Last updated: 01/12/2026
This Privacy Policy primarily applies to personal data collected from business contacts acting on behalf of legal entities.
1. Who We Are
This website is operated by Shenzhen Citaly Technology Co., Ltd., a company incorporated under the laws of Italy, acting as the data controller.
Website: [www.citaly.com]
Contact email: support@citaly.com
We are committed to protecting your privacy and handling your personal data in a transparent and responsible manner.
2. Personal Data We Collect
We collect different types of personal data depending on how you interact with our website.
2.1 Data You Provide Directly
When you create an account, submit a business inquiry, or engage in commercial communications with us, we may collect:
- Name
- Email address
- Shipping and billing address
- Account login information
- Order and transaction information
We do not store full payment card details. Payments are processed by third-party payment providers.
2.2 Data Collected Automatically
When you visit our website, we may automatically collect:
- IP address (anonymized where possible)
- Browser and device information
- Operating system
- Pages visited and interaction data
- Approximate location (country or region)
This data is collected using cookies and similar technologies.
3. Cookies and Similar Technologies
We use cookies for the following purposes:
3.1 Strictly Necessary Cookies
These cookies are required for the website to function properly and cannot be disabled. They are used for:
- Shopping cart functionality
- User authentication and account access
- Language, region, and currency preferences
- Website security and fraud prevention
3.2 Analytics Cookies
Analytics cookies help us understand how visitors use our website and improve performance.
We may use:
- Umami Analytics, which is designed to be privacy-friendly and minimizes personal data collection
- Google Analytics, if enabled, which is loaded only after user consent where required
Analytics data is processed in aggregated form and is not used to identify individual users.
4. How We Use Your Data
We use personal data for the following purposes:
- To process and fulfill orders
- To manage user accounts and authentication
- To provide customer support
- To improve our website and services
- To ensure website security and prevent abuse
- To comply with legal and regulatory obligations
We do not sell your personal data.
5. Legal Basis for Processing (Where Applicable)
Under the General Data Protection Regulation (GDPR), we process personal data based on:
- Performance of a contract (e.g. orders and accounts)
- Legitimate interests (e.g. security, website improvement)
- Your consent (e.g. analytics cookies)
- Compliance with legal obligations
6. Third-Party Services
We use trusted third-party service providers to operate our website and services, including:
- Cloudflare for content delivery, security, and performance
- Umami Analytics for website analytics
- Google Analytics (optional) for website analytics
- Payment service providers (such as Stripe or PayPal)
- Email and infrastructure service providers
These third parties process data in accordance with their own privacy policies and applicable data protection laws.
7. International Data Transfers
Some of our service providers may be located outside the European Union.
When personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms.
8. Data Retention
We retain personal data only for as long as necessary:
- Account data is retained while your account remains active
- Order and transaction data is retained as required by law
- Analytics data is retained in aggregated and time-limited form
You may request deletion of your personal data, subject to applicable legal and contractual retention obligations.
9. Data Security
We implement reasonable technical and organizational measures to protect personal data, including:
- Encrypted connections (HTTPS)
- Access controls and restricted permissions
- Infrastructure-level security provided by Cloudflare
While no system is completely secure, we take appropriate steps to protect your data.
10. Your Rights
If you are located in the European Union, you have the right to:
- Access your personal data
- Request correction or deletion
- Object to or restrict processing
- Withdraw consent at any time
- Lodge a complaint with a data protection authority
To exercise your rights, please contact us at [support@citaly.com].
We will respond within 30 days.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated revision date.
12. Contact
If you have any questions about this Privacy Policy or how we handle personal data, please contact us at: