Privacy Policy

[Template: have this reviewed by a privacy professional before you publish, fill in every placeholder, then delete this note.]

1. Who we are

This website is run by [registered business name], P.IVA [number], [registered address], Italy ("Optimolds", "we", "us"). We are the data controller for the personal data described in this policy. Contact: info@yourdomain.com.

2. What data we collect

• Data you send us through our forms: name, email address, company, details about your part and project, and any files (such as CAD) or links you share.
• Communications: emails, chat messages and call notes when you contact us.
• Technical data: IP address, browser type and pages visited, recorded in server logs by our hosting provider for security.
• Analytics data: how you use the site, collected only if you accept analytics cookies (see our Cookie Policy).

3. Why we use it, and on what legal basis

• To answer your request, review your part and prepare feasibility reports and quotes: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To deliver projects you order: performance of a contract (Art. 6(1)(b) GDPR).
• To keep invoices and accounting records: legal obligation (Art. 6(1)(c) GDPR).
• To follow up on a report or quote we sent you, and to keep the site secure: our legitimate interests (Art. 6(1)(f) GDPR). You can object at any time.
• To measure site usage with analytics: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via "Cookie settings" in the footer.

4. Your project files

Files you send us are confidential. We use them only to review and deliver your project, we never sell them, and we never use them in our marketing without your written permission. We're happy to sign an NDA on request.

5. Who we share data with

We share personal data only with service providers that help us run our business, under contracts that require them to protect it:

• Website hosting and form handling: [e.g. Cloudflare, Inc.]
• Email: [e.g. Google Workspace]
• Customer records: [e.g. Notion / HubSpot]
• Analytics, only with your consent: Google Ireland Ltd (Google Analytics)

We may also disclose data where required by law.

6. Transfers outside the EU

Some of these providers may process data outside the European Economic Area. Where they do, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

7. How long we keep it

• Enquiries that don't become projects: up to [24 months] after our last contact.
• Project data and files: for the duration of the project and up to [X years] afterwards, unless you ask us to delete them sooner.
• Invoices and accounting records: 10 years, as required by Italian law.

8. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing. To exercise these rights, email info@yourdomain.com.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

9. Security

We use appropriate technical and organisational measures to protect your data and files, including encrypted connections (HTTPS) and access limited to the people working on your project.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.