you
  • Payment processors (e.g., Shopify Payments, PayPal) — to securely process your payment
  • Email marketing providers - to send newsletters and promotional emails, if you have subscribed
  • Analytics providers (e.g., Google Analytics) - to help us understand how visitors use the Site

We may also share your information to comply with applicable laws and regulations, to respond to a legal request, or to otherwise protect our rights.

Some of these third parties may be located outside the European Economic Area (EEA), including in the United States. Where this is the case, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your information.

6. Cookies

We use cookies to operate and improve the Site, remember your preferences, and understand how you interact with our content. You can manage or disable cookies through your browser settings. Some features of the Site may not function properly if cookies are disabled.

7. Data Retention

We retain your Order Information for as long as necessary to fulfill the purposes for which we collected it, including to comply with legal, tax, and accounting requirements, unless a longer retention period is required or permitted by law.

8. Your Rights

Because CRUX Alpine is registered and operated from Italy, we apply GDPR-level data protection standards to all customers, regardless of location. You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Object to or restrict certain processing
  • Request a copy of your information in a portable format
  • Withdraw consent at any time, where processing is based on consent

If you are a resident of a U.S. state with its own privacy law (such as California's CCPA/CPRA), you may also have the right to know what personal information we collect, request its deletion, and opt out of the sale or sharing of personal information - we do not sell your personal information to third parties.

To exercise any of these rights, please contact us at crux.alp@gmail.com.

9. Children's Privacy

The Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the updated version on this page with a revised "Last updated" date.

11. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at crux.alp@gmail.com or by mail at the address listed in Section 1.