Privacy policy

The e-commerce site ilop.com is part of the eye-oo project, managed by Eyeoo S.r.l. This privacy policy explains how our organization uses the personal data collected from users while using the website and in relation to our online sales services, in accordance with the European Union General Data Protection Regulation (GDPR).

Data Controller:

The Data Controller of your personal data is Eyeoo S.r.l. - via De’ Musei 4, 40124 Bologna (BO) - Italy - VAT and Tax Code IT03799111202. The Controller is also referred to below as “eye-oo”, “we”.

Please read carefully our privacy and cookie information. For further information, questions, or inquiries about the processing of your personal data, please contact our Customer Service at any time using the email address hello@eye-oo.com.

Contents:

• What personal data do we collect?
• How do we collect this data?
• How do we use the data we collect?
• How and where do we store the data?
• Marketing
• Your rights
• Changes to our privacy policy
• How to contact us
• How to contact the competent authorities

What personal data do we collect?

While browsing the website ilop.com, we may collect the following types of data:

• Aggregated data to understand how users interact with and use the website: analytics regarding your browsing path, the pages you visit, and how you interact with individual pages.
• Identification personal data (e.g., first name and last name, email address, password, etc.) if you register on the website.
• Your email address and consent to receive communications when you subscribe to our newsletter service.
• Personal data you provide when contacting our Customer Service.
• Residential or domicile address and telephone number if you place online orders or complete your user profile, even if the online order is not completed.

How do we collect this data?

By accessing our services or registering on ilop.com, you directly provide the personal data we collect and process. We collect and process your data when you:

• Browse, use, or view pages of our website while accepting cookies through your browser
• Register online or submit an order proposal through the account creation form and checkout procedure
• Subscribe to our newsletter by entering your email address and accepting the service terms
• Voluntarily complete an online survey or send us a review or opinion, including via email

eye-oo may also indirectly receive your personal data from the following third parties:

• PayPal, if you use the Express Checkout service

How do we use the data we collect?

Your personal data is processed by us in compliance with applicable data protection laws for the following purposes:

• To execute the purchase contract for products or services offered on ilop.com
• To allow website registration and manage your login so you can access your Account features on the ilop.com website
• To manage requests and questions you send to our Customer Service
• To provide additional services such as subscribing to our periodic offers newsletter or other initiatives that we believe may be of interest to you
• To provide services such as in-store try-on of a model or product available on the website

How and where do we store the data?

eye-oo adopts all reasonable security measures and good organizational practices to protect your personal data and prevent accidental or fraudulent deletion, modification, total or partial data loss, or unauthorized access or transmission. We regularly verify the effectiveness of our technical and organizational measures to ensure continuous improvement in processing security.

Our collaborators are required to comply with strict confidentiality obligations, are informed about data protection practices, and receive regular training updates regarding legal changes in personal data protection.

Lawfulness of processing and legal basis: processing is lawful based on one or more of the following grounds: it is necessary to provide you with a service you have expressly requested; to execute the purchase contract for goods or services if your order proposal is accepted or if a service or product reservation is made; to comply with legal, regulatory, or European Union obligations, including accounting and tax requirements.

eye-oo may share your personal data with third-party companies or software providers to enable service execution, such as product delivery, or to make additional services and features available, or for statistical and aggregated data analysis useful for understanding website usage and improving our offer and services. Our service providers may include:

• Financial institutions
• Companies specialized in fraud detection and prevention
• Third-party technology service providers
• Third-party logistics, transportation, and delivery service providers
• Third-party customer support service providers
• Marketing and advertising service providers

Place of processing: We process your data at our operational offices, workplaces, and logistics facilities, through external data processors appointed by us and through external data processing platforms. In some cases, our service providers may be located in countries outside the European Union. In such cases, the transfer of your personal data to these countries is carried out in compliance with legal safeguards.

The services provided by our suppliers enable essential website functionalities such as user registration management, review and comment management, customer database management, e-commerce services, payment processing, session analytics tools, etc. Some of these services operate through servers located in different geographical areas. You may refer to the section regarding personal data processing details of each service:

Shopify Inc. - Acts as a data processor handling various types of personal data on behalf of the Controller, as specified in the service privacy policy available here. Processing location: Canada. Privacy Shield participant.

PayPal Inc. - Provides services enabling online payments. It collects and processes various types of data as specified in its privacy policy available here.

Data retention period: Personal data you provide may be lawfully stored for as long as necessary for the purposes stated in our General Terms and in any case until you request data deletion, for example until you request account deletion.

Personal data collected with your consent for storage and processing, to execute a purchase order proposal or to provide a service you requested, is retained in accordance with civil and tax legal obligations, exclusively to comply with legal requirements.

After the retention period, data is completely deleted or irreversibly anonymized.

Your rights

eye-oo is committed to ensuring that you have full rights under Articles 16, 17, 18 and 19 of EU Regulation 2016/679 (GDPR) regarding rectification, deletion, and restriction of processing. You have the right to obtain confirmation whether personal data processing is ongoing and to access your personal data for portability. You have the right to request:

• Access to processed data
• Receive your data in a structured, commonly used and machine-readable format
• Rectification and correction of inaccurate or incomplete data
• Deletion of your personal data if it is no longer necessary, or upon withdrawal of consent, or to comply with legal obligations
• Restriction of processing in certain circumstances

In case of rectification, deletion, or restriction of processing, you will receive a notification within one month from the date of your request. If you wish to exercise any of the rights described above, please contact our Customer Service using the email address hello@eye-oo.com.

Changes to our privacy policy

eye-oo regularly reviews its privacy policy and publishes updates on this page. We recommend visiting it periodically.

How to contact us

For further information, questions, or inquiries regarding the processing of your personal data, please contact our Customer Service at any time using the email address hello@eye-oo.com.

How to contact the competent authorities

To contact your national data protection authority, you may refer to the list of members of the European Data Protection Board, an independent European body that contributes to the consistent application of data protection rules across the European Union and promotes cooperation between EU data protection authorities.

Last updated: March 3, 2026