Privacy Policy

This Privacy Policy describes how Weprod S.R.L. (“Company”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when users visit, interact with, create an account on, contact us through, or make purchases from bricolonex.com (the “Website”).

We are committed to protecting the privacy of our customers and Website visitors and to processing personal data in accordance with applicable data protection legislation, including Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and applicable Italian and European privacy legislation.

This Privacy Policy explains:

  • What personal data we collect

  • How we collect it

  • Why we process it

  • The legal bases for processing

  • With whom information may be shared

  • How long information may be retained

  • How we use analytics and advertising technologies

  • How we protect personal data

  • The rights available to users

This Privacy Policy should be read together with our Cookie Policy.


1. Data Controller

The Data Controller responsible for the processing of personal data through the Website is:

Weprod S.R.L.
Via Ferrante Imparato, Edif. 3 – 190 Condom. Napoli Est
P3 Int. 301
80146 Naples (NA), Italy

VAT Number: IT10883491218

Email: info@bricolonex.com
Website: bricolonex.com

Questions or requests concerning personal data may be sent to the email address indicated above.


2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

  • Browsing the Website

  • Purchasing products

  • Creating or managing a customer account

  • Using the shopping cart

  • Completing checkout

  • Making payments

  • Receiving deliveries

  • Requesting returns or refunds

  • Contacting customer support

  • Using Website forms

  • Receiving marketing communications

  • Interacting with advertising campaigns

  • Using Website features and services

The Policy applies whether the Website is accessed from a desktop computer, smartphone, tablet, or another compatible device.


3. Personal Data We Collect

The categories of personal data collected depend on how a user interacts with the Website.

We may process the following categories of information.


4. Identification and Contact Data

When you place an order, create an account, contact us, or otherwise provide information directly, we may collect:

  • First name

  • Last name

  • Email address

  • Telephone number

  • Billing address

  • Shipping address

  • Country

  • Province or region

  • Postal code

  • Company name, where applicable

  • Tax or invoicing information where required

This information is primarily used to identify customers, process orders, provide customer support, and fulfill contractual obligations.


5. Account Information

Where customer account functionality is available, we may process information associated with your account, including:

  • Account identifier

  • Login information

  • Email address

  • Saved addresses

  • Order history

  • Account preferences

  • Customer settings

  • Authentication information

Passwords are not intended to be available to our personnel in plain text and should be handled through appropriate security mechanisms.

Users are responsible for keeping their account credentials confidential.


6. Order and Purchase Information

When a purchase is made through the Website, we may process information including:

  • Products ordered

  • Product identifiers

  • Quantities

  • Order value

  • Discounts

  • Promotional codes

  • Order number

  • Date of purchase

  • Currency

  • Delivery method

  • Delivery status

  • Payment status

  • Returns

  • Refunds

  • Cancellations

  • Customer communications relating to the order

This information is necessary to manage the commercial relationship between the customer and the Company.


7. Payment Information

Payments may be processed through external payment providers.

Depending on the payment method selected, these providers may process:

  • Cardholder information

  • Payment card information

  • Bank information

  • Payment account details

  • Transaction identifiers

  • Authorization information

  • Fraud prevention information

Complete payment card information is generally processed directly by the relevant payment provider rather than stored by us.

We may receive information confirming whether a transaction was successful, declined, refunded, cancelled, or subject to review.


8. Shipping and Delivery Information

To deliver purchased products, we may process and share information such as:

  • Customer name

  • Shipping address

  • Telephone number

  • Email address

  • Order reference

  • Delivery instructions

  • Shipment tracking information

This information may be communicated to couriers, logistics companies, fulfillment providers, or other parties involved in completing the delivery.


9. Technical Information

When users access the Website, certain technical information may be collected automatically.

