Your details, handled with care.
Who is responsible
Luca Giorgio trading as Modo Vivo is the controller of the personal information described in this notice. I operate from the United Kingdom and work with businesses in the UK and Italy. Contact hello@modovivostudio.com about your information or any privacy concern.
Enquiries and replies
When you contact me, I receive your name, email address and message, plus your business name if you choose to provide it. Name, email and a message are needed to respond through the form. Providing information is your choice; you can also contact me by email. Please do not include sensitive information or unnecessary details about other people.
I use these details to consider your request, reply and discuss a possible project. For a project you may contract for personally, the basis is steps taken at your request before a contract (Article 6(1)(b)). For general enquiries or when you contact me on behalf of a business, the basis is my legitimate interest in responding to relevant enquiries and managing business relationships (Article 6(1)(f)).
You receive an automatic confirmation and a personal response. An optional, unticked box lets you request links to my work, services and website preparation guide in that one confirmation. I use your consent for that optional content (Article 6(1)(a)) and keep a record of the request with your enquiry. Leaving it unticked does not affect your enquiry. It does not subscribe you to a newsletter or future marketing. You can withdraw that consent or ask me to stop contacting you by replying or emailing hello@modovivostudio.com; this cannot recall an email already sent.
Cookies and your choices
Essential preference storage: modo-vivo-cookie-preferences is stored in your browser for six calendar months. It contains your choice, the consent-notice version, the analytics configuration identifier and the dates of your decision and expiry. It is shared by the English and Italian pages on this domain. I do not send this preference record to Google or maintain a central database of it. The legal basis for remembering your choice is my legitimate interest in respecting and applying your privacy preferences.
Optional analytics cookies: _ga and _ga_* identify a browser and maintain session information when you accept analytics. This site configures them for up to 180 days without automatically extending their lifetime on each visit. They are not required to use the website or submit an enquiry.
You can accept or reject optional analytics in the banner, or use Cookie settings at any time. Rejecting, ignoring or closing the banner without accepting keeps Analytics off. If your browser cannot save a choice, Analytics stays off. Withdrawing consent stops future measurement, removes accessible Analytics cookies and reloads the page to stop already-loaded code. Withdrawal does not affect the lawfulness of earlier processing or automatically delete information already collected. Preferences apply to this browser and domain; clearing storage or using another device may require a new choice.
Optional Google Analytics
Only with your consent (Article 6(1)(a)), Google Analytics 4 measures visits and successful enquiry submissions to help me understand which pages are useful and improve the site. Google processes browser identifiers, visited page addresses, basic device/browser information, session information and approximate location derived from the connection. This is not anonymous simply because it does not include your name.
The site sends page views and a successful-enquiry event. It does not send names, email addresses, business names, message text or enquiry IDs to Analytics. Query strings and URL fragments are removed from the page addresses sent by our code. When a campaign link is used, separately labelled source, medium, campaign and content values may be sent; values containing spaces, email addresses or other unsupported characters are rejected. Google Signals, advertising personalisation and Enhanced Measurement are disabled. No Google Analytics tag or measurement request is initiated by this site before valid consent or after rejection; Advanced Consent Mode and cookieless analytics pings are not used.
User-level and event-level retention is set to two months, without resetting that period on new activity. Google applies deletion through its retention process. Standard aggregated reports are not subject to that two-month setting and can remain longer.
Hosting and security
OpenAI Sites and Cloudflare deliver and protect the website and process the requests needed to serve pages and the enquiry form. Connection and security information can include IP addresses, browser information, requested addresses, timestamps and error records. The application does not intentionally log enquiry contents or store them in a website database. Enquiries pass through the hosting service to the email providers. Security processing is based on my legitimate interest in keeping the service available and preventing abuse (Article 6(1)(f)).
Cloudflare Turnstile checks whether form requests are likely to be automated. It processes technical signals such as connection, browser and device information. Cloudflare acts as a processor when protecting this site and also as a separate controller when using signals to improve its bot detection. Its own notice explains that separate processing, rights and contact details. Turnstile is a security check, not optional audience analytics. You can email me instead of using the form.
The public site uses security controls that are separate from optional analytics. I do not use automated decisions with legal or similarly significant effects on you; a blocked form is not a decision about accepting your project.
Who receives information
Resend delivers the enquiry notification and confirmation and processes recipient addresses, message content and delivery information. Microsoft 365 stores and handles correspondence in my business mailbox. Google receives Analytics information only when you consent. OpenAI Sites and Cloudflare provide the hosting and security described above. These providers may use their contracted subprocessors. Access is limited to what is needed for each service; I do not sell enquiry details or add them to advertising audiences.
How long information is kept
Enquiries that do not become a project: up to 12 months after our last substantive contact, including the associated request for optional resource links. The mailbox is reviewed to remove expired enquiries. This is a retention policy requiring mailbox housekeeping, rather than automatic deletion by the website. A specific legal obligation or dispute may require limited records to be kept longer; unnecessary material is removed.
If we work together, relevant information becomes part of the project record. Only records needed to deliver the work, meet applicable tax or accounting obligations, or establish, exercise or defend legal claims are retained for those purposes. The necessary period is assessed when the project closes, using the applicable obligation or claim deadline; this does not justify keeping every enquiry indefinitely.
Resend normally retains email content and delivery logs for 30 days on its standard plans, with backups persisting for seven days. Its published terms allow up to 90 days to delete remaining customer data after account termination. Copies in my Microsoft 365 mailbox follow the enquiry or project policy above; deleted and backup copies are also subject to the provider’s recovery and backup processes.
Cookie choices and Analytics retention are described above. Hosting/security records follow the providers’ service retention and are used for troubleshooting, abuse prevention and any specific legal requirement. I do not keep a separate visitor log database. Contact me for information about a particular record or a deletion request.
Processing outside the UK and EEA
These services use international infrastructure and support, including in the United States. Resend stores message content and delivery logs in the US. Selecting Ireland as the sending region controls email routing, not storage location. Microsoft, Google, Cloudflare and OpenAI may also process information internationally; this site does not promise UK-only or EU-only storage.
For restricted transfers, the relevant protections may include a recognised adequacy decision or contractual safeguards. Resend’s data processing agreement includes EU Standard Contractual Clauses and the UK Addendum. Cloudflare, Microsoft and Google also publish transfer provisions in their data protection terms. OpenAI’s applicable privacy information describes its international processing. These terms and notices explain the providers’ protections; contact hello@modovivostudio.com to request information or a copy of the safeguards applicable to your data.
Access, correction and other rights
Depending on the circumstances, you can request access to your information, correction, erasure, restriction of processing and portability. You can withdraw consent at any time using Cookie settings for Analytics or by contacting me for the optional email content. Withdrawal does not affect earlier lawful processing.
Email hello@modovivostudio.com to exercise a right. I normally respond within one month and will explain any lawful extension or limitation. I may need proportionate information to confirm your identity; please do not send identity documents unless requested. Requests are normally free of charge.
Your right to object
You can object to processing based on legitimate interests, including enquiry follow-up and security processing, for reasons related to your situation. I must stop unless there are compelling legitimate grounds or the processing is needed for legal claims. You can object to direct marketing at any time, and I will stop using your information for that purpose. Contact hello@modovivostudio.com or reply to an email.
Questions and complaints
You can contact me first, but you do not have to do so before complaining to a supervisory authority. You can complain to the UK Information Commissioner’s Office (ICO) or the relevant authority where you live, work or believe an infringement occurred, including the Garante in Italy.
Changes to this notice
The date above identifies the current notice. If the purpose, providers or optional processing materially change, I will update this information and request new consent where needed. This notice covers this website and initial enquiries; a future software product or materially different service will have its own relevant privacy information.