How we process your personal data
This page explains which data we collect when you visit Feelago, create an account, buy something or write to us, why we use it, who we share it with and how you can exercise your rights, as required by Articles 13 and 14 of Regulation (EU) 2016/679 (the "GDPR").
Version of
Text under legal review
This version is complete but is still being checked by a legal professional, so it may change before the public launch. If you have any questions, write to info@feelago.com or use our contact form.
1.Controller and contact details
The controller is Feelago, which operates the Feelago website and apps. Its identification details are shown below and in the Legal notice.
For questions about your data or to exercise your rights, write to info@feelago.com. No data protection officer (DPO) has been appointed at present; if one is appointed, we will publish their contact details here.
- info@feelago.com
2.Who this notice is for
This notice covers:
- people who visit the website or use the Feelago apps;
- people who create an account, save projects, moodboards or room surveys, order samples or make a purchase;
- newsletter subscribers;
- people who write to customer service or use Ago, our AI-based assistant;
- clients of an interior designer, architect or studio that uses Feelago Pro (see the dedicated section).
Professionals who use Feelago Pro for their work will also find specific rules in the Pro service terms.
Back to contents3.What data we process
- Contact and account: name, email, phone number, delivery and billing addresses, preferred language.
- Sign-in: one-time codes sent by email or text message or, if you choose "Sign in with Google" on the website, Google's confirmation described in the next item; the date of your last activity on the account, with an indication of whether it took place on the website or in the app. We do not use passwords for customers.
- Sign-in with Google, only if you choose it: Google sends us your name, your email address with an indication that it is verified, an identifier of your Google account and, if you have set one, your profile picture. We use the email address to find or create your account, and the name only if the account does not already have one; we do not store the Google identifier or the profile picture. You can always sign in with the email code instead.
- Orders and projects: chosen products, measurements, fabrics and finishes, projects, rooms, surveys, moodboards and the photos you upload.
- Payments: outcome, amount, type of method used (for example card, PayPal, Klarna, Satispay, Scalapay, Revolut Pay or bank transfer) and summary details provided by Stripe, such as the card network and last four digits. For bank transfers, the name and details of the account the payment comes from are processed by Stripe to match it to your order and, where needed, to refund you. Full card numbers never pass through our systems and are not stored by us.
- Communications: messages exchanged with customer service and with Ago, the emails we send you and their technical status (delivered, bounced).
- Technical data: IP address and device and browser information, used for security and to prevent abuse, including by the anti-bot check that protects some forms (Cloudflare Turnstile); cookies and similar tools described in the Cookie policy.
- Usage statistics, only with your consent: pages visited, some actions on the website and in the apps (for example the configurator steps and adding to the cart), technical errors and page loading times, together with general information such as device type, operating system, browser, language, referring site, approximate location (country, region and city, which Cloudflare derives from the IP address) and whether you are browsing as a visitor, customer or professional. They are linked to a random session identifier, not to your name or your orders, and do not include your IP address (we only store the location) or anything you type into forms.
- Use of the Feelago Pro service, for professionals only: setup steps completed, date of last activity and use of features (for example quotes created, sent and paid), from which we derive account activation and health indicators.
- Acceptance of the Feelago Pro Terms, for professionals only: the account email, the accepted version with the fingerprint of the document, where you accepted them (application, Pro Area or subscription) and in which language, date and time of the acceptance and of the specific approval of the clauses, the device and browser used and a non-reversible fingerprint of the IP address (not the address itself).
- Signature of the Feelago Pro contract, only for professionals who signed it in the past (today the Feelago Pro Terms are accepted online, without a signature): first and last name and email of the signer, the image of the drawn signature (or of the typed name), date and time, the moment the code sent by email was verified, the device and browser used and a non-reversible fingerprint of the IP address (not the address itself), together with the signed PDF.
- Team of a Feelago Pro studio, only if a professional invites you to their studio's team: your email (and your name, if you already have a Feelago account), who invited you, the date and expiry of the invitation and whether you accepted it. If you join the team: the studio, your role, what you can see, the dates you joined and left, your confirmation that you work with your own personal account and, in the studio's data, what you created, follow or sent. The studio owner can see when you last used Feelago. Your email may be shown to the studio's clients as the reply-to address in emails about the quotes and appointments you follow, and as the organiser in calendar invitations for the appointments you schedule.
- Feelago Pro waiting list, only if you ask to join it: your email, your language and, if you enter them, your studio name and city, so we can let you know when applications to Feelago Pro open.
- Launch waiting list, only if you ask to join it: your email, your language and what you had chosen in the cart or quote, so we can let you know when Feelago opens for orders.
We do not ask for special categories of data (for example health data): please do not include them in messages or notes.
Data marked as mandatory in forms is needed to complete the order or provide the service you request: without it we cannot proceed. Everything else is optional.
Back to contents4.Why we process it, on what basis and for how long
For each purpose we state the legal basis (Article 6 GDPR) and the retention period. At the end of that period the data is deleted or anonymised.
- Purpose
- Creating and managing your account and sign-in with a code or, if you choose it, with Google
- Legal basis
- Performance of a contract or of pre-contractual measures taken at your request (Art. 6(1)(b))
- Retention
- As long as you keep the account or until you ask us to delete it
- Purpose
- Handling orders, payments, deliveries, returns and warranty claims
- Legal basis
- Performance of a contract (Art. 6(1)(b))
- Retention
- For the whole relationship; data needed to establish or defend legal claims up to 10 years after the order
- Purpose
- Keeping invoices, order documents and accounting records
- Legal basis
- Legal obligation (Art. 6(1)(c))
- Retention
- 10 years (Art. 2220 of the Italian Civil Code)
- Purpose
- Answering support requests by email, form or chat, including through Ago
- Legal basis
- Performance of a contract or pre-contractual steps (Art. 6(1)(b)); legitimate interest in replying to people who contact us (Art. 6(1)(f))
- Retention
- 24 months after the last message
- Purpose
- AI-powered advice: chatting with Ago and room photo analysis
- Legal basis
- Performance of your request (Art. 6(1)(b))
- Retention
- Chat: as for customer service. Photos sent for analysis are not stored by us: we process them and discard them
- Purpose
- Reviewing conversations with Ago and customer service to improve Ago's answers and the quality of our support
- Legal basis
- Legitimate interest in improving the service (Art. 6(1)(f)); you can object at any time
- Retention
- 24 months from the last message, like support requests
- Purpose
- Address suggestions while you type an address in our forms (checkout, account address book, Pro application and Pro studio profile); our staff also use them when entering or correcting an address to handle orders and shipments. Delivery address check when you continue to payment and, by our staff, before preparing the shipment, to avoid failed deliveries
- Legal basis
- Performance of your request and of the contract (Art. 6(1)(b)); for use by our staff, legitimate interest in having correct delivery addresses (Art. 6(1)(f))
- Retention
- We do not keep the text you type or the suggestions; the result of the check (including any proposed address) stays in the server's temporary memory for at most 24 hours, so the same request is not repeated, and is not stored permanently. Only the address you choose or confirm is kept, if you save it or complete the order
- Purpose
- Newsletter and promotional communications
- Legal basis
- Consent (Art. 6(1)(a)), confirmed with one click in the verification email
- Retention
- Until you withdraw it: you can unsubscribe from any email. If you do not confirm your sign-up, the verification link expires after 7 days and, unless you have already bought from the website, we delete your address from our newsletter contacts 30 days after the request
- Purpose
- Emails about products similar to ones you have already bought, only for purchases made on the site before 3 October 2026, when you could object immediately at the time of purchase
- Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR and Art. 130(4) of the Italian Privacy Code)
- Retention
- Until you object, which you can do in any email
- Purpose
