Privacy policy

This privacy policy explains what data Blowhammer collects on www.blowhammer.com, in the online store and in emails, what we use it for and who we share it with. We use it to sell you our clothes and ship them to you, to tell you what's new and to introduce Blowhammer to people who might like it.

Who we are

The data controller is BHBLASTED S.r.l. Società Benefit, registered office at via Boscofangone Zona ASI Lotto C8, 80035 Nola (NA), Italy. Naples Register of Companies (Registro delle Imprese), tax code (codice fiscale) 08466861211, VAT number IT08466861211, REA number NA-960178. Paid-up share capital €11,377.07. Certified email (PEC) bhblasted@pec.it, email info@blowhammer.com.

What data we collect

We collect the data you give us and the data the site records while you use it.

• Contact and account details, meaning name, email, phone, shipping and billing addresses, password, and your date of birth if you give it to us.
• Orders and payments, meaning what you buy, how much you spend, how you pay, returns and exchanges.
• What you do on the site, meaning pages and items you look at, searches, cart, wishlist, clicks, where you come from, device, browser, IP address and country.
• What you do with our emails, meaning whether you open them, which links you click, whether you unsubscribe or mark them as spam.
• What you write to us when you ask for support, a return or an exchange, or when you enter a contest, including any photos you send us.
• Your choices about emails, messages and cookies.

Why we use it

Each use has its own legal basis, meaning the reason the law allows it.

• Taking and shipping your orders, handling payments, returns, exchanges, support and your account. We do this to perform our contract with you. Without this data we cannot serve you.
• Keeping invoices and accounts and meeting tax obligations. The law requires it.
• Running the site, keeping it secure, stopping fraud, understanding how you use it and improving it. We do this on the basis of our legitimate interest.
• Choosing who receives which emails, measuring emails sent without a subscription, sending you the checkout reminder, writing to you about similar products if you are already a customer, measuring and showing our ads with your encrypted data. We also do this on the basis of our legitimate interest, and you can object whenever you want.
• Sending you newsletters, campaigns and automated emails and measuring them, and writing to you on WhatsApp or by SMS if you chose to. We do this with your consent, that is with your subscription.
• For cookies and tools the site does not need in order to work, we ask for your consent through the cookie banner.

Our emails

What you receive

If you are subscribed, we send you newsletters and campaigns with new items, offers and news from the site. We also send you automated emails linked to what you do, such as the welcome email, the abandoned cart, an item you looked at, the emails after a purchase and one for your birthday.

You subscribe through the form at the bottom of the pages or the box at checkout. By creating an account you also subscribe to our emails.

If you leave an order halfway after giving us your email at checkout, we may send you a reminder to finish it, even if you are not subscribed. If you have already bought from us, we may also write to you without a subscription to suggest products similar to the ones you bought. In both cases you can tell us no whenever you want.

We send marketing emails with Shopify Messaging, and Shopify Flow starts the automated ones. Every marketing email has a link to unsubscribe and a link to this privacy policy.

How we measure emails

Marketing emails contain a pixel, a tiny invisible image, and links that go through a measurement address on blowhammer.com. This way Shopify Messaging records whether you open the email, which links you click, whether you unsubscribe and whether you mark it as spam.

This data, together with your orders, your language and the items you look at, helps us understand what interests you and decide who receives what and when. For example, we send the first-order code only to people who have not bought yet, and we may stop writing to people who have not opened our emails for a long time. Shopify Messaging, with its Smart delivery feature, leaves out of larger campaigns the people who have not opened or clicked for a while.

If you are subscribed, measurement is part of your subscription and of the consent you gave us. For emails we send without a subscription, such as the checkout reminder, we measure on the basis of our legitimate interest. If you do not want to be measured, you can unsubscribe.

How to stop

At the bottom of every marketing email there is the “Unsubscribe” link. It takes you to a page where you confirm, without signing in to your account. Many email apps also show an unsubscribe button next to the sender. You can also write to info@blowhammer.com. Emails about your orders, such as the confirmation and the shipping notice, keep arriving.

