Privacy policy
Last updated: 9 October 2026
This Privacy Policy explains how KANIZ DI MUSHTAQ IBRAHEEM BIN MUSHTAQ, trading as KANIZ ("KANIZ", "we", "us"), collects, uses and discloses your personal information when you visit kanizstudio.com, make a purchase, subscribe to our letters or otherwise contact us (the "Services"). Our store is powered by Shopify. Please read this policy carefully.
Data controller
The data controller is KANIZ DI MUSHTAQ IBRAHEEM BIN MUSHTAQ, Ditta Individuale, Partita IVA 03055310183, Via Bianca Maria Visconti 14, 27100 Pavia (PV), Italy. Email: kaniz.pashmina@gmail.com. Telephone: +39 334 3858781.
Personal information we collect
- Contact details, such as your name, billing and shipping address, telephone number and email address.
- Order and payment information, such as the items you buy, return or cancel, transaction details and payment confirmation. Card details are handled by our payment provider; we never see or store your full card number.
- Account information, if you create an account, such as your login details and preferences.
- Communications, such as the content of messages you send us, including enquiries about a piece.
- Device and usage information, such as your IP address, browser, device and how you use the Services, collected through cookies and similar technologies.
How we use it, and our legal bases
- To process and deliver your order, handle payments, returns and customer care — necessary to perform our contract with you (Art. 6(1)(b) GDPR).
- To meet legal obligations, such as keeping accounting and tax records — legal obligation (Art. 6(1)(c) GDPR).
- To send our newsletter, "Letters from KANIZ", only if you subscribe — your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email.
- To keep the Services secure and prevent fraud, and to understand and improve how the Services are used — our legitimate interests (Art. 6(1)(f) GDPR), balanced against your rights.
- Analytics and marketing cookies are used only where you have given consent through our cookie banner; you can change your choice at any time.
Who we share it with
We share personal information only as needed with service providers who act on our behalf, including Shopify (hosting and e-commerce platform), payment processors, and shipping carriers that deliver your order. We may also disclose information when required by law, or to protect our rights, our customers or others. We do not sell your personal information.
Shopify
The Services are hosted by Shopify, which processes personal information to provide and improve the Services. To learn more about how Shopify uses personal information, see the Shopify Consumer Privacy Policy; you can exercise certain rights directly with Shopify through the Shopify Privacy Portal.
International transfers
Some of our providers, including Shopify, may process information outside the European Economic Area. Where this happens, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
How long we keep it
- Order, invoice and accounting records: ten years, as required by Italian law (Art. 2220 of the Civil Code).
- Newsletter subscription: until you unsubscribe.
- Customer-care messages: for as long as needed to answer you and handle any follow-up, then deleted unless the law requires otherwise.
- Account information: until you close your account.
Your rights
Under the GDPR you have the right to access your personal information, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing. To exercise these rights, write to kaniz.pashmina@gmail.com. We may need to verify your identity before acting on a request, and we will reply within the time limits set by law.
You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it); you may also contact the authority of the EU country where you live or work.
Children
The Services are not intended for children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, please contact us and we will delete it.
Security
We use the security measures provided by Shopify and our service providers to protect your information. No method of transmission or storage is completely secure, so please avoid sending sensitive information by unprotected channels.
Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page with its date.
Contact
For any question about this policy or your personal information, contact KANIZ DI MUSHTAQ IBRAHEEM BIN MUSHTAQ, Via Bianca Maria Visconti 14, 27100 Pavia (PV), Italy — kaniz.pashmina@gmail.com — +39 334 3858781.