Privacy policy

Privacy Policy

Last updated: August 27, 2026

Drop It SRLS, trading as Drop It Motorsport, operates the website dropit-shop.com and the related online store, services, content, features, tools and customer accounts.

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit or use our website, create an account, place an order, subscribe to our newsletter, contact us or otherwise interact with our services.

For the purposes of applicable data protection legislation, including Regulation (EU) 2016/679, also known as the General Data Protection Regulation or GDPR, Drop It SRLS is the data controller unless otherwise stated.

1. Data Controller

The data controller is:

Drop It SRLS
Trading as Drop It Motorsport
Via Cavour 147
10091 Alpignano (TO)
Italy

Email: info@dropit-shop.com
WhatsApp: +39 378 068 8381 ( only message )

2. Personal Information We Collect

Depending on how you interact with our services, we may collect and process different categories of personal information.

Contact and identification information may include your name, surname, billing address, delivery address, email address and telephone number.

Order and transaction information may include the products viewed or purchased, order details, amounts paid, selected payment method, delivery details, returns, refunds, cancellations and previous transactions.

Customer account information may include your login details, account preferences, saved addresses and order history. Passwords are processed through Shopify’s secure account systems and are not visible to Drop It Motorsport.

Payment information may include payment confirmation, transaction identifiers, payment status, the selected payment method and limited payment details made available by the payment provider.

Complete credit or debit card details are processed directly by Shopify Payments and its payment partners and are not stored directly by Drop It Motorsport. Payments made through PayPal are processed by PayPal according to its own terms and privacy policy.

Communication information may include the content of emails, contact forms, WhatsApp messages and other communications sent to us, together with any photographs, vehicle information, registration documents or technical information voluntarily provided for customer support or product compatibility checks.

Technical and usage information may include your IP address, browser type, device type, operating system, network information, pages visited, products viewed, interactions with the website, referring pages, session information and cookie identifiers.

Marketing information may include your newsletter subscription status, communication preferences, advertising interactions and consent choices.

We ask customers not to send personal information that is unnecessary for the requested assistance. Where a vehicle registration document or similar document is required for a compatibility or warranty check, customers should hide information that is not relevant whenever reasonably possible.

3. How We Collect Personal Information

We collect personal information directly from you when you place an order, create a customer account, subscribe to our newsletter, contact us, request support, submit a return request or otherwise provide information to us.

We also collect certain information automatically through Shopify, cookies and similar technologies when you visit or interact with the website.

We may receive information from service providers involved in processing payments, preventing fraud, managing the website, measuring website performance, delivering advertising, fulfilling orders or completing deliveries.

4. Purposes and Legal Bases for Processing

We process personal information only where an appropriate legal basis applies.

We process contact details, order information, payment confirmation and delivery information when necessary to take steps at your request, conclude and perform the purchase contract, process payment, prepare and ship the order, provide order updates, manage returns and refunds and provide customer assistance. The legal basis is the performance of a contract or the taking of pre-contractual steps at your request under Article 6(1)(b) GDPR.

We process order, payment, accounting and invoicing information when necessary to comply with tax, accounting, consumer protection and other legal obligations. The legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR.

We process information relating to product compatibility, technical support, warranty requests, complaints and disputes to provide assistance, perform our contractual obligations and protect our legal rights. The legal basis is the performance of a contract under Article 6(1)(b) GDPR and, where applicable, our legitimate interest in managing customer relationships and defending legal claims under Article 6(1)(f) GDPR.

We process account information to create and manage customer accounts, allow customers to access order history and provide account-related features. The legal basis is the performance of a contract or services requested by the customer under Article 6(1)(b) GDPR.

We process personal information for fraud prevention, payment security, website protection and the detection of unlawful or malicious activity. The legal basis is our legitimate interest in protecting our business, customers, systems and transactions under Article 6(1)(f) GDPR and, where applicable, compliance with legal obligations under Article 6(1)(c) GDPR.

We send newsletters and promotional emails only where we have obtained valid consent or where another lawful basis specifically permitted by applicable law applies. The primary legal basis is consent under Article 6(1)(a) GDPR. Consent can be withdrawn at any time using the unsubscribe link contained in each marketing email.

We use non-essential analytics, advertising and profiling technologies only after obtaining the user’s consent where required by law. The legal basis is consent under Article 6(1)(a) GDPR. Consent can be changed or withdrawn at any time through the Cookie Preferences link available in the website footer.

We may process information necessary to establish, exercise or defend legal claims and to respond to valid requests from courts, public authorities or law enforcement bodies. The legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR or our legitimate interest in protecting our rights under Article 6(1)(f) GDPR.

5. Shopify

Our online store is hosted and operated using Shopify.