WhatsApp and SMS

If at checkout you choose to receive news and offers by WhatsApp or SMS, we may use your number to write to you on that channel. The messages are sent by Shopify Messaging with its providers, Twilio for SMS and Meta for WhatsApp. To stop, follow the instructions in the message or write to info@blowhammer.com.

Advertising and analytics

We measure how you use the site to improve it and to understand which ads bring us customers. We may show you our ads on Google, YouTube, Facebook, Instagram, TikTok, Pinterest and other sites, also based on your visits to us.

We may use your email and phone number, in encrypted form, to measure our ads and to show them to you on Google, Meta and TikTok, or not to show them to you if you are already a customer. We do this with Google enhanced conversions and the Meta Conversions API. If you do not want this, write to info@blowhammer.com and we will take you off.

Google and other advertising providers show our ads on sites across the internet and use cookies and device identifiers to choose them based on your past visits to us. You can refuse this in the cookie banner or from “Cookie preferences” at the bottom of the page, and also in Google Ads Settings or on the Network Advertising Initiative page.

Who receives the data

We share data with the providers and partners who help us with the store, payments, shipping, support, emails, analytics and advertising. Some work on our behalf. Others, such as Shopify, Google, Meta, TikTok and Microsoft, also use the data for their own purposes, under their own privacy policies.

• Shopify. The store is hosted by Shopify, which collects and processes your data also for the extra services it offers us, such as Shopify Messaging and Shop. For these services Shopify also uses what you do with us, in other Shopify stores and on Shopify, for analytics, personalisation and advertising. What you enter in the store reaches Shopify and other providers, including in countries outside the European Union, so they can provide their services to you. Data of European customers is first received by Shopify International Limited, in Ireland, and then passes to other group companies, including Shopify Inc. in Canada. How Shopify uses your data is explained in its Consumer Privacy Policy. To object to or withdraw consent for Shopify's use of your data, go to privacy.shopify.com.
• Shopify Messaging and Shopify Flow. With Messaging we send marketing emails, and Flow starts the automated ones in your language. To deliver emails Shopify uses providers such as Twilio and Mailgun, in the United States.
• Shop and Shop Pay. If you buy or sign in with Shop or Shop Pay, Shopify links the order to your Shop account, so you can track it in the app and pay faster next time. If you have a Shop account, Shop can recognise you when you visit our site, even if you have not told us who you are, and send you an email or notification reminder about items you looked at or the cart you left. These reminders are sent by Shop. For this data Shopify's Consumer Privacy Policy applies.
• Shopify Collabs. If you arrive from the link of a creator we work with, it measures the visit and the purchase so the creator gets their share.
• Payments. They are handled by Shopify Payments and the other providers of the methods you find at checkout, who receive the data needed to pay and to stop fraud. We never see your card details.
• Warehouse and shipping. Deagor WMS, our warehouse software, and the couriers receive the data needed to prepare and deliver the order, such as name, address and phone number.
• Google. We use Google Analytics 4 to understand how you use the site. The data goes through a forwarding server on Google Cloud managed by the Conversios app, and at purchase it also includes email and phone number in encrypted form, name and address. Conversios asks the ipify service for your device's IP address, and saves the IP, the browser and the Google and Meta identifiers in the cart and in the order, to link the purchase to the ad you came from. We use Google Ads, also through the Multifeeds app, to measure the sales that come from ads and to show you our ads based on your visits to us. Our items appear on Google Shopping through Google Merchant Center, which measures with its own tag the visits and purchases that come from there. Google Analytics can also work with Google's advertising features, such as remarketing and age and interest reports. In a Google sheet we also keep the lines of orders and refunds for accounting. How Google uses information from sites that use its services is explained on this page, and how it handles the data it receives from businesses on this other one. You can turn off Google Analytics with the browser add-on.
• Meta. On the site we use the Meta pixel and the Meta Conversions API, which sends the same events from the server too. Meta and other providers use pixels, cookies and similar technologies to collect data about your visits to our site and elsewhere on the internet, and use it to measure ads and choose which ones to show you. You can refuse this use in the cookie banner, from “Cookie preferences” at the bottom of the page or on youronlinechoices.eu.
• TikTok. The site also has the TikTok pixel, which sends its events from the server too. TikTok collects data about how you use the site to measure our ads and choose who to show them to. You can refuse it in the cookie banner or from “Cookie preferences” at the bottom of the page.
• Microsoft. We use Microsoft Clarity to understand how the site is used, with click and scroll maps and session recordings, meaning how you move and what you touch on the pages. Microsoft collects this data also with its own cookies, links it to Microsoft Bing, processes it for its own purposes and also uses it for its services, including Microsoft Advertising. How it does this is explained in the Microsoft Privacy Statement.
• GLAMI. The site has the GLAMI pixel (stileo.it), the fashion search engine where our items appear, which measures visits and purchases on our site.
• Klaviyo. For years our emails went through Klaviyo, Inc., in the United States. Klaviyo still holds the data we gave it, its code is still on the site and it still receives new customers, orders and deliveries from the store.
• Trustpilot. When we ship your order, Trustpilot A/S, in Denmark, may send you on our behalf an invitation to review the purchase. To do this we pass it your name, email and order number.
• Other apps on the site. The wishlist is SE Wishlist Engine, which saves the items you like, your IP address and, if you are signed in, your account. Some parts of the site come from other servers, such as the Scalapay widget for paying in instalments, Google Fonts, Google libraries and instant.page, which opens pages faster. These servers see your IP address.
• Store apps. For translations, automations, payment rules, forms, wholesale, data analysis and marketing we use Translate & Adapt, Mechanic, Payfy, Forms, Faire, Airbyte, Funnel and Wevion, which work on the store's data.
• Others. Accountants, consultants and authorities, when needed or when the law requires it.