This may include:

  • IP address

  • Browser type

  • Browser version

  • Device type

  • Operating system

  • Device settings

  • Screen characteristics

  • Language settings

  • Time zone

  • Internet service provider

  • Referring URL

  • Access date and time

  • Session information

  • Technical identifiers

  • Cookie identifiers

Technical data may be used to operate, secure, troubleshoot, and improve the Website.


10. Website Usage Information

We may collect information regarding how visitors interact with the Website, including:

  • Pages visited

  • Products viewed

  • Search queries

  • Links clicked

  • Navigation paths

  • Time spent on pages

  • Session duration

  • Shopping cart activity

  • Checkout activity

  • Purchases

  • Referring sources

  • Website errors

  • Interaction with Website functions

This information helps us understand Website performance and improve the customer experience.


11. Communications

When you contact us, we may process information contained in communications such as:

  • Emails

  • Customer support requests

  • Contact form submissions

  • Complaints

  • Product questions

  • Return requests

  • Refund requests

  • Warranty communications

  • Other correspondence

We may retain these communications where reasonably necessary to provide customer service, maintain business records, resolve disputes, or protect our legal interests.


12. How We Collect Personal Data

Personal data may be collected through several channels.

12.1 Information Provided Directly

We receive information directly from users when they:

  • Place an order

  • Create an account

  • Enter billing information

  • Provide shipping information

  • Contact customer support

  • Complete a Website form

  • Request a return

  • Request a refund

  • Subscribe to marketing communications

  • Participate in promotions

12.2 Information Collected Automatically

Certain information may be collected automatically through:

  • Cookies

  • Website logs

  • Tags

  • Pixels

  • Scripts

  • Analytics technologies

  • Device information

  • Similar tracking technologies

Where legally required, non-essential technologies are subject to the user’s consent preferences.

12.3 Information from Service Providers

We may receive information from parties involved in providing services to us, such as:

  • Payment providers

  • Shipping companies

  • E-commerce providers

  • Analytics providers

  • Advertising platforms

  • Security providers

  • Fraud prevention services

  • Customer support tools


13. Purposes of Processing

We process personal data only for legitimate and specified purposes.

These purposes may include the following.


14. Processing Orders

We use personal data to:

  • Receive orders

  • Verify order information

  • Process purchases

  • Confirm transactions

  • Issue order confirmations

  • Prepare products for shipment

  • Arrange delivery

  • Provide tracking information

  • Handle cancellations

  • Manage returns

  • Process refunds

These activities are necessary for the operation of our e-commerce business and the fulfillment of customer orders.


15. Customer Service

Personal data may be processed to:

  • Respond to inquiries

  • Provide product information

  • Resolve order problems

  • Investigate delivery problems

  • Assist with payments

  • Process returns

  • Process refunds

  • Handle complaints

  • Manage warranty requests

  • Provide after-sales assistance


16. Account Management

Where customer accounts are available, personal data may be processed to:

  • Register accounts

  • Authenticate customers

  • Save customer preferences

  • Display order history

  • Manage addresses

  • Facilitate future purchases

  • Maintain account security

  • Recover account access


17. Website Operation

We may process technical information to ensure that the Website operates correctly.

This may include:

  • Managing Website sessions

  • Delivering Website content

  • Maintaining shopping cart functionality

  • Supporting checkout

  • Detecting technical errors

  • Monitoring system performance

  • Maintaining infrastructure

  • Diagnosing Website problems


18. Website Security

Personal data and technical information may be processed to protect:

  • Customers

  • Customer accounts

  • Payments

  • Transactions

  • Website infrastructure

  • Company systems

Security activities may include:

  • Detecting suspicious activity

  • Preventing unauthorized access

  • Identifying malicious traffic

  • Detecting automated attacks

  • Preventing account abuse

  • Investigating security incidents

  • Preventing fraudulent transactions


19. Fraud Prevention

We may process transaction, account, technical, payment, and device information where necessary to identify or prevent fraudulent or suspicious activity.

This may include evaluating:

  • Unusual purchasing behavior

  • Repeated failed payments

  • Suspicious account activity

  • Abnormal transaction patterns

  • Potential payment fraud

  • Attempts to misuse Website services

In some circumstances, external payment or fraud prevention providers may also perform their own checks.


20. Analytics and Website Improvement

Subject to the user’s consent where required, we may use analytics services to understand how visitors interact with our Website.

The Website may use Google Analytics 4 for this purpose.

Analytics may help us understand:

  • Number of Website visitors

  • Popular pages

  • Popular products

  • Traffic sources

  • Customer navigation

  • Device categories

  • Shopping behavior

  • Checkout behavior

  • Conversion rates

  • Website performance

  • Technical problems

Analytics information may be used to improve:

  • Website usability

  • Product presentation

  • Navigation

  • Customer experience

  • Technical performance

  • Checkout processes

  • Business decision-making


21. Advertising and Campaign Measurement

Subject to user consent where required, we may use online advertising services, including Google Ads, to promote our products and evaluate campaign performance.

Advertising and measurement technologies may be used to:

  • Measure advertising effectiveness

  • Understand which campaigns generate Website visits

  • Attribute purchases to campaigns

  • Measure conversions

  • Analyze marketing performance

  • Improve advertising campaigns

  • Create advertising audiences

  • Support remarketing activities

  • Avoid unnecessary or repetitive advertising

Information processed for these activities may include:

  • Campaign source

  • Advertisement interaction

  • Website activity

  • Product interactions

  • Conversion events

  • Purchase events

  • Device information

  • Browser information

  • Cookie or advertising identifiers

Advertising technologies requiring consent will be managed according to the user’s consent preferences.


22. Conversion Measurement

Where permitted and subject to consent where required, we may measure whether an advertising interaction results in a relevant action on the Website.

Examples of conversion events may include:

  • Viewing a product

  • Adding a product to the cart

  • Starting checkout

  • Completing a purchase

  • Submitting a contact request

Conversion measurement helps us determine which advertising campaigns are effective and improve how our marketing budget is allocated.


23. Remarketing

Subject to consent where required, we may use remarketing or retargeting technologies.

These technologies may help us display relevant advertising to users who have previously:

  • Visited the Website

  • Viewed specific products

  • Added products to their shopping cart

  • Begun the checkout process

  • Interacted with our services

Remarketing activities may rely on cookies, device identifiers, or similar technologies.

Users can reject or withdraw consent for these activities through the Website’s cookie preference controls.


24. Marketing Communications

Where legally permitted, we may use contact information to send communications concerning:

  • Products

  • Promotions

  • Offers

  • Discounts

  • Company news

  • Commercial initiatives

Where consent is required, marketing communications will be sent only after the user has provided the relevant consent.

Users may withdraw consent or unsubscribe from marketing emails at any time.

An unsubscribe mechanism may be included in commercial communications.

Users may also contact:

info@bricolonex.com

Transactional messages concerning purchases, payments, security, deliveries, returns, or customer service are not considered ordinary promotional communications and may continue where necessary.


25. Legal Compliance

We may process personal data where necessary to comply with obligations arising from:

  • Tax legislation

  • Accounting requirements

  • Commercial legislation

  • Consumer protection requirements

  • Regulatory requirements

  • Court orders

  • Requests from competent authorities

Processing may also be necessary to maintain legally required business records.


26. Legal Claims and Disputes

Personal data may be retained and processed where reasonably necessary to:

  • Establish legal claims

  • Exercise legal rights

  • Defend legal claims

  • Manage contractual disputes

  • Resolve payment disputes

  • Handle chargebacks

  • Investigate fraud

  • Respond to legal proceedings


27. Legal Bases for Processing

Depending on the purpose, personal data may be processed under one or more of the following legal bases.

27.1 Performance of a Contract

Processing may be necessary to perform a contract with a customer or take steps requested before entering into a contract.