- Reminders about an order you submitted but have not paid yet
- Legal basis
- Pre-contractual steps taken at your request (Art. 6.1.b) and legitimate interest in reminding you of an order you started (Art. 6.1.f)
- Retention
- Until the order is paid or cancelled; you can object using the link in every reminder
- Purpose
- Reminders about a saved cart or samples received
- Legal basis
- Consent or, if you are already a customer, legitimate interest as above
- Retention
- Until you withdraw consent or object
- Purpose
- Website and app usage statistics
- Legal basis
- Consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code)
- Retention
- Browsing events: 90 days. Aggregated, anonymous statistics derived from them: up to 25 months
- Purpose
- Technical monitoring and service improvement: anonymous counts of errors, of searches with no results, of requests rejected for exceeding limits, of app installs and opens (only the date of the last open stays on the device, key feelago_app_ping) and of sign-ups and orders by channel (website or app), without cookies or identifiers
- Legal basis
- Legitimate interest in keeping the website and apps working, secure and easy to use (Art. 6(1)(f))
- Retention
- Hourly counts: 35 days, then only anonymous daily totals for up to 25 months
- Purpose
- Security and prevention of fraud and abuse (request limits, technical logs)
- Legal basis
- Legitimate interest (Art. 6(1)(f))
- Retention
- Rate-limit records: 24 hours. Technical log of emails sent: 90 days
- Purpose
- Protecting some forms from automated programs (bots) with Cloudflare's anti-bot check (Turnstile): sign-in with a code, Pro application, sending a quote from the cart, the support form and chat, newsletter sign-up, launch waiting list and Feelago Pro waiting list
- Legal basis
- Legitimate interest in protecting the service and its users from abuse, spam and the automated sending of codes and messages (Art. 6(1)(f))
- Retention
- We do not keep the information collected for the check: our server only receives a single-use token, verifies it once with Cloudflare (together with your IP address) and discards it
- Purpose
- Feelago Pro professional accounts: application, subscription, commissions with Stripe Connect
- Legal basis
- Performance of a contract (Art. 6(1)(b)); legal obligations, including anti-money-laundering checks handled with Stripe (Art. 6(1)(c))
- Retention
- For the whole relationship; accounting data for 10 years
- Purpose
- Feelago Pro: activation and health indicators for the professional's account, to offer support and improve the service. Any action is assessed by a person and never decided automatically
- Legal basis
- Legitimate interest (Art. 6(1)(f)), with the right to object
- Retention
- Up to 24 months
- Purpose
- Feelago Pro: online acceptance of the Feelago Pro Terms (account email, accepted version and fingerprint of the document, where and in which language, date and time, device and a non-reversible fingerprint of the IP address), as proof of the acceptance
- Legal basis
- Performance of a contract (Art. 6(1)(b)); legitimate interest in keeping proof of the acceptance and defending our rights (Art. 6(1)(f))
- Retention
- For the whole relationship and up to 10 years after it ends, even if the account is deleted
- Purpose
- Feelago Pro: electronic signature of the contract, for professionals who signed it in the past (first and last name, email, image of the signature, date and time, verification of the code sent by email, device and a non-reversible fingerprint of the IP address) and storage of the signed PDF
- Legal basis
- Performance of a contract (Art. 6(1)(b)); legitimate interest in keeping proof of the agreement and defending our rights (Art. 6(1)(f))
- Retention
- For the whole relationship and up to 10 years after it ends, even if the account is deleted
- Purpose
- Feelago Pro: inviting you to a studio's team, if the studio owner invites you, and giving you access to the studio's data with your personal account (email invitation, joining, role, what you can see, leaving) and making sure that the studio's clients' replies about the quotes and appointments you follow reach you
- Legal basis
- Performance of the relationship with the studio that invites you and of the Feelago Pro Terms you accept when joining the team (Art. 6(1)(b)); for an invitation not yet accepted, the studio's and our legitimate interest in having you join the team (Art. 6(1)(f))
- Retention
- Accepted invitation: kept together with your team membership. Invitation not accepted (expired or withdrawn): until 30 days after it expires; then we delete it or make it anonymous. Team membership: as long as you are on the team and then, as the studio's history (who did what, dates of joining and leaving), for as long as the studio's relationship with Feelago lasts
- Purpose