When data goes outside the European Union, for example to the United States or Canada, it travels with the safeguards provided by law, such as the adequacy decisions of the European Commission and the standard contractual clauses.

Cookies

Cookies are small files the site saves on your device. With them we use similar technologies, such as pixels and browser storage. We group them in the categories of the cookie banner.

• Strictly Required Cookies. They make the site, cart, checkout, sign-in, Shop, language, recently viewed items and your cookie choice work. They belong to Shopify and to the site.
• Analytics and Statistics. Google Analytics 4 with Conversios, Shopify analytics and Microsoft Clarity.
• Marketing and Retargeting. Google Ads, Google Merchant Center, Multifeeds, Meta, TikTok, GLAMI, Klaviyo, Shopify Collabs and Shopify marketing.
• Functional Cookies. The wishlist and the site's other extra features.

You can choose which ones to accept in the cookie banner and change your choice whenever you want from “Cookie preferences” at the bottom of the page. You can also delete cookies in your browser settings.

How long we keep data

• Orders, invoices and accounting records. Ten years, as the law requires.
• Data for emails, for choosing who receives what and for advertising. Up to 24 months from the last time you opened or clicked one of our emails or bought from us.
• Unsubscribes and objections. We keep them, so we do not write to you again by mistake.
• Account. As long as you keep it, except for data the law requires us to keep.
• Cookies. For the time set by each provider, from one day to just over a year. Your cookie choice lasts one year.
• Data that Shopify, Google, Meta, TikTok and Microsoft process for their own purposes. They keep it under their own privacy policies.

Your rights

You have these rights over your data, and you use them free of charge.

• See it and get a copy.
• Correct or complete it.
• Have it deleted.
• Limit its use.
• Receive it in a format you can take elsewhere.
• Object at any time to marketing, and to the other uses based on our legitimate interest.
• Withdraw your consent whenever you want. What was done before stays valid.

Write to info@blowhammer.com or to the certified email bhblasted@pec.it, or use the data requests page. We reply within one month. If you think we process your data incorrectly, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali), on www.garanteprivacy.it, or with the authority of the country where you live.

Changes

We may change this privacy policy when needed, for example when we start using a new tool. The valid version is always this page.

This privacy policy was updated on 23.10.2026.