Shopify processes personal information required to provide the website, checkout, customer accounts, order management, payment integration, security, fraud prevention, analytics and other e-commerce functions.

Shopify generally processes this information on our behalf as a service provider or data processor. For certain activities, Shopify may act as an independent data controller according to its own privacy documentation.

Information submitted through our website may be transmitted to Shopify and its authorised service providers, which may operate in countries outside the country in which you live.

More information about Shopify’s processing of customer data is available at:

https://privacy.shopify.com/en

6. Payments

Card payments are processed through Shopify Payments and its authorised payment partners. Drop It Motorsport does not directly store complete payment card numbers or card security codes.

Where PayPal is selected, the payment is processed by PayPal. PayPal may collect and process personal information as an independent data controller according to its own privacy policy.

PayPal’s privacy information is available at:

https://www.paypal.com/privacy-center

Payment providers may use personal information for payment processing, transaction verification, fraud prevention, regulatory compliance, dispute management and security.

7. Order Fulfilment and Delivery

To prepare and deliver orders, we may share the information strictly necessary for fulfilment with couriers, postal operators, logistics providers, warehouses, suppliers or manufacturers involved in processing or shipping the order.

The information shared may include the customer’s name, delivery address, telephone number, email address, order reference and the products required to fulfil the order.

Where an order is shipped directly by a supplier or manufacturer, only the information reasonably necessary to fulfil and deliver that order will be shared.

These parties process personal information according to their contractual obligations and applicable privacy legislation.

8. Google Analytics, Google Ads and Merchant Center

Subject to your cookie and consent choices, we use Google Analytics to understand how visitors interact with our website and to produce statistics concerning traffic, website performance, product views and customer journeys.

We use Google Ads to advertise our products, measure advertising performance and, where consent has been provided, create advertising audiences or display advertisements based on previous interactions with our website.

Google Merchant Center is used to provide Google with information about our products and online store. It may also interact with Google advertising and conversion measurement services.

Depending on the settings used and the consent provided, Google may process information such as cookie identifiers, IP address, device information, browser information, pages visited, products viewed, advertising interactions and conversion events.

Non-essential Google technologies are activated only where the user has provided the required consent.

More information about how Google processes personal information is available at:

https://policies.google.com/privacy

9. Meta Pixel and Meta Advertising

Subject to your cookie and consent choices, we use the Meta Pixel and related Meta advertising services for Facebook and Instagram.

These services help us measure advertising performance, understand whether advertisements lead to visits or purchases and, where consent has been provided, create advertising audiences or show advertisements based on previous interactions with our website.

Meta may process information such as cookie identifiers, device information, IP address, pages visited, products viewed, advertising interactions and conversion events.

Non-essential Meta technologies are activated only where the user has provided the required consent.

Meta may process certain information as an independent data controller according to its own privacy policy, available at:

https://www.facebook.com/privacy/policy/

10. Newsletter and Marketing Communications

Customers may voluntarily subscribe to the Drop It Motorsport newsletter.

Our newsletters are managed through Shopify Email. Shopify processes the email address, subscription status and information required to deliver and measure the communication.

We may use newsletter interaction information, such as delivery, opening or link interaction data, where permitted by law and subject to the user’s consent choices.

You may withdraw your consent and unsubscribe at any time by selecting the unsubscribe link included in each promotional email.

Unsubscribing from marketing communications does not prevent us from sending non-promotional messages required to manage orders, payments, deliveries, returns, security or customer accounts.

11. WhatsApp Communications

Customers may choose to contact us through WhatsApp.

When you use WhatsApp, your telephone number, profile information and message content are also processed by WhatsApp and Meta according to their own terms and privacy policies.

WhatsApp should not be used to send passwords, payment card details or other unnecessary sensitive information.

Where appropriate, we may ask customers to continue a conversation by email to ensure better identification, security or management of the request.

WhatsApp’s privacy information for users in the European Economic Area is available at:

https://www.whatsapp.com/legal/privacy-policy-eea

12. Cookies and Similar Technologies

We use cookies and similar technologies that are necessary for the operation of the website, checkout, shopping cart, customer account, security, language selection and other requested services.

Necessary cookies are used without requiring consent where permitted by law.

Analytics, advertising, personalisation and profiling cookies are used only after obtaining consent where required.

You can accept, refuse or change your choices at any time through the Cookie Preferences link available in the website footer.

The Cookie Preferences panel provides more information about the categories of cookies used, their providers, purposes and duration.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

13. Disclosure of Personal Information

We may disclose personal information to Shopify and its authorised service providers for hosting, checkout, order processing, customer accounts, email delivery, security and related services.

We may disclose personal information to Shopify Payments, PayPal and other authorised payment partners for payment processing, payment verification, fraud prevention and dispute management.

We may disclose the information necessary to fulfil an order to couriers, postal operators, logistics providers, suppliers, manufacturers and warehouses.

