Privacy Policy

Last updated: 26 October 2026

This Privacy Policy explains how personal data is collected and used when you visit nciglp.com (the "Site"), sign up for our emails or buy our digital products. It applies to all visitors and customers, wherever they are located, and includes additional information for the European Union/EEA, the United Kingdom, the United States, Canada and Australia (Section 12).

1. Who is responsible for your data

The data controller is Gabriele Stacul, trading as NCIGLP, Via San Lorenzo 80, 34077 Ronchi dei Legionari (GO), Italy, VAT number IT01265180313. Email: info@nciglp.com.

Because we are established in Italy, we process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Italian Personal Data Protection Code (Legislative Decree 196/2003), for all customers regardless of where they live, as well as with the local laws described in Section 12. We have not appointed a Data Protection Officer, as we are not required to; you can contact us directly about anything in this policy.

2. What data we collect

  • Order data: name, email address, billing address and country, order details (products, prices, currency, discount codes), and, if you provide it, your phone number. Because all our products are digital, we do not need or use a shipping address.
  • Payment data: payments are handled by our payment providers (Shopify Payments, PayPal and Klarna). We do not receive or store your full card number; we only receive confirmation of payment and limited information such as the payment method and the last digits of the card.
  • Email sign-up data: the email address you enter in our sign-up form and the record of your consent to receive promotional emails.
  • Checkout data: if you start but do not complete a checkout, the information entered up to that point (for example your email address and the products in your cart).
  • Communications: the content of emails or messages you send us and our replies.
  • Device and usage data: IP address, browser and device type, time zone, pages viewed, how you reached the Site and how you interact with it, collected through cookies and similar technologies (see Section 5).

Please do not send us health information. Our products are educational and we do not need information about any child's health, diagnosis or development. If you choose to include such information in a message, we will use it only to reply to you and will delete it when it is no longer needed for that purpose.

3. Why we use your data and our legal bases

  • To process your order, deliver your download and provide customer support — performance of a contract (Art. 6(1)(b) GDPR).
  • To issue invoices and keep accounting and tax records — compliance with legal obligations (Art. 6(1)(c) GDPR), including Italian tax and accounting law.
  • To prevent fraud, keep the Site secure and handle refunds, chargebacks or legal claims — our legitimate interests in protecting our business (Art. 6(1)(f) GDPR).
  • To send you promotional emails and discount codes — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time using the unsubscribe link in every email or by writing to us.
  • To send a reminder about an unfinished checkout — our legitimate interest in helping you complete a purchase you started, where permitted by applicable law. You can opt out at any time.
  • To measure the performance of our ads and show you relevant ads on Facebook and Instagram (Meta Pixel), and for site analytics — our legitimate interest in measuring and promoting our products (Art. 6(1)(f) GDPR). You can object and opt out at any time as explained in Section 5.

Providing your order data is necessary to complete a purchase; without it we cannot deliver your product. Providing data for marketing is optional. We do not use automated decision-making, including profiling, that produces legal or similarly significant effects for you.

4. Who we share your data with

We do not sell your personal data for money. We share it only with the following categories of recipients, and only as necessary for the purposes above:

  • Shopify (e-commerce platform, hosting, checkout, order and email tools), acting as our data processor. See Shopify's privacy policy.
  • Payment providers (Shopify Payments, PayPal, Klarna), which process your payment and may act as independent controllers under their own privacy policies, for example for fraud prevention and regulatory obligations.
  • Meta Platforms Ireland Ltd and Meta Platforms, Inc., for advertising measurement and targeting through the Meta Pixel. For the collection and transmission of data through the Pixel, we and Meta are joint controllers; Meta's further processing is governed by Meta's Privacy Policy.
  • Invoicing, accounting and email providers and our accountant, to issue invoices, keep records and manage our mailbox, acting as our processors or under professional confidentiality.
  • Public authorities, courts and professional advisers, where required by law or necessary to establish, exercise or defend legal claims.

5. Cookies and similar technologies

We use technical cookies that are necessary for the Site, cart and checkout to work, and analytics and marketing technologies, including the Meta Pixel, which records events such as page views, add-to-cart and purchases so that we can measure our ads and show relevant ads on Facebook and Instagram.

You can object to this and opt out at any time by:

  • blocking or deleting cookies in your browser settings, or using your browser's private mode or tracking protection;
  • managing how Meta uses your data in your Facebook ad preferences and Meta's activity from other businesses controls;
  • enabling Global Privacy Control (GPC) in your browser, which we honour where our platform supports it;
  • emailing info@nciglp.com with the subject "Do Not Share".