- Defending our rights and responding to authorities
- Legal basis
- Legitimate interest (Art. 6(1)(f)) or legal obligation (Art. 6(1)(c))
- Retention
- For as long as the specific proceedings require
- Purpose
- Letting you know when applications to Feelago Pro open, if you join its waiting list
- Legal basis
- Your request: consent (Art. 6(1)(a)), which you give by leaving your email to be notified
- Retention
- Until we tell you applications have opened, and in any case no longer than 12 months. You can ask to be removed from the list at any time by writing to customer service
- Purpose
- Letting you know when Feelago opens for orders, if you join the launch waiting list
- Legal basis
- Your request: consent (Art. 6(1)(a)), which you give by leaving your email to be notified
- Retention
- Until we tell you we have opened, and in any case no longer than 12 months. You can ask to be removed from the list at any time by writing to customer service
| Purpose | Legal basis | Retention |
|---|---|---|
| Creating and managing your account and sign-in with a code or, if you choose it, with Google | Performance of a contract or of pre-contractual measures taken at your request (Art. 6(1)(b)) | As long as you keep the account or until you ask us to delete it |
| Handling orders, payments, deliveries, returns and warranty claims | Performance of a contract (Art. 6(1)(b)) | For the whole relationship; data needed to establish or defend legal claims up to 10 years after the order |
| Keeping invoices, order documents and accounting records | Legal obligation (Art. 6(1)(c)) | 10 years (Art. 2220 of the Italian Civil Code) |
| Answering support requests by email, form or chat, including through Ago | Performance of a contract or pre-contractual steps (Art. 6(1)(b)); legitimate interest in replying to people who contact us (Art. 6(1)(f)) | 24 months after the last message |
| AI-powered advice: chatting with Ago and room photo analysis | Performance of your request (Art. 6(1)(b)) | Chat: as for customer service. Photos sent for analysis are not stored by us: we process them and discard them |
| Reviewing conversations with Ago and customer service to improve Ago's answers and the quality of our support | Legitimate interest in improving the service (Art. 6(1)(f)); you can object at any time | 24 months from the last message, like support requests |
| Address suggestions while you type an address in our forms (checkout, account address book, Pro application and Pro studio profile); our staff also use them when entering or correcting an address to handle orders and shipments. Delivery address check when you continue to payment and, by our staff, before preparing the shipment, to avoid failed deliveries | Performance of your request and of the contract (Art. 6(1)(b)); for use by our staff, legitimate interest in having correct delivery addresses (Art. 6(1)(f)) | We do not keep the text you type or the suggestions; the result of the check (including any proposed address) stays in the server's temporary memory for at most 24 hours, so the same request is not repeated, and is not stored permanently. Only the address you choose or confirm is kept, if you save it or complete the order |
| Newsletter and promotional communications | Consent (Art. 6(1)(a)), confirmed with one click in the verification email | Until you withdraw it: you can unsubscribe from any email. If you do not confirm your sign-up, the verification link expires after 7 days and, unless you have already bought from the website, we delete your address from our newsletter contacts 30 days after the request |
| Emails about products similar to ones you have already bought, only for purchases made on the site before 3 October 2026, when you could object immediately at the time of purchase | Legitimate interest (Art. 6(1)(f) GDPR and Art. 130(4) of the Italian Privacy Code) | Until you object, which you can do in any email |
| Reminders about an order you submitted but have not paid yet | Pre-contractual steps taken at your request (Art. 6.1.b) and legitimate interest in reminding you of an order you started (Art. 6.1.f) | Until the order is paid or cancelled; you can object using the link in every reminder |
| Reminders about a saved cart or samples received | Consent or, if you are already a customer, legitimate interest as above | Until you withdraw consent or object |
| Website and app usage statistics | Consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code) | Browsing events: 90 days. Aggregated, anonymous statistics derived from them: up to 25 months |
| Technical monitoring and service improvement: anonymous counts of errors, of searches with no results, of requests rejected for exceeding limits, of app installs and opens (only the date of the last open stays on the device, key feelago_app_ping) and of sign-ups and orders by channel (website or app), without cookies or identifiers | Legitimate interest in keeping the website and apps working, secure and easy to use (Art. 6(1)(f)) | Hourly counts: 35 days, then only anonymous daily totals for up to 25 months |