This may include:

  • Order processing

  • Payment management

  • Product delivery

  • Returns

  • Refunds

  • Customer service

27.2 Legal Obligation

We may process data where necessary to comply with legal obligations, including:

  • Accounting requirements

  • Tax obligations

  • Invoicing requirements

  • Regulatory obligations

27.3 Legitimate Interests

Where appropriate and permitted by applicable law, processing may be based on our legitimate interests.

These interests may include:

  • Protecting the Website

  • Preventing fraud

  • Securing transactions

  • Improving services

  • Managing disputes

  • Protecting our business

  • Establishing or defending legal claims

Where processing is based on legitimate interests, we consider whether those interests are overridden by the rights and freedoms of the individuals concerned.

27.4 Consent

Where applicable, processing may be based on the user’s freely given consent.

Consent may apply to activities such as:

  • Analytics technologies

  • Advertising technologies

  • Remarketing

  • Profiling

  • Certain marketing communications

Users may withdraw consent at any time.

Withdrawal does not affect processing lawfully carried out before consent was withdrawn.


28. Cookies and Tracking Technologies

The Website may use cookies and similar technologies to support:

  • Essential Website functions

  • Shopping cart functionality

  • Checkout

  • Authentication

  • Security

  • Preference management

  • Analytics

  • Conversion measurement

  • Advertising

  • Marketing

Where required by applicable law, non-essential technologies are not used until the relevant consent has been provided.

Users may accept, reject, or manage optional cookie categories through the Website’s cookie consent interface.

Additional information is available in our Cookie Policy.


29. Consent Preferences

Where consent is required, users may be provided with controls to:

  • Accept optional technologies

  • Reject optional technologies

  • Select individual categories

  • Review their choices

  • Change their preferences

  • Withdraw previously provided consent

Cookie preferences can be modified through the relevant control available on the Website.


30. E-Commerce Analytics

Subject to the user’s privacy preferences, we may analyze interactions occurring throughout the purchasing process.

These interactions may include:

  • Product views

  • Product selections

  • Products added to cart

  • Products removed from cart

  • Cart views

  • Checkout initiation

  • Purchase completion

  • Refund events

Information may include:

  • Product identifiers

  • Product names

  • Product categories

  • Quantity

  • Transaction value

  • Currency

  • Transaction identifier

  • Campaign attribution information

This information helps us understand the effectiveness of our Website and improve customer experience.


31. Sharing of Personal Data

We may disclose personal data to third parties where necessary to provide services, operate the Website, comply with legal requirements, or protect legitimate business interests.

Recipients may include:

  • Payment processors

  • Banks

  • Shipping providers

  • Couriers

  • Logistics providers

  • Fulfillment companies

  • Website hosting providers

  • Cloud service providers

  • E-commerce technology providers

  • IT providers

  • Security providers

  • Analytics providers

  • Advertising platforms

  • Marketing service providers

  • Customer support platforms

  • Professional advisers

  • Accountants

  • Lawyers

  • Fraud prevention providers

  • Public authorities

Personal data is shared only where reasonably necessary for the relevant purpose.


32. Service Providers

Certain companies provide services to us and may process personal data on our behalf.

Where applicable, service providers may be contractually required to:

  • Process information only for agreed purposes

  • Protect personal data

  • Apply appropriate security measures

  • Maintain confidentiality

  • Comply with applicable data protection requirements

Some service providers may act as independent data controllers for particular processing activities.


33. Sale of Personal Data

We do not ordinarily sell customer personal data in exchange for monetary consideration.

Information may nevertheless be shared with service providers and technology partners as described in this Privacy Policy when necessary to operate our Website and services.


34. International Data Transfers

Some providers may process personal data outside Italy or outside the European Economic Area (“EEA”).

Where required by applicable law, appropriate safeguards may be used for international transfers.

