Last updated: 18 October 2026

This policy explains what personal data we collect when you visit tapadum.com, buy from us or write to us, why we use it, who else receives it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Italian Privacy Code.

1. Who we are

Your data is controlled by Tapadum di Yalcin Ozgur (trading as Tapadum Music Store), VAT IT02714540396, Vicolo Galletti 2, Villa Vezzano, 48013 Brisighella (RA), Italy.
Email: info@tapadum.com · Phone: +39 0546 614620.
We have not appointed a Data Protection Officer; for any privacy question, write to info@tapadum.com.

2. What we collect and why

Orders

When you place an order we collect your name, billing and shipping address, email address, phone number and the details of your order. We use them to process and ship the order, send you order updates, and handle returns, withdrawals and warranty claims.
Legal basis: our contract with you (GDPR art. 6(1)(b)). We keep invoices and accounting records because Italian law requires it (art. 6(1)(c)).
This data is needed to buy from us; without it we cannot accept or deliver your order.

Customer account (optional)

If you create an account, we store your login details, addresses and order history so you can order faster and follow your orders. Legal basis: contract (art. 6(1)(b)).

Payments

Payments are handled by Stripe (through WooPayments, including Klarna where offered) and PayPal. We never see or store your full card number. These providers process your payment data as independent controllers under their own privacy policies and may run their own fraud checks.
Our checkout uses Google reCAPTCHA to protect against automated abuse (our legitimate interest in keeping the shop secure, art. 6(1)(f)).

Contact, live chat and WhatsApp

When you write to us by email, through the contact form, the live chat on our site or WhatsApp, we use your message and contact details to answer you. Legal basis: steps you ask us to take before or under a contract (art. 6(1)(b)), or our legitimate interest in answering your questions (art. 6(1)(f)). Live chat answers are prepared with the help of an AI service provided by OpenAI. Please do not share payment details in the chat.

Music Academy enquiries

If you contact us about lessons in our Music Academy, we forward your name, email address and message to the teacher concerned, who contacts you directly and arranges the lessons and payment. From that point the teacher is responsible for how they use your data.

Product reviews

Reviews on our product pages can only be written by customers who bought the product; we check each one against our order records. We publish positive and negative reviews alike and remove only spam or offensive content. Your review is shown with the name you choose.

3. Emails from us

Order emails

We send emails about your order (confirmation, shipping, returns). These are part of the contract and are not marketing.

Instruments similar to your purchase

If you buy from us, we may occasionally email you about our own products similar to the ones you bought, without asking for your consent (Italian Privacy Code, art. 130(4), implementing art. 13(2) of Directive 2002/58/EC). We do not track whether you open these emails.

Review request

Only if you tick the box at checkout, we send you one email about two weeks after your order is completed, inviting you to review your purchase (art. 6(1)(a) GDPR — consent). You can withdraw your consent at any time by writing to info@tapadum.com.

Your right to object — at any time, free of charge

You can stop our marketing emails whenever you like: tick the box at checkout, use the “Unsubscribe” link at the bottom of every email, or write to info@tapadum.com. We stop straight away. After you unsubscribe we keep only your email address on a “do not contact” list, so that we never email you again.

Our emails are sent through Brevo (France), which acts as our data processor and stores data in the European Union.

4. Cookies and similar technologies

Our cookie banner lets you accept or refuse each category. Non-essential tools load only after you agree, and you can change your choice at any time from the banner.

• Necessary: shopping cart, checkout, login, security, your language and your cookie choice. These cannot be switched off.
• Analytics: Google Analytics and Microsoft Clarity, which show us, in aggregated form, how visitors use the site.
• Marketing: Google Ads and the Meta Pixel, which measure our ads and may show you our products on Google, Facebook and Instagram; and the Pinterest “Save” button.

Some pages show YouTube videos and use Google Fonts; these services receive your IP address when the page loads.

5. Who else receives your data

We share your data only as needed for the purposes above:

• shipping companies that deliver your order: BRT (Italy), DPD (Europe) and Poste Italiane (outside Europe);
• payment providers: Stripe, Klarna and PayPal;
• our website host (Hostinger), our email provider (Brevo) and our live chat AI provider (OpenAI);
• the analytics and advertising services listed in section 4, only if you allow them;
• Music Academy teachers, for lesson enquiries;
• our accountant and public authorities, where the law requires it.

We do not sell your personal data.

6. Transfers outside the European Union

Some of these providers, or their parent companies, are based in the United States (Google, Meta, Microsoft, Pinterest, Stripe, PayPal and OpenAI). Transfers to them rely on the EU–US Data Privacy Framework adequacy decision of 10 July 2023 or, where a provider is not certified, on the European Commission’s standard contractual clauses. You can ask us for more information.

7. How long we keep your data

• Orders, invoices and accounting records: 10 years, as required by Italian law (Civil Code, art. 2220).
• Customer accounts: until you delete your account, or 36 months after your last login or order.
• Unsuccessful or cancelled orders: 90 days.
• Emails and chat messages: as long as needed to answer you and handle any follow-up.
• Marketing emails to customers: up to two years after your last purchase, unless you object earlier.
• Analytics and advertising cookies: for the duration shown in our cookie banner.

8. Your rights

You can ask us to access, correct or delete your data, to restrict or object to its use, and to receive the data you gave us in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before. Write to info@tapadum.com — we reply within one month.
You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the data protection authority in your own EU country.

We do not make decisions about you based solely on automated processing.

9. Changes to this policy

When we change this policy we publish the new version on this page with a new date.