Earn points and turn them into discounts with All4cycling Club! Cookie Policy and Information on Other Tracking Technologies
Last updated: June 2026
Data Controller: Lunar Sport S.r.l., Via Gianfranco Miglio 2, 21045 Gazzada Schianno (VA), Italy — Email: privacy@all4cycling.com
1. What cookies are
Cookies are small text files that websites store on the user’s device while browsing. They may be used to ensure the proper functioning of the Website, maintain the session, manage the cart, remember preferences and, subject to consent where required, collect information for statistical, personalization and advertising purposes.
The Website may also use similar technologies, such as local storage, tracking pixels, tags and advertising identifiers. The provisions of this policy also apply to such technologies.
2. Legal basis
Cookies and other tools that are strictly necessary for the transmission of a communication or for the provision of a service expressly requested by the user may be used without consent, pursuant to Article 122 of Italian Legislative Decree 196/2003.
Analytical cookies that cannot be considered equivalent to technical cookies, non-strictly necessary functional cookies and profiling or marketing cookies are used exclusively with the user’s prior consent, pursuant to Articles 6, paragraph 1, letter a), and 7 of Regulation (EU) 2016/679 ("GDPR").
3. Categories of cookies and tools used
3.1 Strictly necessary cookies
These cookies are essential for the operation of the Website or for providing a functionality expressly requested by the user. They do not require consent and may be used to:
- maintain the browsing session;
- manage the cart and checkout;
- store the selected language and country;
- authenticate the user;
- ensure the security of the Website;
- prevent fraud and abuse;
- store consent preferences.
Shopify — Shopify International Limited and Shopify group companies
Purpose: technical management of the e-commerce platform, session, cart, checkout, authentication, security and essential preferences.
Privacy policy: shopify.com/legal/privacy
Examples: cart, cart_currency, localization, secure_customer_sig, _shopify_essential, _shop_app_essential
Duration: for the session or for the period strictly necessary for the relevant purpose.
Shopify International Limited may use Shopify Inc. and other sub-processors in accordance with its Data Processing Addendum.
ReturnGo — ReturnGo Ltd.
Purpose: management of return requests and identification of the user within the returns portal when the service is expressly requested.
Privacy policy: returngo.ai/privacy-policy
Duration: for the session or for the period necessary to manage the return request.
Orbe Geolocation — Orbe
Purpose: detection of the user’s approximate geographical location in order to display the appropriate market, language and currency for the browsing country.
Duration: for the session or for the period necessary for market selection.
3.2 Preference and functionality cookies
These cookies allow the use of additional features, remember non-essential preferences and personalize the browsing experience. When they are not strictly necessary for a functionality expressly requested by the user, they are used exclusively with prior consent.
Kiwi Sizing — Kiwi Sizing Inc.
Purpose: display of the size guide and storage of preferences related to the user’s size profile.
Privacy policy: kiwisizing.com/privacy-policy
Duration: for the session or up to 12 months.
Candy Rack — Digismoothie s.r.o.
Purpose: management of upsell, cross-sell and product recommendation features during browsing or checkout.
Privacy policy: candyrack.app/privacy
Duration: for the session or up to 12 months.
Poinzilla
Purpose: management of the loyalty program, earning and use of points, rewards, reserved benefits, any referral codes and features connected to the customer account.
Data potentially processed: technical identifiers, customer account data, email address, purchase history, points balance, redeemed rewards and interactions with the loyalty program.
Legal basis: performance of the service requested by the user for features strictly necessary for the loyalty program; user consent when the tool is used for promotional purposes, referrals, profiling or personalized marketing communications.
Duration: for the session or for the period necessary to manage the loyalty program.
Swish Wishlist
Purpose: management of the wishlist, saving favorite products and features connected to the customer account.
Duration: for the session or for the period necessary to manage the wishlist.
BikeMatrix
Purpose: bike component configuration and compatibility features, storage of preferences related to the user’s bike.
Duration: for the session or for the period necessary for the requested functionality.
Biscuits Bundles
Purpose: management of bundle and product configuration features.
Duration: for the session.
RichPanel — RichPanel Inc.
Purpose: customer support, management of conversations and recognition of the user when using the support service.
Data potentially processed: technical identifiers, IP address and, when the user is authenticated or contacts customer support, first name, last name and email address.
Privacy policy: richpanel.com/privacy-policy
Duration: for the session or up to 12 months.
Trustpilot — Trustpilot A/S
Purpose: display of reviews, operation of widgets and collection of post-purchase feedback.
Privacy policy: legal.trustpilot.com/end-user-privacy-terms
Duration: for the session or up to 12 months.
Judge.me
Purpose: display of product reviews, operation of rating widgets and collection of post-purchase feedback.
Privacy policy: judge.me/privacy
Duration: for the session or up to 12 months.
Notify.me
Purpose: management of product availability notifications requested by the user.
Privacy policy: notify-me.io/privacy
Duration: for the session or for the period necessary to manage the requested notification.
PageFly — Cosmo Technologies Ltd.
Purpose: technical rendering features for pages built with the PageFly page builder.
Privacy policy: pagefly.io/pages/privacy-policy
Duration: for the session.
