Privacy Policy

Introduction TreeD Filaments ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

By using our website, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our website or services.

1. Information We Collect

1.1 Personal Information You Provide When you register for an account or place an order, we collect the following personal information:

Full name (first name and last name) Email address Password (encrypted and securely stored) Shipping address Billing address Phone number Company name (optional, for business accounts) 1.2 Payment Information Payment information is processed through third-party payment processors:

Stripe: For credit and debit card payments. Stripe collects and processes your payment card details. We do not store complete credit card information on our servers. PayPal: For PayPal payments. PayPal handles the collection and processing of your payment information according to their privacy policy. Bank Transfer: For bank transfer payments, we receive only the payment confirmation and reference number. 1.3 Automatically Collected Information We automatically collect certain information when you visit our website:

IP address Browser type and version Device type and operating system Pages visited and time spent on pages Referring website or source Date and time of access Shopping cart contents and browsing behavior 1.4 Information We Do NOT Collect We want to be transparent about what we do not collect:

Complete credit card numbers (handled by Stripe and PayPal) Social security numbers or government ID numbers Biometric data Sensitive personal data about race, ethnicity, political opinions, or religious beliefs Health or medical information

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 Order Processing and Fulfillment Processing and fulfilling your orders Communicating with you about your orders Arranging shipping and delivery Processing payments and refunds Handling returns and exchanges 2.2 Account Management Creating and managing your user account Authenticating your identity Providing access to your order history Managing your preferences and settings 2.3 Customer Service Responding to your inquiries and support requests Resolving disputes and troubleshooting problems Providing product information and recommendations 2.4 Website Improvement and Analytics Analyzing website usage and performance through Google Analytics Understanding user behavior and preferences Improving our website functionality and user experience Identifying and fixing technical issues 2.5 Marketing Communications (With Your Consent) Sending promotional emails about new products and special offers Sending newsletters and updates (only if you opt in) You can unsubscribe from marketing emails at any time 2.6 Legal and Security Purposes Complying with legal obligations and regulations Preventing fraud and unauthorized transactions Protecting our rights and property Enforcing our Terms and Conditions

3. Data Storage and Security

3.1 How We Protect Your Data We take data security seriously and implement industry-standard security measures:

Encryption: All personal information stored in our database is encrypted using advanced encryption standards Secure Connections: Our website uses HTTPS/SSL encryption for all data transmission Password Protection: User passwords are hashed and encrypted, never stored in plain text Access Controls: Strict access controls limit who can view or modify personal data Regular Security Audits: We perform regular security assessments and updates Secure Infrastructure: Our servers and databases are hosted in secure, monitored environments 3.2 Data Retention We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

Active Accounts: Information is retained while your account is active Legal Requirements: Some data may be retained longer to comply with legal, tax, or accounting obligations (typically 7-10 years) Deleted Accounts: When you delete your account, your personal information is permanently deleted from our active databases within 30 days Backup Systems: Data in backup systems may persist for up to 90 days before automatic deletion 3.3 Data Location Your data is stored on secure servers located within the European Union. We do not transfer your personal data outside the EU except when necessary for payment processing through Stripe and PayPal, which comply with international data protection standards.

4. Information Sharing and Disclosure

4.1 We Do NOT Share Your Information With Third Parties We do not sell, rent, trade, or otherwise share your personal information with third parties for their marketing purposes. Your data remains confidential and is used solely for the purposes described in this Privacy Policy.

4.2 Limited Service Providers We share limited information only with essential service providers who help us operate our business:

Payment Processors: Stripe and PayPal receive payment information necessary to process transactions. They are bound by their own privacy policies and PCI-DSS compliance requirements. Shipping Carriers: We share your name, address, and phone number with courier services to deliver your orders. Analytics Provider: Google Analytics receives anonymized usage data to help us improve our website. No personally identifiable information is shared. 4.3 Legal Requirements We may disclose your information if required by law or in response to:

Valid legal processes (court orders, subpoenas, warrants) Requests from law enforcement or government authorities Protection of our legal rights and safety Prevention of fraud or illegal activities 4.4 Business Transfers In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website of any such change in ownership or control of your personal information.

