Privacy Policy

This policy explains what personal data we collect through the indigocompany.it website, why we collect it, who we share it with, and what rights you have, in compliance with Regulation (EU) 2016/679 ("GDPR").

1. Data controller

2. What data we collect and why

a) Order requests and the contact form

When you send a request from the cart or write to us through the "Get in touch" box, we collect your name, email address, and any notes you write. We use this data solely to reply to you and, if the project moves forward, to carry out the development engagement agreed with you.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR) for order requests; legitimate interest in responding to people who contact us (Art. 6.1.f GDPR) for the general contact form.

b) Card payment

If you choose to pay online, your card details are collected and processed directly by Stripe, Inc., on a payment page hosted by Stripe itself: your card number never passes through our website or our servers. We only receive confirmation of the successful payment from Stripe, along with your name and email.

Legal basis: performance of a contract (Art. 6.1.b GDPR).

c) PayPal payment

If you choose to pay with PayPal, you are taken to the page of PayPal (Europe) S.à r.l. et Cie, S.C.A., where you log in and approve the payment: your PayPal credentials and your account or card details never pass through our site. We receive from PayPal the confirmation of payment, the amount and the email address of the PayPal account you paid with, which we keep with the order. PayPal's page may set its own cookies, under its own policy.

Legal basis: performance of the contract (Art. 6.1.b GDPR).

d) Analytics and marketing cookies

If you consent via the banner shown on your first visit, we use Google Analytics to understand how the site is used, and Google Ads to show relevant advertising and measure its effectiveness. You can withdraw consent at any time via the "Cookie preferences" link in the site footer. Until you consent, these tools remain switched off.

Legal basis: consent (Art. 6.1.a GDPR). See section 6 below for the full list of cookies used.

e) Live chat

The site has a live chat provided by Tawk.to. The service works in two ways:

• If you turned on the "Live chat" category in the cookie banner, the chat loads automatically. This lets us see, in technical form, that you are on the site, your approximate country and which page you are viewing (for example a package or the cart), and write to you first if we think we can help.
• If you have not turned it on or have not chosen yet, the chat is not loaded and no data is sent to Tawk.to. If you click the "Chat" button, we first ask you to turn on the chat cookies: the service is loaded only if you confirm.

When you write in the chat, the service processes what you write and technical information (for example IP address, browser and device) and sets cookies to recognise the conversation. If you have a cart, it also sends us the packages it contains, so we can answer you better. We use this data only to reply to you.

Legal basis: your consent (Art. 6.1.a GDPR) for recognising your visit before you write; your request to start the chat (Art. 6.1.b GDPR, pre-contractual measures) and our legitimate interest in replying to people who contact us (Art. 6.1.f GDPR) for the conversation.

Quote calculator and email reminders

If you use the quote calculator, you see the result on the page without leaving any data. If you ask to receive it by email, we process your email address, your name (optional), the choices you made in the calculator, your language and the page or campaign you came from (utm parameters). To limit abuse we use an anonymous, temporary fingerprint of the connection that cannot be traced back to you and is deleted within one hour: we do not store your IP address.

• Sending the quote you asked for — legal basis: your request (art. 6.1.b GDPR, pre-contractual steps).
• 3 email reminders (after 2, 5 and 10 days) — only if you tick the dedicated box and confirm with one click in the email we send you (double opt-in). Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time from the link in every email, with no consequences.
• Reminders for an unfinished order — if you start an order without completing it, we may send you up to 2 reminders about that order. Legal basis: the legitimate interest in completing a request that you started yourself (art. 6.1.f GDPR). You can stop them with one click.
• Tracked sharing links: they only count how many times they are opened, per day, with no personal data.

Domain checker and «when it frees up» alerts

When you use the domain checker, the name you type is sent to our server only to query the public domain-name registries (RDAP, WHOIS or registry services) and show you the result. We do not save the names you search for and we do not link them to you. Results stay in temporary memory for a few hours (the file name is a fingerprint and the name does not appear in the content), so we do not overload the registries. To limit abuse we keep for at most one hour an anonymous, non-reversible fingerprint of the IP address, with only the number of checks performed, and we record anonymous counts (for example the number of checks per day and the most searched extensions). The request to the registries contains only the domain name and no data about you.

If you ask to be notified when a domain frees up, we process your email address, the domain indicated, the language and the dates of request and confirmation, to check the domain every day and write to you once when it shows as available (and once earlier, if it enters a release phase). Legal basis: your consent (Art. 6.1.a GDPR), given with a double confirmation: until you confirm with one click in the email we check nothing and do not write to you again. You can cancel the alert, and all alerts linked to your address, at any time from the link at the bottom of every email. We keep the alert for up to 12 months (unconfirmed alerts are deleted after 7 days; completed ones within 30 days of the last email). A maximum of 3 active alerts per address.

3. Who we share your data with

We do not sell or hand over your data to third parties for their own marketing purposes. We only share it with:

• Stripe, