Privacy Policy

Last updated 12 November 2026

Amorette is a small shop, and it treats your details the way it treats every piece: with care, and only for what's needed. This page explains what is collected, why, and what you can do about it.

Who looks after your information

Amorette is run by Heather Tammaro in Rome, Italy, who is responsible for the information you share here. For any question or request about your privacy, write to hello@amorette.com. Every message is answered personally, always within one month.

What Amorette collects, and what for

• When you order: your name, email, shipping address and phone number, so your piece can reach you and the records the law requires can be kept. These details are needed to complete an order. Payment goes through Stripe, and Amorette never sees or stores your card number.
• When you ask for an entry code: your first name and email, so the code can be sent to you. You only join the email list if you tick the box to hear when new pieces go live.
• When you join the list: your email, to tell you about new pieces. Every email includes a way to unsubscribe.
• When you write in (a message, a consignment or styling request, or a stylist application): the details you send, so Amorette can reply.
• When you browse: a short, anonymous note of which pages and pieces are viewed, where the visit came from (for example Instagram) and whether it's a phone or a computer. It uses a random visit number that disappears when you close the tab, and never includes your name, email or IP address. Hearts work the same way: the pieces you heart stay in your own browser, and Amorette only sees how many hearts each piece has.
• If you say yes on the cookie banner: Google Analytics counts visits, with advertising features switched off.

Why Amorette is allowed to use it

• To fulfil your order and keep the tax records Italian law requires.
• Because you asked: sending your entry code and replying to your messages.
• Because you said yes: the email list and Google Analytics. You can change your mind at any time, and it won't affect anything that happened before.
• Amorette's legitimate interest in knowing which pieces get attention: the anonymous visit notes and heart counts.

Amorette doesn't sell your information, doesn't use it for advertising, and doesn't make automated decisions about you.

Cookies

Your browser keeps a few small notes so the shop works: your cookie choice, your entry, your bag, your hearts and the pieces you've viewed. Google Analytics only loads if you choose "That's fine". Choose "No thanks" and nothing loads from Google. To change your answer, clear this site's data in your browser and the banner will ask again. There are no advertising or retargeting cookies.

Who helps run Amorette

Each of these receives only what it needs to do its job:

• Netlify, website hosting (United States)
• Supabase, the shop's database and photos (European Union, Ireland)
• Stripe, payments (Ireland and United States)
• Google, email and, only with your yes, Google Analytics (Ireland and United States)
• The carrier delivering your order: Poste Italiane, DHL or UPS

Where information goes to the United States, it is protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long it's kept

• Orders and invoices: 10 years, as Italian tax law requires.
• The email list: until you unsubscribe.
• Messages and applications: up to 2 years after we last spoke.
• Google Analytics: 14 months.

Your rights

You can ask to see the information Amorette holds about you, to correct it, delete it or limit how it's used, or to receive a copy to take elsewhere. You can also object to any use based on legitimate interest. Just write to hello@amorette.com.

If you're unhappy with how your information has been handled, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority where you live.

Changes

If this policy changes, the date at the top changes with it.