Privacy Policy

This Privacy Policy explains how aleflowstudio (“we”, “us”) collects, uses and protects your personal data when you visit aleflow.com or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian law.

1. Data controller

The controller of your personal data is aleflowstudio (Alessandra), based in Milan, Italy. For privacy matters, contact hello@aleflow.com or WhatsApp +39 349 855 2515. (Full legal entity name, registered address and VAT/P.IVA to be completed before launch.)

2. What data we collect

• —Data you provide via the contact form: partners’ names, email address, wedding date, location/venue, approximate number of guests, type of celebration, photographer, planner, approximate budget, your message, how you found us, and your consent.
• —Data from direct contact: if you write to us by email or WhatsApp, the content of those messages and your contact details.
• —Automatically collected data: IP address, device and browser information, pages viewed and interactions — collected via analytics and security tools (see our Cookie Policy).

3. Why we use your data and legal bases

• —To respond to your enquiry and provide our services — legal basis: your consent and/or steps taken at your request prior to entering into a contract (Art. 6(1)(a)/(b) GDPR).
• —Website security and anti-spam (e.g. protecting the contact form) — legitimate interest (Art. 6(1)(f)).
• —Analytics to understand and improve the site — your consent (Art. 6(1)(a)), collected only after you accept via the cookie banner.
• —Legal compliance — where we are required to keep or disclose data (Art. 6(1)(c)).

4. Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies (e.g. analytics) are set only after your consent.

5. Who we share data with (processors)

We do not sell your data. We share it only with service providers acting as processors under data-processing agreements:

• —Cloudflare — CDN, security (WAF), anti-spam (Turnstile) and contact-form processing.
• —Resend — delivery of transactional emails (your enquiry and our auto-reply).
• —Sanity — content management system for the website.
• —Bunny Stream / Vimeo — video hosting and playback.
• —Google Analytics (GA4) — website analytics (only after consent).
• —Beget — hosting of the website files.
• —A secure tool for managing enquiries.

6. International data transfers

Some providers (e.g. Resend, Google) may process data outside the European Economic Area, including the United States. Where this occurs, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and/or adequacy mechanisms.

7. How long we keep your data

• —Enquiry and contact data: kept for 24 months after last contact, unless a contract requires longer.
• —Analytics data: retained per the provider’s settings (up to 14 months).

We delete or anonymise data when it is no longer needed.

8. Your rights

Under the GDPR you have the right to: access your data; rectify it; erase it; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). To exercise these rights, contact hello@aleflow.com. You also have the right to lodge a complaint with the Italian supervisory authority — Garante per la protezione dei dati personali (garanteprivacy.it).

9. Security

We take reasonable technical and organisational measures to protect your data (HTTPS/TLS, security headers, access controls, reputable processors). No method of transmission is 100% secure.

10. Children

The site is not directed at children, and we do not knowingly collect data from anyone under 16.

11. Changes to this policy

We may update this Policy; the “Last updated” date reflects the latest version. Material changes will be indicated on this page.

12. Contact

Questions about this Policy or your data: hello@aleflow.com · WhatsApp +39 349 855 2515 · aleflowstudio, Milan, Italy.