3.3 Analytical cookies
Analytical cookies allow the collection of information on the use of the Website, such as pages visited, session duration, interactions, device used and approximate geographical origin. They are activated exclusively with the user’s prior consent, unless they are configured in such a way as to fully meet the legal requirements for being considered equivalent to technical cookies.
Google Analytics 4 — Google Ireland Limited and Google group companies
Purpose: statistical analysis of Website use, performance measurement and improvement of the browsing experience.
Privacy policy: policies.google.com/privacy
Main cookies: _ga, _ga_1Q7JNW25M4
Default duration: up to 2 years, unless a shorter duration is set by the Controller.
Shopify analytical tools
Purpose: analysis of visits, sessions, interactions and e-commerce performance.
Examples: _shopify_s, _shopify_y, _shopify_fs
Duration: variable depending on the type of identifier.
Mixpanel — Mixpanel Inc.
Purpose: behavioral analysis of users, measurement of the use of Website features and optimization of the browsing experience.
Privacy policy: mixpanel.com/legal/privacy-policy
Duration: up to 12 months.
3.4 Profiling and marketing cookies
These cookies and identifiers require the user’s prior consent. They are used to measure conversions, attribute advertising campaigns, carry out remarketing, create audience segments and show personalized or non-personalized ads on external platforms.
Google Ads — Google Ireland Limited and Google group companies
Purpose: conversion measurement, campaign attribution, remarketing and ad personalization.
Privacy policy: business.safety.google/privacy
Examples: _gcl_au, IDE, DSID, test_cookie
Duration: from a few minutes up to 13 months.
Google Tag Manager — Google Ireland Limited
Google Tag Manager is a tool used to manage the tags present on the Website. It does not directly install profiling cookies, but it may trigger the activation of analytical or advertising tools depending on the choices expressed by the user through the banner.
Privacy policy: policies.google.com/privacy
Meta Pixel — Facebook and Instagram — Meta Platforms Ireland Limited
Purpose: conversion measurement, campaign attribution, remarketing, creation of custom audiences and ad personalization on Facebook and Instagram.
Privacy policy: facebook.com/privacy/policy
Examples: _fbp, _fbc, fr
Duration: generally up to 90 days.
4. Pixels and tracking in email communications
Communications sent through email marketing platforms may contain pixels or tracked links that allow delivery, email openings and clicks to be verified.
Mailchimp / Intuit — Intuit Inc.
Purpose: management of subscriptions, sending of communications, security, aggregate campaign measurement and, subject to specific consent where necessary, individual analysis of openings and clicks.
Privacy policy: mailchimp.com/legal/privacy
Individual tracking of openings and clicks, when used to analyze the behavior of the individual recipient or create commercial profiles, is carried out only with prior, specific, informed and revocable consent.
5. Third parties and data recipients
Some Website features are provided by third parties that may process personal data as data processors, independent controllers or, where applicable, joint controllers. Lunar Sport S.r.l. selects and configures these services in compliance with applicable legislation. Detailed information on the processing carried out by each provider can be found in the respective policies indicated in the previous sections.
In particular, Google processes the data collected through its services according to its own privacy rules. More information is available at: business.safety.google/privacy.
6. International transfers
Some providers may process personal data outside the European Economic Area. Where necessary, such transfers are carried out on the basis of an adequacy decision by the European Commission, the EU-US Data Privacy Framework where applicable, the Standard Contractual Clauses approved by the European Commission or another mechanism provided for by Articles 45 and 46 of the GDPR.
Shopify International Limited may transfer personal data to Shopify Inc. in Canada on the basis of the adequacy decision recognized by the European Commission and may use the Standard Contractual Clauses for further transfers governed by its Data Processing Addendum.
7. How to manage consent
The user may accept, reject or select the categories of non-essential cookies through the banner displayed upon first access to the Website. Consent is not obtained by simply scrolling the page, continuing to browse, silence or user inactivity.
Preferences can be changed at any time through the following link: Manage cookie preferences.
Cookies can also be deleted or blocked through browser settings:
Disabling strictly necessary cookies may prevent the proper use of certain features, such as authentication, cart management or completion of purchases.
8. Consent and withdrawal
Consent to non-essential cookies is collected through the banner displayed upon first access. Consent must be freely given, specific, informed and unambiguous, and is recorded to allow the Controller to document the choice made.
The user may withdraw or change consent at any time with the same ease with which it was given. Withdrawal does not affect the lawfulness of processing carried out before withdrawal and does not affect the use of the general features of the Website.
In the event of a previous refusal, the consent request is not shown again before six months have elapsed, unless there are substantial changes to the tools or purposes of processing.
9. User rights
In the cases provided for by the GDPR, the user may exercise the rights of access, rectification, erasure, restriction, objection, data portability and withdrawal of consent by writing to privacy@all4cycling.com.
The user also has the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the competent supervisory authority in their country of residence. For more information on the processing of personal data, please refer to the Privacy Policy.
10. Updates
This policy is updated periodically in relation to the evolution of the Website, the services used and the applicable legislation. In the event of substantial changes, users will be informed through a specific notice on the Website and, where necessary, new consent will be requested.
The names, purposes and durations indicated reflect the known characteristics of the services as of the date of the last update. Lunar Sport S.r.l. periodically checks the trackers actually used and updates this policy when necessary. The updated version is always available at this address.
For any request relating to cookies and other tracking technologies, you can write to: privacy@all4cycling.com