| Security and prevention of fraud and abuse (request limits, technical logs) | Legitimate interest (Art. 6(1)(f)) | Rate-limit records: 24 hours. Technical log of emails sent: 90 days |
| Protecting some forms from automated programs (bots) with Cloudflare's anti-bot check (Turnstile): sign-in with a code, Pro application, sending a quote from the cart, the support form and chat, newsletter sign-up, launch waiting list and Feelago Pro waiting list | Legitimate interest in protecting the service and its users from abuse, spam and the automated sending of codes and messages (Art. 6(1)(f)) | We do not keep the information collected for the check: our server only receives a single-use token, verifies it once with Cloudflare (together with your IP address) and discards it |
| Feelago Pro professional accounts: application, subscription, commissions with Stripe Connect | Performance of a contract (Art. 6(1)(b)); legal obligations, including anti-money-laundering checks handled with Stripe (Art. 6(1)(c)) | For the whole relationship; accounting data for 10 years |
| Feelago Pro: activation and health indicators for the professional's account, to offer support and improve the service. Any action is assessed by a person and never decided automatically | Legitimate interest (Art. 6(1)(f)), with the right to object | Up to 24 months |
| Feelago Pro: online acceptance of the Feelago Pro Terms (account email, accepted version and fingerprint of the document, where and in which language, date and time, device and a non-reversible fingerprint of the IP address), as proof of the acceptance | Performance of a contract (Art. 6(1)(b)); legitimate interest in keeping proof of the acceptance and defending our rights (Art. 6(1)(f)) | For the whole relationship and up to 10 years after it ends, even if the account is deleted |
| Feelago Pro: electronic signature of the contract, for professionals who signed it in the past (first and last name, email, image of the signature, date and time, verification of the code sent by email, device and a non-reversible fingerprint of the IP address) and storage of the signed PDF | Performance of a contract (Art. 6(1)(b)); legitimate interest in keeping proof of the agreement and defending our rights (Art. 6(1)(f)) | For the whole relationship and up to 10 years after it ends, even if the account is deleted |
| Feelago Pro: inviting you to a studio's team, if the studio owner invites you, and giving you access to the studio's data with your personal account (email invitation, joining, role, what you can see, leaving) and making sure that the studio's clients' replies about the quotes and appointments you follow reach you | Performance of the relationship with the studio that invites you and of the Feelago Pro Terms you accept when joining the team (Art. 6(1)(b)); for an invitation not yet accepted, the studio's and our legitimate interest in having you join the team (Art. 6(1)(f)) | Accepted invitation: kept together with your team membership. Invitation not accepted (expired or withdrawn): until 30 days after it expires; then we delete it or make it anonymous. Team membership: as long as you are on the team and then, as the studio's history (who did what, dates of joining and leaving), for as long as the studio's relationship with Feelago lasts |
| Defending our rights and responding to authorities | Legitimate interest (Art. 6(1)(f)) or legal obligation (Art. 6(1)(c)) | For as long as the specific proceedings require |
| Letting you know when applications to Feelago Pro open, if you join its waiting list | Your request: consent (Art. 6(1)(a)), which you give by leaving your email to be notified | Until we tell you applications have opened, and in any case no longer than 12 months. You can ask to be removed from the list at any time by writing to customer service |
| Letting you know when Feelago opens for orders, if you join the launch waiting list | Your request: consent (Art. 6(1)(a)), which you give by leaving your email to be notified | Until we tell you we have opened, and in any case no longer than 12 months. You can ask to be removed from the list at any time by writing to customer service |
Technical monitoring works even without consent to statistics because it uses no cookies and does not record who you are: the server only counts how many times something happens (for example a given error code in a given hour), without IP addresses, identifiers or browsing paths. In the app, only the date of the last open stays on the device: it is used to count opens once a day, never to identify you.
