Privacy Policy

This Privacy Policy governs the manner in which personal information is collected, processed, disclosed, and retained by the data controller in connection with the use of the website designer-consultation.com (“the Website”). This document is intended to comply with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and, where applicable, the General Data Protection Regulation (EU Regulation 2016/679 – “GDPR”) for data subjects located in the European Union.

The data controller is a sole proprietorship established in Italy with its registered address at Via Enrico Fermi 26, 06135 Perugia (PG), Italy. Any inquiries regarding this policy or the exercise of applicable data rights may be directed to: [email protected].

Scope and Applicability

This Privacy Policy applies to all personal data collected directly or indirectly through the Website, including but not limited to data provided voluntarily by the user via form submissions—primarily originating from paid advertising channels such as Facebook Ads—and data automatically acquired through the use of tracking technologies, cookies, analytics tools, or CRM platforms integrated within the Website and its connected infrastructure.

Categories of Personal Information Collected

We collect personal information as defined under Cal. Civ. Code § 1798.140(v)(1), which includes identifiers such as name, surname, email address, and phone number submitted voluntarily through lead generation forms, typically embedded within or linked from social advertising platforms. In addition, we collect online identifiers such as IP address, browser information, device metadata, session timestamps, user interactions with page content, and referral data.

This data may be further enriched or analyzed using third-party services, including but not limited to Google Analytics, Microsoft Clarity, Facebook Pixel, and our CRM platform (GoHighLevel), for the purpose of performance tracking, user experience optimization, and marketing attribution.

Purpose of Processing and Legal Basis

The processing of personal data is carried out for the purposes of providing requested services (such as consultations), managing communications with data subjects, conducting lead qualification, and improving the performance of our sales funnels. The processing also enables remarketing activities and behavioral segmentation via embedded tracking pixels.

In jurisdictions where the GDPR applies, the legal basis for processing includes the explicit consent of the data subject pursuant to Art. 6(1)(a) GDPR, the performance of pre-contractual measures under Art. 6(1)(b), and the legitimate interests pursued by the controller under Art. 6(1)(f), including business development and service optimization.

Data Storage and Retention

Personal data submitted by users who do not convert into clients will be retained for a maximum period of three (3) months from the date of collection, unless a longer retention period is required or permitted by applicable law. In the event of conversion to a client relationship, data may be retained as necessary for contractual performance and compliance with statutory obligations.

Third-Party Access and International Transfers

Personal information may be accessed, processed, or stored by the following categories of recipients: the designated designer and their collaborators, the marketing agency responsible for funnel and advertising operations, and business consultants supporting operational and strategic functions. Additionally, data may be transmitted through or stored within third-party platforms such as GoHighLevel (CRM), Google Analytics, Microsoft Clarity, and Facebook.

Some data processing operations involve transfers to third countries, particularly the United States. Such transfers are conducted in accordance with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) where required by GDPR Art. 46.

Tracking Technologies and Cookies

This Website uses cookies and equivalent tracking mechanisms in compliance with Cal. Civ. Code § 1798.140 and, where relevant, EU Directive 2002/58/EC (“ePrivacy Directive”). Cookies are employed to capture analytical data, monitor user behavior, and personalize advertisements.

Cookies may be categorized as strictly necessary (functional), performance-related (analytics), or marketing-related (profiling and retargeting). The use of Facebook Pixel allows us to deliver interest-based advertisements and measure campaign effectiveness. Google Analytics and Microsoft Clarity provide anonymized insights into user navigation and funnel optimization.

By continuing to use the Website or by submitting personal information through our forms, users consent to the deployment of such technologies, unless they actively opt out via browser-level cookie management tools or publicly available industry opt-out mechanisms (e.g., YourAdChoices).

Data Subject Rights

Under the CPRA (Cal. Civ. Code §§ 1798.100–1798.199.100), users residing in California have the right to access their personal information, request deletion of such information, correct inaccuracies, and opt out of the sharing or use of their data for cross-context behavioral advertising. These rights are subject to applicable verification protocols as defined by Cal. Civ. Code § 1798.130.

If applicable, data subjects under the GDPR have the right to access their data (Art. 15), rectify inaccurate or incomplete data (Art. 16), request erasure (Art. 17), restrict processing (Art. 18), object to processing (Art. 21), and exercise data portability (Art. 20). Data subjects may also withdraw consent where processing is based on Art. 6(1)(a) GDPR.

All rights requests should be submitted in writing to [email protected]. Responses will be issued in accordance with the timelines mandated by applicable law.

Security of Processing

Pursuant to Cal. Civ. Code § 1798.81.5 and Art. 32 of the GDPR, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including safeguards against unauthorized access, data loss, and unlawful processing. Notwithstanding these measures, no transmission over the Internet or storage system can be guaranteed as completely secure.

Policy Updates

We reserve the right to amend this Privacy Policy at any time to reflect changes in our processing activities, applicable law, or operational practices. Updates will be published on this page with a revised effective date. We encourage users to consult this policy periodically.

Contact Information

All inquiries regarding this Privacy Policy or the exercise of legal rights should be directed to:

[email protected]
Legal Address: Via Enrico Fermi 26, 06135 Perugia (PG), Italy