← Back to home

Privacy policy

Last updated: 15 November 2026

This notice explains how we process the personal data of visitors to lacketstudio.it and of anyone who fills in the forms on the website, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. The Italian version of this notice prevails in case of discrepancies.

1. Data controller

Lacket Studio by Davide Como (sole proprietorship)
Registered address: Loc. Schierano 182, 15078 Rocca Grimalda (AL), Italy
VAT no.: IT02765770066 · REA: AL-315940
Email: info@lacketstudio.it

2. What data we collect

  • Data you provide through the "Start a project" form: full name, business name and industry, email, phone (optional), city, current website and social profiles, business description, goals, style and feature preferences, timing and any notes you choose to add.
  • Waitlist data: email address and service of interest (Apps and/or Ads).
  • Browsing data: the systems that run the website (the servers of our hosting provider, Cloudflare) automatically log some technical data, such as IP address, browser type, date and time of the request. This data is used for security and to keep the website working properly, and is not used to identify you.

Please do not include special categories of data (for example health data) in the forms.

3. Why we process data and legal basis

PurposeLegal basis
Replying to your request, preparing the free preview or a quotePre-contractual measures taken at your request (Art. 6(1)(b) GDPR)
Building the website you ordered and managing the client relationshipPerformance of a contract (Art. 6(1)(b) GDPR)
Emailing you when Apps and Ads become available (waitlist)Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time
Website security and prevention of abuse and spamLegitimate interest of the controller (Art. 6(1)(f) GDPR)
Tax and accounting obligations, if you become a clientLegal obligation (Art. 6(1)(c) GDPR)

Providing the data requested in the forms is necessary for us to reply: without it we cannot follow up on your request.

4. How and for how long we keep data

Data is processed electronically with appropriate security measures. We keep it:

  • contact requests and quotes: for as long as needed to handle the request and no longer than 12 months after the last contact, if you do not become a client;
  • waitlist: until you withdraw consent or the service launches, and no longer than 24 months;
  • client data and invoices: for 10 years, as required by Italian tax law;
  • browsing data: for the period set by the hosting provider, usually a few days or weeks.

5. Who we may share data with

Data is never sold or published. It may be processed, only for the purposes above, by providers who help us run the website and act as data processors (Art. 28 GDPR), for example:

  • Cloudflare, Inc. (Cloudflare Pages) – website hosting and network security;
  • Web3Forms – receiving the website forms and forwarding requests to our mailbox;
  • Aruba S.p.A. – domain and email;
  • our accountant – for clients only, for tax obligations.

Some providers may be based, or have servers, outside the European Union (for example in the United States). In such cases, transfers rely on a European Commission adequacy decision (EU-U.S. Data Privacy Framework) or on Standard Contractual Clauses, under Articles 45-46 GDPR.

6. Your rights

At any time you can ask to access, correct or delete your data, restrict its processing, object to processing based on legitimate interest, receive your data in a portable format and withdraw any consent given (Articles 15-22 GDPR). Withdrawal does not affect processing carried out before it. Just write to info@lacketstudio.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.

7. Cookies

This website only uses technical cookies and similar tools. Full details are in the cookie policy.

8. Changes

This notice may be updated. The valid version is always the one published on this page, with the date of the last update.