If you are a professional using Feelago Pro, we derive some activation and health indicators for your account from the service data, to understand where to offer help and what to improve. They are not automated decisions: they do not suspend the account, change commissions or terms, delay payments or reject applications. You can object at any time by writing to info@feelago.com.
Back to contents5.Ago and our artificial intelligence tools
Ago is an assistant based on artificial intelligence, not a person: we say so in the chat too. It answers questions about products, measurements and orders. If you are signed in, it can read, without changing anything, a summary of your orders, returns and quotes to give you better answers. You can ask to speak to a person on our team at any time.
To generate its answers, your messages and, when you use the dedicated tool, photos of your rooms are sent to our artificial intelligence provider (Anthropic), which processes them on our behalf. Answers may contain inaccuracies: the prices, availability and terms that apply are always those shown on the site and in the order summary.
We may review conversations to improve Ago's answers and the quality of our support, on the basis of our legitimate interest (Article 6(1)(f) GDPR); conversations are kept for no longer than 24 months from the last message. You can object at any time: write to us and we will exclude yours.
We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).
Back to contents6.Who we share data with
We do not sell your data. We share it only with providers that help us deliver the service, appointed as processors (Article 28 GDPR), and with parties that process it as independent controllers: the provider of the payment method you choose, Google for address suggestions and checks and, if you choose it, for sign-in with your Google account, and the other parties listed in the table or required by law.
- Provider
- Render
- Service
- Hosting of the website, apps and database
- Where the data is processed
- European Union (Frankfurt, Germany); company based in the United States
- Provider
- Cloudflare
- Service
- Content delivery and traffic protection; for statistics, only with your consent, it tells us the approximate location of the visit (country, region and city). Anti-bot check on some forms (Turnstile): it receives your IP address and technical information about your browser and device, such as the user agent and some signals from the browsing environment, and returns only the result to us; it does not use advertising cookies and is not used to profile you. Cloudflare also uses this information as an independent controller, to improve its own bot detection
- Where the data is processed
- European Union and United States
- Provider
- Stripe
- Service
- Payments and fraud prevention; for professionals, Stripe Connect for commissions. For some processing (fraud prevention, regulatory obligations) Stripe acts as an independent controller
- Where the data is processed
- European Union and United States
- Provider
- PayPal, Klarna, Satispay, Scalapay and Revolut (Revolut Pay)
- Service
- Payment with the method you choose on the payment page, including the provider's own checks and, for Klarna and Scalapay, the assessment of your request to pay later or in instalments. They receive the necessary data only if you choose their method, and process it as independent controllers under their own privacy policies
- Where the data is processed
- As stated in each provider's privacy policy
- Provider
- Resend
- Service
- Sending emails
- Where the data is processed
- United States
- Provider
- Anthropic
- Service
- Artificial intelligence behind Ago and photo analysis
- Where the data is processed
- United States
- Provider
- Google (Google Ireland Limited and Google LLC)
- Service
- Address suggestions and checks (Google Maps Platform: Places API and Address Validation API). For suggestions it receives the characters you type in the address field and the selected country and language, and returns matching addresses. For checks it receives the full delivery address (street and house number, postal code, city, province or state and country) when you continue to payment, and when our staff check it before preparing the shipment; it returns the address as it knows it, with any corrections. Requests are sent from our servers: Google does not receive your name, your email, your phone number, the second address line (apartment, floor, c/o) or your IP address. It processes this data as an independent controller, under its own privacy policy
- Where the data is processed
- European Union and United States
- Provider
- Google (Sign in with Google)
- Service