Blocking technical cookies may prevent the Site, cart or checkout from working properly.

6. International data transfers

Some of our providers, including Shopify and Meta, process data outside the European Economic Area, in particular in the United States and Canada. When data is transferred outside the EEA or the UK, we rely on an adequacy decision (for example the EU-U.S. Data Privacy Framework and its UK extension for certified companies, or the EU adequacy decision for Canada) or on the European Commission's Standard Contractual Clauses and, for the UK, the International Data Transfer Addendum, together with any additional safeguards required. You can ask us for more information about these safeguards.

7. How long we keep your data

  • Orders, invoices and accounting records: 10 years from the date of the order, as required by Italian law.
  • Customer support messages: up to 24 months after the conversation ends, unless needed longer for a legal claim.
  • Email marketing data: until you unsubscribe or withdraw your consent; after that we keep only the minimum record needed to respect your choice.
  • Unfinished checkouts: for the period set by our platform, after which they are deleted.
  • Cookies: for the duration set by Shopify or by the relevant provider (for example, Meta).

8. How we protect your data

We use reputable providers with appropriate technical and organisational security measures, encrypted connections (HTTPS) and access controls. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data and will notify you and the authorities of a personal data breach where the law requires it.

9. Your rights

Wherever you live, you can ask us to:

  • confirm whether we hold your data and give you a copy (access);
  • correct inaccurate or incomplete data (rectification);
  • delete your data, unless we must keep it, for example for tax reasons (erasure);
  • restrict the use of your data in certain cases (restriction);
  • give you the data you provided in a structured, machine-readable format (portability);
  • stop using your data on the basis of our legitimate interests, including for advertising, and stop direct marketing at any time (objection);
  • withdraw any consent you have given, without affecting processing carried out before the withdrawal.

To exercise these rights, email info@nciglp.com. We may need to verify your identity before acting on a request. We reply within one month (extendable where the law allows), or within the shorter or different period required by your local law. Exercising your rights is free of charge.

You also have the right to lodge a complaint with a data protection authority (see Section 12). Our lead authority is the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it).

10. Children

Our Site and products are intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The current version is always published on this page with its "Last updated" date. If we make significant changes, we will give appropriate notice, for example by email or on the Site.

12. Additional information for your region

European Union / EEA

All of the above applies to you under the GDPR. You may lodge a complaint with the supervisory authority of your country of residence, place of work or place of the alleged infringement, or with the Italian Garante.

United Kingdom

You have the rights set out in Section 9 under the UK GDPR and the Data Protection Act 2018. You can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

United States

Depending on your state of residence (for example California, Colorado, Connecticut, Virginia and other states with consumer privacy laws), you may have the right to know what personal information we collect, use and disclose; to access, correct and delete it; to obtain a copy; and to opt out of "sharing" or "targeted advertising". In the last 12 months we have collected the categories described in Section 2 (identifiers, commercial information, internet or other electronic network activity information and, where you provide it, inferences limited to your product interests) for the purposes in Section 3, and disclosed them to the categories of recipients in Section 4. We do not sell personal information for money. Our use of the Meta Pixel may be considered "sharing" for cross-context behavioural advertising or "targeted advertising"; you can opt out by emailing info@nciglp.com with the subject "Do Not Share", and we honour Global Privacy Control (GPC) browser signals where our platform supports them. We do not knowingly sell or share the personal information of consumers under 16. We will not discriminate against you for exercising your rights. You may use an authorised agent to submit a request, and if we decline your request you may appeal by replying to our decision; if you are not satisfied with the outcome, you may contact your state Attorney General.

Canada

We process your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, on the basis of your consent, which you can withdraw subject to legal or contractual restrictions. Your information may be stored and processed outside Canada (including in Italy, the EU and the United States) and may be accessible to the courts and authorities of those countries. You can request access to and correction of your information, and you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Australia

We handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Your information may be disclosed to overseas recipients, mainly in Italy, the EU, Canada and the United States, as described in Sections 4 and 6. You can request access to and correction of your information, and if you are not satisfied with our response to a complaint you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

13. Contact

NCIGLP · Gabriele Stacul
Via San Lorenzo 80, 34077 Ronchi dei Legionari (GO), Italy
Email: info@nciglp.com
VAT: IT01265180313