Privacy policy

pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR")

Last updated: 16 October 2026

1. Data controller

The data controller is Aquacosmetics S.r.l., Via Elba 12, 20144 Milan, Italy, VAT IT03594130969 ("Aquacosmetics", "we" or "us"), owner of the Agarthi Scent Core brand and of this website.

For any question about how we process personal data, you can write to us at: privacy@aquacosmetics.com.

Our Data Protection Officer (DPO) is Barbara Loddo, who can be contacted at privacy@aquacosmetics.com.

2. What data we collect and why

a) Messages sent through the Contact form

When you write to us from the Contact page, we collect: type of contact (private customer or retailer), name, email address, phone number (optional) and the content of your message.

  • Purpose: to reply to your request.
  • Legal basis: steps taken at your request prior to entering into a contract or reply to your request (Art. 6(1)(b) GDPR) and our legitimate interest in managing the messages we receive (Art. 6(1)(f)).
  • Retention: 6 months from receipt of the message.

b) Product availability alert ("Notify me")

On product pages you can leave your email address to be notified when the fragrances become available.

  • Purpose: to notify you when products become available. We do not currently send newsletters or other promotional communications; if we do so in the future, it will only be with your specific consent and we will update this policy.
  • Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to us or via the link included in our emails.
  • Retention: 6 months from sign-up, unless you withdraw your consent earlier.

c) Browsing data and cookies

The website is built on the Shopify platform, which uses cookies and similar technologies:

  • technical cookies, necessary for the website to work (for example, to remember your chosen language or your cookie preferences). They do not require consent;
  • analytics and marketing cookies, used only if you accept them through the banner shown on your first visit. You can change your choice at any time by writing to us or by deleting cookies from your browser: on your next visit the banner will be shown again.

3. Third-party services used on the website

  • Shopify: the platform that hosts the website and manages the forms and customer data. Shopify processes data on our behalf as a data processor. For people in the European Union the provider is Shopify International Limited, a company incorporated in Ireland. Shopify's privacy policy is available at https://www.shopify.com/legal/privacy.
  • Maps on the Retailers page (OpenStreetMap): the map of points of sale loads its images from OpenStreetMap Foundation servers. To display them, your browser sends your IP address to those servers. Privacy policy: https://osmfoundation.org/wiki/Privacy_Policy.
  • Map library (Leaflet, delivered via cdnjs/Cloudflare): the map code is downloaded from cdnjs.cloudflare.com, which receives your IP address.
  • Google Maps: the "Get directions" link on the Retailers page opens Google Maps only if you click it. From that moment, Google's privacy policy applies.
  • Instagram and Facebook: the website only contains links to our profiles. No data is sent to Meta unless you click them.

4. Recipients of the data

Data may be processed by:

  • Aquacosmetics staff authorised to process it;
  • Shopify, the platform that hosts the website, appointed as data processor;
  • public authorities, where required by law.

Data is not sold or disclosed to the public.

5. Transfers outside the European Union

Some suppliers (for example Shopify) may also process data outside the European Union, for example in Canada or the United States. In these cases the transfer is based on an adequacy decision of the European Commission or on the standard contractual clauses approved by the Commission.

6. Your rights

At any time you can ask us to:

  • access your data and receive a copy;
  • correct or update it;
  • delete it;
  • restrict its processing;
  • object to processing based on legitimate interest;
  • receive your data in a readable format (portability);
  • withdraw your consent, without affecting processing already carried out.

To exercise your rights, write to privacy@aquacosmetics.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live.

7. Children

The website is not intended for children under 14, and we do not knowingly collect their data.

8. Changes

We may update this policy, for example when we activate online sales, which will initially be available in Italy only. The current version is always published on this page, together with the date of the last update.