- Sign-in with your Google account, only on the website and only if you tap the "Sign in with Google" button on the sign-in pages or in the sign-in box at checkout. The button is our own: until you tap it, Google receives nothing. Tapping it takes you to Google's page, which receives your IP address and technical information about your browser; there you choose the account, and Google sends us your name, verified email address, an identifier of your Google account and, if there is one, your profile picture. Google processes this data as an independent controller, under its own privacy policy
- Where the data is processed
- European Union and United States
- Provider
- Packlink and couriers
- Service
- Shipping labels, collection and delivery
- Where the data is processed
- European Union and, for shipments outside the EU, the destination country
- Provider
- Twilio
- Service
- Sending sign-in codes by text message, when you choose your phone
- Where the data is processed
- United States
- Provider
- Advisers and banks
- Service
- Accounting, tax and legal obligations, payments and refunds
- Where the data is processed
- Italy and European Union
| Provider | Service | Where the data is processed |
|---|---|---|
| Render | Hosting of the website, apps and database | European Union (Frankfurt, Germany); company based in the United States |
| Cloudflare | Content delivery and traffic protection; for statistics, only with your consent, it tells us the approximate location of the visit (country, region and city). Anti-bot check on some forms (Turnstile): it receives your IP address and technical information about your browser and device, such as the user agent and some signals from the browsing environment, and returns only the result to us; it does not use advertising cookies and is not used to profile you. Cloudflare also uses this information as an independent controller, to improve its own bot detection | European Union and United States |
| Stripe | Payments and fraud prevention; for professionals, Stripe Connect for commissions. For some processing (fraud prevention, regulatory obligations) Stripe acts as an independent controller | European Union and United States |
| PayPal, Klarna, Satispay, Scalapay and Revolut (Revolut Pay) | Payment with the method you choose on the payment page, including the provider's own checks and, for Klarna and Scalapay, the assessment of your request to pay later or in instalments. They receive the necessary data only if you choose their method, and process it as independent controllers under their own privacy policies | As stated in each provider's privacy policy |
| Resend | Sending emails | United States |
| Anthropic | Artificial intelligence behind Ago and photo analysis | United States |
| Google (Google Ireland Limited and Google LLC) | Address suggestions and checks (Google Maps Platform: Places API and Address Validation API). For suggestions it receives the characters you type in the address field and the selected country and language, and returns matching addresses. For checks it receives the full delivery address (street and house number, postal code, city, province or state and country) when you continue to payment, and when our staff check it before preparing the shipment; it returns the address as it knows it, with any corrections. Requests are sent from our servers: Google does not receive your name, your email, your phone number, the second address line (apartment, floor, c/o) or your IP address. It processes this data as an independent controller, under its own privacy policy | European Union and United States |
| Google (Sign in with Google) | Sign-in with your Google account, only on the website and only if you tap the "Sign in with Google" button on the sign-in pages or in the sign-in box at checkout. The button is our own: until you tap it, Google receives nothing. Tapping it takes you to Google's page, which receives your IP address and technical information about your browser; there you choose the account, and Google sends us your name, verified email address, an identifier of your Google account and, if there is one, your profile picture. Google processes this data as an independent controller, under its own privacy policy | European Union and United States |
| Packlink and couriers | Shipping labels, collection and delivery | European Union and, for shipments outside the EU, the destination country |
| Twilio | Sending sign-in codes by text message, when you choose your phone | United States |
| Advisers and banks | Accounting, tax and legal obligations, payments and refunds | Italy and European Union |
For address suggestions and checks Google processes data as an independent controller: how it uses the data is explained in the Google Privacy Policy. Use of Google Maps features is also subject to the Google Maps/Google Earth Additional Terms of Service.
