Last updated: June 2026. This privacy policy explains how The Lens King SRL collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.
Data Controller
The Lens King SRL, Formia (LT), Italy. VAT: IT03368670596. Contact: support@thelensking.com
We have not appointed a Data Protection Officer (DPO), as we are not required to under Article 37 GDPR.
Data We Collect
We collect the following personal data when you place an order or interact with our website:
Order data: Name, email address, shipping address, billing address, phone number (optional), payment information (processed by Stripe — we do not store card details).
Account data: Email address and login credentials. Your password is never stored in plain text — it is kept in encrypted (hashed) form.
Technical data: IP address, browser type, pages visited, and cookies (see Cookie section below).
Communication data: Content of emails or messages you send us.
Providing your order and contact data is necessary to process and fulfil your purchase; without it, we cannot complete your order. Any other data is provided voluntarily.
How We Use Your Data
Order fulfillment (legal basis: contract performance) — processing and shipping your order, sending order confirmation and tracking information.
Customer support (legal basis: contract performance and legitimate interest) — responding to your questions and handling returns.
Legal obligations (legal basis: legal obligation) — maintaining financial records as required by Italian tax law.
Marketing (legal basis: consent) — sending promotional emails only if you have explicitly opted in. You can unsubscribe at any time.
Data Sharing
We share your data only with the following categories of processors, all of which are GDPR-compliant:
Payment processing: Stripe (to process payments securely).
Shipping: Courier services (to deliver your order).
Hosting: Cloudways / DigitalOcean (to host our website).
Email: Google Workspace (for customer communications).
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
International Data Transfers
Some of the service providers we use (such as Stripe and Google) are based outside the European Economic Area (EEA) or may process data in countries outside the EEA, including the United States. Our website and database are hosted on servers located in the EU (Frankfurt, Germany). Where personal data is transferred outside the EEA, it is protected by appropriate safeguards under Chapter V of the GDPR — an adequacy decision of the European Commission (including the EU–US Data Privacy Framework, where applicable) and/or Standard Contractual Clauses (SCCs). You can request details of these safeguards by contacting us at support@thelensking.com.
Data Retention
Order data is retained for 10 years as required by Italian tax law. Account data is retained until you request deletion. Marketing consent records are retained until you withdraw consent. Technical data (logs) is retained for a maximum of 12 months.
Your Rights (GDPR)
Under the GDPR, you have the right to:
Access — request a copy of the personal data we hold about you.
Rectification — request correction of inaccurate data.
Erasure — request deletion of your data (subject to legal retention requirements).
Restriction — request that we limit processing of your data.
Portability — receive your data in a structured, machine-readable format.
Object — object to processing based on legitimate interest.
Withdraw consent — withdraw marketing consent at any time.
To exercise any of these rights, contact us at support@thelensking.com. We will respond within 30 days.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
Cookies
We use essential cookies required for the website and checkout to function. We use analytics cookies (Google Analytics) only with your consent. You can manage cookie preferences through your browser settings. Essential cookies cannot be disabled as they are necessary for the website to work.
Security
We implement appropriate technical and organizational measures to protect your data, including SSL encryption, secure payment processing via Stripe, and access controls on our systems.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.
