Privacy policy

Last updated: 29 October 2026

This policy explains how Business Genetics S.r.l. handles your personal data when you use methodyco.com and buy from Methodyco.

1. Who is responsible

The data controller is Business Genetics S.r.l., Corso Cavour 118, 70121 Bari (BA), Italy. VAT number: IT08504260723. Email: info@businessgenetics.co. Write to this address for any privacy request. We have not appointed a data protection officer.

2. Data we collect

We get data from you, from your device when you use the website, and from our payment provider.

  • Order data: your name, email address, billing address and country, the products you buy, the price, and the order date.
  • Payment data: your payment provider handles your card or wallet details. We do not see or store your full card number. We receive the payment status and the last digits of your card.
  • Consent record: your consent to immediate delivery, with the order date.
  • Messages: the emails you send us and our replies.
  • Technical data: your IP address, device and browser type, pages you view, and cookie data.
  • Marketing data: your email address and your choices, only if you subscribe.

You must give your name, email address, and billing details to buy. Without them, we cannot complete your order.

3. Why we use your data, and our legal basis

  • To take and deliver your order, and to handle payment and support. Legal basis: contract (Article 6(1)(b) GDPR).
  • To keep accounting and tax records, and to answer legal requests. Legal basis: legal obligation (Article 6(1)(c) GDPR).
  • To prevent fraud, keep the website secure, and defend legal claims. We use technical data to run and protect the website. Legal basis: our legitimate interests (Article 6(1)(f) GDPR).
  • To send marketing emails, and to use analytics or marketing cookies. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time.

We do not use your data for decisions that are only automated and that have legal effects on you. Our payment provider checks transactions for fraud. These checks can block a payment.

4. Who receives your data

  • Shopify: Shopify hosts our website and checkout, and processes your data for us. For some purposes, such as payment and fraud prevention, Shopify acts as an independent controller. Read Shopify's privacy policy at shopify.com/legal/privacy.
  • Payment providers: Shopify Payments and its payment partners process your payment.
  • IT and email providers: for example the apps that send your download link and our emails. They act on our instructions.
  • Professional advisers: for example our accountants, who must keep your data confidential.
  • Authorities: when the law requires it.

We do not sell your personal data.

5. Transfers outside your country

Our providers can process data outside the EEA and the UK, including in Canada and the United States. They use lawful safeguards for these transfers. Examples are adequacy decisions and standard contractual clauses. Contact us to get more information.

6. How long we keep your data, and security

We keep your data only as long as we need it for the purpose. We keep order and tax records for 10 years, as Italian law requires. We keep messages while we handle your request, and then for the time that we need to defend legal claims. We keep marketing data until you unsubscribe.

We use reasonable technical and organisational measures to protect your data. Shopify encrypts checkout connections. No system is fully secure.

7. Cookies

This website uses cookies that it needs to work. They keep your cart, support checkout, and protect security. We do not need your consent for them.

We ask for your consent where the law requires it, before we use cookies for analytics or marketing. A cookie banner shows your choices. At the date above, we do not use advertising cookies. If we add them, we update this policy.

8. Your rights

You have these rights, under the law that applies to you:

  • To access your data and get a copy.
  • To correct wrong data.
  • To delete your data.
  • To restrict our use of your data.
  • To receive your data in a portable format.
  • To object to our use of your data, where we rely on legitimate interests.
  • To withdraw your consent at any time. This does not affect the use before you withdrew it.

Email info@businessgenetics.co to use these rights. This is also our privacy contact. We reply within one month. We can ask you to prove who you are.

You can complain to a data protection authority. In Italy, this is the Garante per la protezione dei dati personali (garanteprivacy.it). In the UK, this is the Information Commissioner's Office (ico.org.uk). You can also contact the authority in your country of residence.

You may live in a US state with a privacy law. Then you can ask us what data we hold. You can ask us to correct it or to delete it. We do not sell your personal data. We do not treat you differently when you use these rights.

Our website does not respond to browser Do Not Track signals. We do not allow advertising networks to track you on this website.

9. Children

Our website is not for children under 16. We do not knowingly collect data from them. If you think a child gave us data, contact us. We delete it.

10. Links to other websites

This website can link to other websites. We are not responsible for their privacy practices.

11. Changes

We can update this policy. The date at the top shows the last update. If a change is important, we tell you on this website.

12. Contact

Business Genetics S.r.l., Corso Cavour 118, 70121 Bari (BA), Italy
Email: info@businessgenetics.co