5. Cookies and Tracking Technologies

5.1 What Are Cookies Cookies are small text files stored on your device when you visit our website. They help us provide you with a better experience by remembering your preferences and enabling certain functionality.

5.2 Types of Cookies We Use Essential Cookies: Required for the website to function properly (login sessions, shopping cart) Functional Cookies: Remember your preferences and settings Analytics Cookies: Google Analytics cookies that help us understand how visitors use our website Authentication Cookies: Keep you logged in and secure your session 5.3 Managing Cookies You can control and manage cookies through your browser settings:

Most browsers allow you to refuse or accept cookies You can delete cookies that have already been set Blocking all cookies may affect website functionality Essential cookies cannot be disabled without losing core functionality 5.4 Google Analytics We use Google Analytics to analyze website traffic and usage patterns. Google Analytics uses cookies to collect anonymous information about how visitors interact with our website. This data is aggregated and does not identify individual users. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

6. Your Rights and Choices

Under applicable data protection laws, including GDPR, you have the following rights:

6.1 Right to Access You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

6.2 Right to Rectification You can update or correct your personal information at any time by logging into your account or contacting us directly. We will update your information within 5 business days.

6.3 Right to Erasure (Right to be Forgotten) You can request deletion of your account and personal information at any time. Upon deletion, your data will be permanently removed from our active databases within 30 days, except for information we are required to retain by law.

6.4 Right to Restriction of Processing You can request that we limit how we use your personal information in certain circumstances, such as while we verify the accuracy of your data.

6.5 Right to Data Portability You have the right to receive your personal information in a portable format and to request that we transfer it to another service provider where technically feasible.

6.6 Right to Object You can object to our processing of your personal information for marketing purposes at any time by unsubscribing from our emails or contacting us.

6.7 Right to Withdraw Consent Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

6.8 How to Exercise Your Rights To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within 30 days.

7. Children's Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16.

If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information immediately. If you believe we have collected information from a child under 16, please contact us.

8. Third-Party Links

Our website may contain links to third-party websites, including:

Payment processor websites (Stripe, PayPal) Social media platforms Partner or affiliate websites We are not responsible for the privacy practices or content of these third-party websites. When you leave our website, we encourage you to read the privacy policies of any website you visit.

9. International Data Transfers

Your personal information is primarily stored and processed within the European Union. However, some of our service providers may process data outside the EU:

Stripe and PayPal: May process payment data in the United States under appropriate safeguards and standard contractual clauses Google Analytics: May process anonymized data globally through Google's infrastructure When data is transferred outside the EU, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

10. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

Notify affected users within 72 hours of becoming aware of the breach Inform relevant data protection authorities as required by law Provide details about the nature of the breach and the data affected Advise on steps you can take to protect yourself Implement measures to prevent future breaches

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

We will update the "Last updated" date at the top of this page Material changes will be communicated via email to registered users Significant changes may require your renewed consent We encourage you to review this Privacy Policy periodically. Your continued use of our website after changes become effective constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

TreeD Filaments - Data Protection Officer

Email: privacy@treedfilaments.com

Email (General): team@treedfilaments.com

Phone: (+39) 0362-320500

Address: Via Messina 103, Seregno (MB), Italy

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information appropriately.

13. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal information based on the following legal grounds:

Contract Performance: Processing necessary to fulfill our contract with you (order processing, delivery) Legal Obligation: Processing required to comply with legal and regulatory requirements Legitimate Interests: Processing necessary for our legitimate business interests (fraud prevention, website security, analytics) Consent: Processing based on your explicit consent (marketing communications, optional features) Privacy Commitment Summary We collect only essential information needed to provide our services All data is encrypted and securely stored in our database We never share your information with third parties for marketing purposes You have full control over your data and can request deletion at any time We comply with GDPR and other applicable data protection regulations Payment information is handled securely by Stripe and PayPal Google Analytics is used only for anonymous website analytics