Depending on the circumstances, these may include:

  • Adequacy decisions

  • Standard Contractual Clauses

  • Contractual safeguards

  • Technical and organizational safeguards

  • Other legally recognized transfer mechanisms


35. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal requirements.

Retention periods may vary depending on:

  • Type of information

  • Customer relationship

  • Contractual obligations

  • Legal obligations

  • Tax requirements

  • Accounting requirements

  • Fraud prevention needs

  • Security requirements

  • Limitation periods

  • Pending disputes


36. Order and Accounting Records

Information associated with:

  • Orders

  • Payments

  • Invoices

  • Refunds

  • Accounting documents

  • Tax documentation

may be retained for the period required under applicable accounting, commercial, and tax legislation.


37. Customer Account Retention

Account information may be retained while an account remains active.

Certain information may continue to be retained after an account is closed where necessary to:

  • Comply with legal obligations

  • Maintain transactional records

  • Resolve disputes

  • Prevent fraud

  • Protect legal rights


38. Marketing Data Retention

Information used for marketing may be retained until:

  • Consent is withdrawn

  • The user unsubscribes

  • The relevant marketing purpose ends

  • Retention is no longer reasonably justified

Data that must be retained to record an unsubscribe or objection may continue to be stored to ensure that the user’s preference is respected.


39. Analytics and Advertising Data Retention

Analytics and advertising information may be retained according to:

  • Website configuration

  • Provider settings

  • Purpose of processing

  • User consent preferences

  • Applicable legal requirements

Where possible and appropriate, information may also be aggregated or anonymized.


40. Data Security

We implement appropriate technical and organizational safeguards intended to protect personal data.

These may include:

  • Encryption

  • Secure connections

  • Access restrictions

  • Authentication measures

  • Account security controls

  • Server security

  • System monitoring

  • Software maintenance

  • Security updates

  • Backup procedures

  • Access management

  • Internal data protection practices


41. Limits of Security

Although we take reasonable measures to protect personal data, no electronic storage or transmission system can guarantee absolute security.

Users are encouraged to:

  • Use secure passwords

  • Keep login details confidential

  • Avoid sharing account credentials

  • Use secure devices

  • Protect access to their email accounts


42. Data Breaches

Where a personal data breach occurs, we will evaluate the incident and take appropriate actions in accordance with applicable data protection requirements.

This may include:

  • Investigating the incident

  • Limiting its effects

  • Implementing corrective measures

  • Documenting the incident

  • Notifying competent authorities where required

  • Informing affected individuals where required


43. User Rights Under GDPR

Subject to the conditions and limitations provided by applicable law, users may exercise the following rights concerning their personal data.


44. Right of Access

Users may request confirmation as to whether their personal data is being processed and, where applicable, request access to that information.


45. Right to Rectification

Users may request correction of inaccurate personal information or completion of incomplete information.


46. Right to Erasure

Users may request deletion of personal data where the legal requirements for erasure are satisfied.

This right may be limited where retention is required for legal, contractual, accounting, tax, security, or legal claim purposes.


47. Right to Restriction

Users may request restriction of processing in circumstances provided under applicable data protection law.


48. Right to Object

Users may object to certain processing activities, particularly where processing is based on legitimate interests.

Users may object at any time to processing carried out for direct marketing purposes.


49. Right to Data Portability

Where applicable, users may request personal data they provided in a structured, commonly used, and machine-readable format.

They may also have the right to request transmission of such information to another controller where technically feasible and legally applicable.


50. Right to Withdraw Consent

Where processing is based on consent, users may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.


51. Right to Lodge a Complaint

Users have the right to lodge a complaint with the competent data protection supervisory authority where they believe that the processing of personal data does not comply with applicable law.


52. Exercising Privacy Rights

Privacy-related requests may be submitted to:

info@bricolonex.com

To protect personal information, we may request information reasonably necessary to verify the identity of the person submitting a request.

Requests will be handled in accordance with applicable data protection legislation.


