Privacy Policy
Last updated: 1 September 2026
Who processes your data
The data controller is Francesca Benassi, reachable at info@dearcove.com.
DearCove is an early-stage project and is not yet an incorporated company: the controller is therefore the natural person named above. The service is entirely digital and carried out by correspondence, which is why the contact channel given is the email address — the fastest way to exercise your rights and get an answer. Once the project takes a corporate form, this notice will be updated with company name, registered office and VAT number.
What we collect
We collect only what we need to start the search. Nothing more.
| Data | Source | Why |
|---|---|---|
| Name | Request form | To address you properly |
| Email address | Request form | To send you the research dossier and updates |
| Bag description, colour, condition, budget | Request form | To carry out the search |
| Chosen language and request date | Automatic | To reply in the right language and keep chronological order |
| Browsing statistics | Google Analytics, only with your consent | To understand how the site is used |
We do not ask for payment details, identity documents, phone numbers or special categories of data. If you write them spontaneously in the free-text field, please do not: we do not need them.
Why we may process them
- To answer your request — legal basis: pre-contractual measures at your request, Art. 6.1.b GDPR. Without a name and an email we cannot search for anything or contact you.
- For browsing statistics — legal basis: your consent, Art. 6.1.a GDPR. You can give or refuse it in the banner and change it at any time from "Cookie preferences" in the footer.
- To defend ourselves in case of disputes — legal basis: legitimate interest, Art. 6.1.f GDPR.
How long we keep them
- Search requests: 24 months from the last contact, then deleted.
- Email correspondence: 24 months from the last exchange.
- Statistical data: up to 14 months, per the Google Analytics setting.
You may ask for deletion before these terms at any time.
Who we share them with
Your data is never sold, transferred or traded. It is processed by:
- Google Ireland Limited — Google Workspace and Google Analytics. Requests are stored in a Google Sheet and notifications travel over Gmail. Data processed within the European Economic Area, with possible transfers to the United States covered by the Data Privacy Framework.
- Hosting and content delivery providers — publishing and serving the site. Currently: Google Ireland Limited (Firebase Hosting).
- Cloudflare — automated anti-abuse check on the request form. When you submit your request, Cloudflare receives your IP address and some technical characteristics of your browser in order to establish that you are a person and not an automated program. The check does not profile you and does not follow your browsing. Possible transfers to the United States are covered by the Data Privacy Framework.
- The boutiques in our network — they receive only the description of what you are looking for. We do not disclose your name, your email or any other detail about you: to them you are a search, not an identifiable person. If, after choosing a proposal, you wish to be put in direct contact with a boutique, we do so only at your request.
Your rights
At any time you may ask us to access your data, correct it, delete it, restrict its processing, receive it in a readable format or object to processing. Where you gave consent, you may withdraw it without affecting the lawfulness of what came before.
Write to info@dearcove.com: we reply within thirty days. If our answer does not satisfy you, you may lodge a complaint with the Italian Data Protection Authority.
Security
Access to requests is protected by two-factor authentication on the controller's Google account. The site runs over encrypted HTTPS. The form is protected by automated anti-abuse checks.
Changes
If we change anything substantial we update this page and the date above. Where the change concerns consent-based processing, we will ask you again.