Privacy policy

1. Controller and contact details

The data controller is Tommaso Lucarelli, operating as D’Amor — Fashion Art Jewelry. VAT number: 01463960474. For privacy requests and enquiries: damorgioielli@gmail.com.

Registered office and correspondence address: Via Andrea Doria 6, 51100 Pistoia (PT), Italy. damorgioielli@gmail.com

2. Data processed

Enquiries: your name, email, optional telephone number, role selection (Leader or Follower), message and any information you choose to provide. Please do not send payment details or sensitive information through this form.

Technical data: IP address, browser and device information, requested URLs, timestamps and security data processed to deliver the website and handle submitted forms.

Privacy choices: purposes enabled or rejected, action, time, expiry and notice version stored on your browser. The record does not include your contact details or message.

Optional services: Google reCAPTCHA processes device, network and interaction data to assess spam risk. Google Analytics 4 measures page views, sources of visits, approximate location, device information and online identifiers after your separate permission. No advertising purposes are enabled by this website.

3. Purposes and legal bases

Answering requests and discussing artworks or services: steps at your request before a contract and performance of a contract, where applicable (GDPR Article 6(1)(b)). General correspondence and professional relationships: our legitimate interest in responding and managing those relationships (Article 6(1)(f)).

Delivering and securing the website, preventing abuse and filtering spam: our legitimate interest in reliable services and secure communications (Article 6(1)(f)). Necessary storage of your choices respects and documents your preferences and consent obligations (Article 6(1)(c), together with applicable cookie rules).

Loading Google reCAPTCHA for the form and Google Analytics for statistics: separate optional consent for Functionality and Measurement (Article 6(1)(a) and applicable cookie rules). Rejecting Measurement does not prevent using the form if Functionality is enabled.

Legal obligations and disputes: Article 6(1)(c), or the legitimate interest in establishing, exercising or defending legal claims (Article 6(1)(f)), as applicable. Sending an enquiry does not subscribe you to a newsletter.

4. Providing data is voluntary

You can browse without enabling optional services. Name, email and message are required to send a form and receive a reply; role selection is also sent and phone is optional. If you do not enable Functionality or cannot complete reCAPTCHA, you can email us directly. Ordinary WhatsApp links are also available.

5. Services and recipients

Data may be accessible to the controller and, where necessary for these purposes, authorised technical assistance, professional advisers or authorities legally entitled to receive it.

Netlify, Inc. hosts the website, processes and stores submitted forms and manages form email notifications. Netlify uses Automattic’s Akismet to filter spam. Its hosted customer data is covered by its data-processing terms; providers may also process security and service information for their own purposes.

Google provides the Gmail mailbox for receiving and answering messages and, only when enabled, reCAPTCHA and Google Analytics. Google Ireland Limited provides relevant services to EEA users, with processing also involving Google LLC and group entities under the applicable service terms. Roles depend on each service and its terms.

We do not intentionally send the content of the contact form to Analytics. Relevant provider notices and processing terms are linked below.

6. International processing

Providers may process data outside the European Economic Area, including in the United States. Applicable safeguards described in their terms include standard contractual clauses and, for covered transfers to certified organisations, the EU–US Data Privacy Framework. The relevant mechanism depends on the service and recipient. Consent to an optional service does not replace transfer safeguards.

You can contact us for information about the safeguards relevant to your data. See Netlify’s trust centre and Google’s transfer information linked below.

7. Retention

Enquiries and correspondence: for the time needed to handle the request, discussion and necessary follow-up. If a business relationship follows, relevant data is kept for that relationship and applicable accounting, statutory or legal-claim obligations. Retention is assessed against request status, outstanding commitments and legal requirements; messages are not all kept indefinitely by default.

Privacy choices: six calendar months, unless changed earlier or browser storage is cleared. A first-party cookie holds the choice; a localStorage copy notifies other tabs but cannot enable services independently. No external consent platform receives this record.

Analytics: this website limits Analytics cookies to 180 days without automatic renewal. Cookie lifetime is distinct from property-level data retention: event-level data is retained for 2 months and user-level data for 14 months, with user-identifier retention reset by new activity. Google deletes expired detailed data through its monthly process; standard aggregated reports follow separate rules.

Hosting, anti-spam and security data: for periods required to provide the service, investigate abuse and comply with provider obligations. Google’s retention information and Akismet’s notice explain their criteria.

Withdrawing consent stops future optional processing on this browser. It does not automatically erase messages already sent or data already lawfully processed. You can make a separate erasure request, subject to applicable exceptions.

8. Your rights

Where the relevant conditions apply, you may request access, rectification, erasure, restriction and portability for data processed automatically on consent or contract grounds. You may object to processing based on legitimate interests for reasons relating to your situation. You can withdraw optional consent at any time without affecting the lawfulness of previous processing.

Write to damorgioielli@gmail.com. We may request proportionate information to verify identity. We normally respond within one month; any permitted extension will be explained within that month. You can complain to the Italian Garante per la protezione dei dati personali or the competent supervisory authority where you live or work.

9. Automated checks and external links

Automated spam checks may block delivery; email us if you cannot use the form. This website is not used to make solely automated decisions producing legal or similarly significant effects about you.

Instagram, Facebook, X/Twitter, LinkedIn and WhatsApp are ordinary external links. Following a link opens another service governed by its provider’s notice. Fonts and photographs are served locally; social-feed widgets and advertising tools are not embedded.

10. Updates

We update this notice when relevant processing changes. The date and version appear above. A material change affecting optional processing requires a new choice before that processing starts. Your browser choice applies to both English and Italian pages on the same hostname.