53. Automated Decision-Making

We do not ordinarily use solely automated decision-making that produces legal effects concerning users or similarly significantly affects them.

Technology providers may use automated processes for purposes including:

  • Fraud detection

  • Security

  • Advertising optimization

  • Audience selection

  • Campaign measurement

Such activities do not necessarily constitute automated decision-making within the meaning of Article 22 GDPR.

Where legally required, additional information will be provided regarding relevant automated decision-making processes.


54. Profiling

Subject to consent and applicable law, certain advertising technologies may analyze Website interactions in order to:

  • Understand user interests

  • Create marketing audiences

  • Measure campaign effectiveness

  • Provide more relevant advertising

  • Support remarketing activities

Users may refuse or withdraw consent to optional profiling technologies through the Website’s privacy and cookie controls.


55. Third-Party Websites

The Website may contain links to external websites.

We are not responsible for the privacy practices of third-party websites that operate independently from us.

Users should review the privacy information provided by third parties before submitting personal data to them.


56. Social Media and External Services

The Website may contain links, buttons, widgets, or integrations associated with external platforms.

When users interact with these services, information may be transmitted to or collected by the relevant third party.

Such processing may be governed by the third party’s own terms and privacy documentation.


57. Payment Providers

Payment providers may process payment and fraud prevention information as independent service providers or data controllers, depending on the relevant processing activity.

Users may be subject to the privacy terms of the payment service selected during checkout.


58. Delivery Providers

Shipping and logistics providers may receive information necessary to deliver orders.

This may include:

  • Customer name

  • Shipping address

  • Contact details

  • Delivery instructions

  • Order or shipment reference

Delivery providers may independently process certain information where required to perform their services.


59. Business Changes

If our business undergoes a restructuring, merger, acquisition, sale, or transfer of assets, personal data may be transferred where necessary as part of that transaction and subject to applicable data protection requirements.

Appropriate safeguards will be applied where required.


60. Children and Minors

The Website is primarily intended for individuals who are legally capable of entering into purchase agreements.

We do not knowingly seek to collect personal data from children in violation of applicable law.

If we become aware that personal information relating to a minor has been unlawfully collected, appropriate steps may be taken to delete or otherwise properly process that information.


61. Changes to Personal Information

Users are encouraged to keep their personal information accurate and up to date.

Where account functionality permits, certain information may be updated directly through the customer account.

Alternatively, users may contact us to request correction.


62. Privacy by Design

Where appropriate, we seek to take data protection considerations into account when developing and managing our Website and services.

Measures may include:

  • Data minimization

  • Access controls

  • Privacy preferences

  • Appropriate retention practices

  • Security safeguards

  • Consent management mechanisms


63. Data Minimization

We aim to process personal data that is reasonably relevant and necessary for the purposes described in this Privacy Policy.

We seek to avoid collecting personal information that is not reasonably required for the relevant business or legal purpose.


64. Accuracy of Information

Users are responsible for providing accurate information when placing orders or creating accounts.

Incorrect information may affect:

  • Order processing

  • Delivery

  • Payment verification

  • Customer support

  • Refund processing

Users may contact us to request correction of inaccurate personal data.


65. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Changes may be made to reflect:

  • Changes to our Website

  • New services

  • New technologies

  • Changes to our business activities

  • Changes to service providers

  • Changes to legal requirements

  • Changes to data processing practices

The most recent version of the Privacy Policy will be published on this page.

The date shown at the beginning of the Policy indicates the most recent update.

Where required by applicable law, additional notice may be provided for material changes.


66. Contact Information

For questions, privacy requests, objections, or concerns relating to the processing of personal data, please contact:

Weprod S.R.L.
Via Ferrante Imparato, Edif. 3 – 190 Condom. Napoli Est
P3 Int. 301
80146 Naples (NA), Italy

VAT Number: IT10883491218

Email: info@bricolonex.com
Website: bricolonex.com