How we handle your data

The data controller is Simone Ricucci, who offers the Cangubox service, with registered office at Via Emilia Romagna 5, 20064 Gorgonzola (MI), Italia and VAT number 11621850962.

The point of contact for any request is privacy@cangubox.com. We have not appointed a data protection officer: we are not a body for which the appointment is mandatory.

We collect only what is needed to do the job. Each line below corresponds to a form that exists on the site.

• When you book: name, email, phone number, delivery address with postcode and city, and the collection address if it is different, plus the dates and the contents of the order. They are needed to deliver the boxes, to come back and collect them and to answer you on the phone if something changes. The legal basis is the performance of the contract.
• When you pay: payment takes place on Stripe's pages. We do not see and do not store the card number: we receive only the outcome and a transaction identifier, which we need for refunds and for accounting. We also keep two code names that Stripe assigns to the card and to you as its customer: they do not allow anyone to read the number or to use the card elsewhere, they are used to ask Stripe for a charge in the cases set out in the terms, and we keep them for the time stated in section 05.
• When you enter the customer area: your email, to send you the sign-in link and code. There is no password to remember and we do not store any. If you prefer to sign in with Google, what comes from there is covered in point 03.
• When you write to us from the form: name, email, reason, order number if any, and the text of the message. The message arrives in our mailbox and is not saved in any database. The legal basis is replying to your request.
• When you ask whether we cover your postcode: the postcode you type, the answer we give you and the moment you asked, even if you leave us no contact details. It is used to work out where to open, and it is a query recorded without who made it: your name, your email or your address are not linked to that postcode. If you then leave us your email to be notified, we keep that separately, to write to you when we open.
• When you write to us as a partner or to open a node: the details in the form. They are used to call you back.
• When you type an address: the text you type is sent to Google, which returns the suggestions. It happens while you type, before you have confirmed anything.
• When you browse: the server's technical logs keep the IP address, the page requested and the time of the request. They are needed to keep the site running and to defend it from abuse, and this is a legitimate interest.
• If you consent: measurement data, which tells us which pages work. Without your yes, it does not start.

We do not profile anyone, we do not buy address lists and we do not send marketing communications to people who have not asked for them.

There are two ways into the customer area: with the link and code we send you by email, or with the “Sign in with Google” button. The second is a shortcut, not an obligation, and the first stays right beside it.

If you choose Google, Google hands us the profile data you authorise on its consent screen: the email address, whether that email is verified, the name and the profile picture. We ask for nothing else. We do not ask for your mail, your contacts, your calendar, your files or your photos, and what was not requested there we cannot read.

• How we use it: to recognise you when you sign in and to show you the orders placed with that email. It is not used for anything else: no advertising, no profiling, no matching against other lists.
• Where we keep it: in your sign-in record, inside the Supabase database, together with the fact that the sign-in comes from Google. We never see the password of your Google account: you type it on Google's pages, and only the outcome comes back to us.
• Who we share it with: no one. We do not sell it, we do not hand it over, we do not pass it to third parties for their own purposes. It stays within the providers listed in point 04, who process it on our behalf and only to make the service work.
• How to revoke it: you can remove the authorisation whenever you want from the connected apps page of your Google account, and from that moment the button stops letting you in. If you also want us to delete what we hold, write to privacy@cangubox.com: only the order data that the law requires us to keep remains, as point 05 says.

What we receive from Google is handled in accordance with the Google API Services User Data Policy, including the Limited Use requirements.

To run the service we rely on providers that process the data on our behalf, under a contract that binds them to do so only for what we ask of them.

• Vercel: hosts the site and keeps its technical logs.
• Supabase: the orders database and the sign-in to the customer area.
• Stripe: payments. For the anti-fraud part Stripe acts as an independent controller, with its own privacy policy.
• Resend: sending the confirmation emails, the sign-in codes and the notifications from the contact form.
• Google: sign-in to the customer area for those who choose the Google button, the address suggestions and, only with your consent, the measurement of visits.
• Meta: if you choose to write to us on WhatsApp, the conversation takes place on their platform and under their terms. It is your choice and there is always an alternative: the contact form.

Some of these providers are based or have infrastructure outside the European Union. In those cases the transfer takes place on the basis of the standard contractual clauses approved by the European Commission.

• Orders: ten years from the end of the rental. It is not our choice, it is the period the law imposes for accounting documents.
• The registered card: 30 days from the end of the rental. Then the automatic job that runs every evening detaches it, and the code name disappears from our database too. The margin covers damage that shows up at inspection and returns on which there is no agreement yet.
• The messages you send us: stay in the mailbox for as long as they are needed to reply and to reconstruct an exchange, and are then deleted.
• Coverage requests: until the area opens, and in any case no longer than twenty-four months.
• Technical logs: for the time set by our hosting provider, in the order of weeks.
• Your cookie choice: stays in your browser until you change it or clear the site's data.

Technical cookies are needed to keep you signed in to the customer area and to complete an order: without them the site does not work, and for these your consent is not required.

Among these there is one that lasts a long time, and it should be described for what it is. When you pay, the browser remembers the order you have just placed, so you can come back to see how it is going without signing in every time. It contains the order number and a key that opens that order only, not your account and not the other orders placed with the same email. It stops working thirty days after the boxes are returned, and you can remove it earlier whenever you want: in the customer area, next to the order, there is “Forget this order on this device”.

Measurement cookies tell us which pages are read and where people come from. They start only if you accept, and until you do they stay off: it is not a promise, it is how the banner is built. You can change your mind whenever you want.

Your choice is not saved in a cookie but in the browser's local storage, and we do not send it to anyone.

Change your cookie preferences

You can ask us to access your data, to correct it, to delete it, to restrict its processing, to receive it in a machine-readable format, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time, and the withdrawal does not affect what happened before.

Write to privacy@cangubox.com: we reply within one month. One thing must be said honestly: the data of an order that has already been invoiced cannot be deleted before the ten years are up, because we are the ones required to keep it.

If you think we are handling your data improperly, you can contact the Garante per la protezione dei dati personali, the Italian data protection authority (garanteprivacy.it).

The date at the top says when we last updated it. If something that concerns you changes, we will write it here and, if the change is substantial, we will also tell you by email.

The rental conditions are on a separate page: terms and conditions.