Updated: 13 September 2026
Here you can find out how we process data when you browse, make a purchase or ask Tailor Taste for advice.
1. Controller and contact details
The data controller is Natura Dolce di Alberigo Grassi, VAT no. 02948830423, with registered office at Via Meucci 62/64, 60020 Camerata Picena (AN), Italy, operating the Tailor Taste website.
For information about your data and to exercise your rights: info@tailortaste.it.
2. Data and processing purposes
- Browsing and security: IP address, server requests, device and browser information, technical and access events. These are used to make the website available, prevent misuse and resolve issues, on the basis of our legitimate interest in the security and operation of the service (Art. 6(1)(f) GDPR).
- Accounts and purchases: name, contact details, protected credentials, billing and delivery addresses, tax data where required, order contents and status, and transaction references. These are necessary to manage the contract and requested pre-contractual measures (Art. 6(1)(b) GDPR); invoicing and other obligations follow legal requirements (Art. 6(1)(c) GDPR).
- Contact and support: name, email address, subject and messages you send through forms or email. We use them to reply and follow up on the request, including one relating to an order or quotation (Art. 6(1)(b) GDPR); for general correspondence, on the basis of our legitimate interest in following up on received communications (Art. 6(1)(f) GDPR).
- Offers and promotions: we use email for Tailor Taste marketing communications only with your optional, separate consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to us, without consequences for purchases or support and without affecting the lawfulness of processing before withdrawal.
3. Your conversation with Tally
Tally is Tailor Taste’s virtual concierge and uses OpenAI artificial intelligence to answer your requests, suggest products and propose pairings. When you send a message, the text and conversation context are processed by the artificial-intelligence service. Conversations and replies are stored in our system and may be viewed by authorised staff to ensure continuity of support.
You can chat without providing your name and email address. If you would like to be contacted again, the dedicated form collects those contact details and records the request in the management system; a notification is sent to the business mailbox. Contact details entered in that form are not sent to the artificial-intelligence engine. Any data written directly in messages is instead part of the processed conversation.
Processing is used to provide the support you request (Art. 6(1)(b) GDPR). Consent to promotions is separate and is not required to use Tally. Advice is indicative, may contain inaccuracies and does not determine decisions based solely on automated processing with legal or similarly significant effects. You may always contact our team; product information is authoritative for ingredients and allergens, and should be checked with us before purchase if you have any doubts.
4. Required and optional data
Data marked as mandatory in forms are needed for the requested service: without a delivery address we cannot ship, and without contact details we cannot reply by email. Browsing, Tally suggestions and purchases do not require consent to promotions. We do not ask for health data or other special categories of data to use these services.
5. Who may receive data
Data may be accessed by authorised staff and suppliers supporting hosting, email, maintenance, security and website support. For purchases, they may be disclosed to couriers, payment providers actually used and accounting advisers, to the extent necessary for their tasks. Suppliers act as processors or, where provided for by the service performed, as independent controllers. Data are not published or sold.
The website infrastructure uses one.com; security services include Wordfence. Messages sent to Tally are processed through OpenAI. Fonts are loaded from Google Fonts: the browser sends Google the technical data necessary for the request, including the IP address. Links to WhatsApp and social media open external services only when you select them, and their respective privacy notices apply.
For external services you can consult the privacy notices of one.com, Wordfence, OpenAI and Google. You may ask us for updated information about suppliers involved in processing your data.
6. Processing outside the European Economic Area
Some international suppliers, including OpenAI and Google, may process data outside the European Economic Area, including in the United States. Their respective notices describe the countries and transfer mechanisms used, such as adequacy decisions and standard contractual clauses, where applicable. For information about safeguards relating to processing concerning you and to obtain a copy, you may contact us at the address above.
7. How long we retain data
- Orders, invoices and accounting records: for the retention periods required by law, normally ten years for accounting documentation, and longer if required by ongoing obligations or disputes.
- Accounts: for the duration of the customer relationship, without prejudice to retention of order data required by law even if the account is closed.
- Tally requests and conversations: for the time needed to manage and document the request and any follow-up, taking account of the nature of support, warranties and related disputes. Closing the chat window does not delete server-side history; you may request its deletion by writing to us, subject to applicable obligations.
- Promotions: until consent is withdrawn or the purpose ceases. Evidence of consent or withdrawal may be retained to document the correctness of processing and respect your choice.
- Technical and security data: for the period needed to diagnose anomalies, prevent misuse and investigate incidents; an event under investigation may require further retention. The durations of data stored in the browser are described in the Cookie Policy.
8. Your rights
In the cases provided for by the GDPR, you may request access, rectification, erasure, restriction and portability of data. You may object to processing based on legitimate interest for reasons related to your situation and, at any time, to direct marketing. You may withdraw consent where processing is based on it.
Write to info@tailortaste.it stating your request. We may verify your identity proportionately. We normally reply within one month, subject to any reasoned extensions provided by law. You may lodge a complaint with the Italian Data Protection Authority or the supervisory authority competent for your habitual residence, workplace or alleged infringement.
9. Cookies and updates
For cookies, browser storage and related services, see the Cookie Policy. This notice is updated when services or processing methods change; the update date is shown on this page.
