— Legal
Privacy Policy
Last updated: July 2026
1. Introduction
This policy explains what personal data ALTO PROJECT collects when you visit this website or place an order, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the UK GDPR.
2. Data controller
ALTO PROJECT is the data controller for information collected via this site. For any privacy request, contact us at privacy@alto-project.example.
3. What we collect
- Contact form submissions: name, email, message.
- Order data (when purchases are enabled): billing / shipping details, order history.
- Newsletter opt-ins: email address only.
- Technical logs: IP address, user agent, timestamps — retained briefly for security.
4. How we use it
- To respond to enquiries and provide customer support.
- To process and dispatch orders you place.
- To send transactional email (order confirmations, shipping updates).
- To send marketing email only when you opt in — you can unsubscribe at any time.
5. Cookies & local storage
We use a small number of first-party keys:
alto-project-cookie-consent— remembers your cookie choice.- Session tokens if you sign in to the admin area (owner-only).
6. Third-party services
- Lovable Cloud (hosting, database, auth) — trust.lovable.dev.
- Payment and email providers are engaged only when relevant features are active.
7. Platform note
This site is hosted on Lovable Cloud. Platform-level security and compliance documentation is available at trust.lovable.dev.
8. Your GDPR rights
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate information.
- Erasure — ask us to delete your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection & restriction — object to or restrict certain processing.