Subject to your consent choices, information may be processed by Google and Meta for analytics, conversion measurement and advertising.

We may disclose information to accountants, legal advisers, insurers, IT providers and other professional service providers where necessary for legitimate business, legal or security purposes.

We may disclose information to public authorities, courts, law enforcement bodies or other authorised parties where required by law or necessary to establish, exercise or defend legal claims.

We do not sell personal information in the ordinary meaning of the term.

14. International Data Transfers

Some service providers, including Shopify, Google, Meta and PayPal, may process personal information outside the European Economic Area.

Where personal information is transferred to a country that has not been recognised as providing an adequate level of protection, the transfer will be based on safeguards permitted by applicable law, such as the European Commission’s Standard Contractual Clauses, or another valid transfer mechanism.

Service providers may also rely on adequacy decisions or other legally recognised safeguards where applicable.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy and to comply with legal obligations.

Order, invoicing, payment and accounting records are generally retained for up to 10 years, or for a longer period where required by law or necessary in connection with a legal dispute.

Customer account information is retained while the account remains active. If an account is closed, information that is not subject to legal retention obligations will normally be deleted or anonymised within 24 months. Order and accounting records may continue to be retained for the legally required period.

Customer service communications, technical support requests and WhatsApp messages are generally retained for up to 24 months after the request is closed. They may be retained for longer where necessary for a warranty request, contractual matter, safety issue, complaint, dispute or legal claim.

Information relating to security, fraud prevention and technical logs is generally retained for up to 12 months, unless a longer period is required to investigate suspicious activity, protect our systems or comply with a legal obligation.

Newsletter information is retained until consent is withdrawn or for a maximum of 24 months after the customer’s last meaningful interaction with our marketing communications. After an unsubscribe request, we may retain limited information on a suppression list to ensure that further promotional communications are not sent.

Records demonstrating the collection or withdrawal of consent may be retained for up to five years where necessary to demonstrate compliance with applicable law.

Cookie information is retained for the periods shown in the Cookie Preferences panel. Data processed by Google, Meta, Shopify, PayPal and other independent providers may be retained according to their respective privacy policies and settings.

Where personal information is required to establish, exercise or defend a legal claim, it may be retained until the applicable limitation period has expired or the relevant proceedings have ended.

At the end of the applicable retention period, personal information will be deleted, anonymised or otherwise securely disposed of.

16. Security

We use appropriate technical and organisational measures intended to protect personal information against unauthorised access, unlawful processing, accidental loss, alteration, disclosure or destruction.

The website and checkout are provided through Shopify’s secure infrastructure.

However, no method of electronic transmission or storage is completely secure. Customers should not send passwords, complete payment card details or unnecessary sensitive information through email, WhatsApp or other unprotected communication channels.

17. Automated Decision-Making and Profiling

We do not use personal information to make decisions based solely on automated processing that produce legal effects or similarly significant effects for customers.

Subject to your consent, Shopify, Google and Meta technologies may be used to analyse website interactions, measure advertising performance, personalise content or create advertising audiences.

You may withdraw consent to these activities at any time through the Cookie Preferences link available in the website footer.

18. Children’s Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under that age.

If you are a parent or legal guardian and believe that a child has provided personal information to us, please contact us so that we can assess and, where appropriate, delete the information.

19. Your Data Protection Rights

Subject to the conditions and limitations established by applicable law, you may request access to the personal information we hold about you.

You may request the correction of inaccurate or incomplete personal information.

You may request the deletion of personal information where there is no longer a lawful reason for us to retain it.

You may request restriction of processing in the circumstances provided by law.

You may request to receive personal information you provided to us in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller.

You may object to processing based on legitimate interests, including direct marketing.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You may exercise these rights by contacting us at info@dropit-shop.com.

We may need to verify your identity before completing a request. We will respond within the time limits established by applicable data protection law.

20. Right to Lodge a Complaint

If you believe that the processing of your personal information infringes applicable data protection law, you may contact us at info@dropit-shop.com.

You also have the right to lodge a complaint with the competent supervisory authority.

For Italy, the supervisory authority is:

Garante per la protezione dei dati personali
Piazza Venezia 11
00187 Rome
Italy

Website:

https://www.garanteprivacy.it

If you live in another European Economic Area country, you may also contact the data protection authority responsible for your place of residence.

21. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy, security, accuracy or content of third-party websites. We recommend reviewing the privacy policies of any third-party website or service before providing personal information.

22. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, providers, technology, legal obligations or data processing practices.

The updated version will be published on this page and the “Last updated” date will be amended accordingly.

Where required by law, we will provide additional notice or request renewed consent.

23. Contact

For questions about this Privacy Policy, the processing of your personal information or the exercise of your rights, please contact: