Last updated: 24 September 2026

1. Data controller

The data controller is L’Antica Cascina S.r.l., Via Campo dei Fiori 2, 47122 Forlì (FC), Italy, VAT no. 01321920405. For privacy requests: info@fromago.it or +39 0543 722442.

2. Data we process

We process data provided while browsing, creating an account, making a purchase or contacting customer service: identification and contact data, billing and delivery addresses, order details, payment-related data and communications sent to us. Full payment data is handled by the respective payment providers and is not stored by this website.

3. Purposes and legal bases

• to manage registration, cart, orders, payments, delivery and customer support in order to perform the contract;
• to meet accounting, tax and legal obligations;
• to prevent fraud and protect the security of the website and transactions, on the basis of the controller’s legitimate interest;
• to send marketing communications only where consent is requested; consent may be withdrawn at any time.

4. Data recipients

Data may be processed, to the extent necessary, by providers acting on our behalf: hosting and technical infrastructure, email services, WooCommerce, BRT (Bartolini) and any other delivery carriers, Stripe and PayPal for payments. To organise and track delivery, we may share with BRT or the appointed carrier the recipient’s first and last name, address, postcode, town and province, telephone number, email address and only the order information needed for shipping. Full payment data is handled by the respective payment providers and is not stored by this website. We do not sell data.

5. Retention

Order, invoicing and delivery data contained in the relevant documentation are retained for the period required by civil, tax and accounting obligations. Requests received through forms, email, WhatsApp or customer support are retained only for the time needed to answer and manage them. Accounts remain active until the user asks for deletion; the request is handled within 14 days, with deletion or anonymisation of data not subject to retention obligations. Delivery data no longer needed and not included in documents we must retain by law are deleted within 14 days of the request. Data processed on the basis of consent are retained until consent is withdrawn or the purpose ceases.

6. Cookies, consent and third-party services

We use the consent panel for technical cookies and any non-essential services. You can change your preferences at any time through the manage-consent link. We retain a pseudonymised record of consent choices for 24 months; it contains no email address, IP address or user-agent. See the Cookie Policy for details.

7. Transfers outside the EEA

Some providers may process data outside the European Economic Area. In those cases, transfers take place subject to the safeguards required by applicable law, including standard contractual clauses where necessary.

8. Your rights

Where provided by law, you may request access, rectification, erasure, restriction, portability, objection to processing and withdrawal of consent. Use the privacy request page or write to info@fromago.it. You also have the right to lodge a complaint with the Italian Data Protection Authority.

9. Updates

This notice may be updated for legal, technical or organisational reasons. The date above indicates the latest revision.

10. Microsoft Clarity

With consent to the Statistics category, we use Microsoft Clarity to understand how the website is used and improve its navigation, content and functionality. Clarity may collect technical browser and device data, viewed pages and website interactions such as clicks, scrolling and mouse movements, and generate heatmaps and session recordings. It is activated only after consent; the legal basis is consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time through Manage consent. Microsoft Clarity retains recordings for 30 days; aggregated data and heatmaps may be retained for up to 9 months. Microsoft processes data under its Privacy Statement; transfers to the United States may take place subject to applicable safeguards.

11. TikTok Pixel

With consent to the Marketing category, we use TikTok Pixel to measure TikTok campaign effectiveness and understand, in aggregate, actions performed on the site, such as product views, add-to-cart, checkout start and purchase. The Pixel may collect technical browser and device data, IP address, cookies, pages and browsing events. We do not send names, email addresses, phone numbers or payment data through the Pixel. The legal basis is consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time through Manage consent. TikTok processes data under its Privacy Policy; transfers outside the EEA may take place subject to applicable safeguards.