Privacy Policy

Alessandro Nappi is the data controller for personal data processed through this Site. For any privacy question or request, contact me at [email protected].

• Information you send me. When you use the contact form, I collect the name, email address, organisation, project details, and message you provide, so I can reply to your inquiry.
• Technical data. Like most websites, my hosting provider processes basic technical information (such as your IP address and browser type) to serve pages securely and prevent abuse.
• Anonymous usage analytics. I use privacy-friendly, cookieless analytics that measure aggregate traffic without identifying you or tracking you across other sites.

I do not knowingly collect special-category data, and I do not run advertising or cross-site tracking.

• To respond to your messages and discuss potential work.
• To operate, secure, and improve the Site.
• To comply with legal obligations where applicable.

The legal bases for this processing are your consent (when you contact me), the taking of steps at your request prior to entering a contract, and my legitimate interest in running a secure website.

I use a small number of trusted providers that may process data on my behalf as processors:

• Web3Forms — delivers contact-form submissions to my inbox. See the Web3Forms privacy policy.
• Cloudflare — hosts the Site and provides security and cookieless analytics. See the Cloudflare privacy policy.
• YouTube (Google) — embedded showreel and portfolio videos. Playing an embedded video may set cookies and share data with Google under the Google privacy policy. I load YouTube only after you choose to play a video.

The Site itself does not set advertising or tracking cookies, and the analytics I use are cookieless. Third-party embedded content (such as a YouTube video you choose to play) may set its own cookies, governed by that provider’s policy.

I retain contact messages only as long as needed to handle your inquiry and any resulting project, and then delete them. Aggregate analytics contain no personal data and are retained in anonymised form.

Some providers listed above may process data on servers outside your country, including outside the European Economic Area. Where that happens, they rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. If you are in the EEA/UK these rights arise under the GDPR; if you are in California you have comparable rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.

To exercise any right, email [email protected]. You also have the right to lodge a complaint with your local data-protection authority.

The Site is intended for a professional audience and is not directed at children under 16. I do not knowingly collect data from children.

I may update this policy from time to time. The “Effective” date above shows when it was last revised; material changes will be reflected on this page.