If you choose "Sign in with Google", Google processes the data of your Google account and of the sign-in as an independent controller: how it uses the data is explained in the Google Privacy Policy. You can disconnect Feelago at any time in your Google account settings: your Feelago account remains and you can always sign in with the email code. For the anti-bot check, how Cloudflare processes data is explained in Cloudflare's Turnstile privacy addendum.
If you are on the team of a Feelago Pro studio, the studio that invited you also sees the data about you and your email may be shown to its clients, as explained in the item "Team of a Feelago Pro studio" under "What data we process".
We disclose data to public authorities only when the law requires it. Feelago staff access data only as far as their work requires.
Back to contents7.Transfers outside the European Economic Area
The website and database are hosted in the European Union, in Render's data centres in Frankfurt (Germany). Render is a company based in the United States: any access to the data from the United States takes place with the safeguards required by the GDPR (for example the European Commission's standard contractual clauses). Some of the other providers listed above also process data in the United States. Independent controllers, such as the payment providers (PayPal, Klarna, Satispay, Scalapay and Revolut) and Google for address suggestions and checks and for sign-in with Google, handle any transfers outside the European Economic Area under their own privacy policies.
These transfers rely on the European Commission's adequacy decision for providers certified under the EU-U.S. Data Privacy Framework, or on the standard contractual clauses approved by the Commission, together with any necessary supplementary measures. You can ask us for information or a copy of the safeguards in place by writing to info@feelago.com.
Back to contents8.If you are a client of a professional who uses Feelago
Interior designers, architects and studios can use Feelago Pro to prepare quotes, moodboards, room surveys and appointments for their clients, including under their own brand.
For the data a professional collects and manages in their tools (contact details, appointments, notes, surveys), the professional is the controller and Feelago processes that data on their behalf as a processor. Within the studio, the team members authorised by the professional can also access your data, each with their own personal account. To exercise your rights, please contact the professional first; if you write to us, we will forward your request to them.
When you buy Feelago products through a professional's quote, the controller for the order, payment and delivery is Feelago, as for any other purchase.
If you arrive from a professional's invitation link and order fabric samples, we tell them that samples were ordered from their link: the project, the date and the fabrics chosen. We do not share your name, contact details, address or the amount paid. We do this on the basis of our legitimate interest in completing the journey the professional suggested to you; a technical cookie remembers the invitation for 7 days.
Back to contents9.Your rights
At any time you can exercise the rights set out in Articles 15 to 22 GDPR:
- access your data and receive information about how it is processed;
- have inaccurate data corrected and incomplete data completed;
- have your data erased, in the cases provided for by law;
- restrict processing;
- receive the data you gave us in a structured, machine-readable format (portability);
- object to processing based on legitimate interest and, at any time and without giving reasons, to direct marketing, including for specific channels only;
- withdraw your consent, without affecting processing carried out before the withdrawal;
- lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) or with the authority of the country where you live or work.
To exercise them, write to info@feelago.com or use our contact form. We reply without undue delay and in any case within one month, which may be extended by two months for complex requests, in which case we will let you know. We may ask for some information to verify your identity.
If you ask us to delete your account, some data (for example invoices and order documents) is kept for the period required by law.
Back to contents10.Minors
Feelago is intended for adults: you must be at least 18 to make a purchase. We do not knowingly collect data from children under 14, the minimum age in Italy for consenting to online services on one's own (Article 2-quinquies of the Italian Privacy Code).
Back to contents11.How we protect data
We use encrypted connections (HTTPS), sign-in with one-time codes (or, if you choose it, with Google) instead of passwords, an anti-bot check on the forms most exposed to abuse, signed sessions that we can revoke, hard-to-guess personal links for order and quote pages, access limited to authorised staff and backups. No system is infallible: if a breach affecting you occurs, we will inform you in the cases and within the time limits set by law.
Back to contents13.Changes to this notice
We update this notice when our services or the law change. The date of the current version is shown at the top; if the changes are significant, we will let you know on the site or by email.
Back to contents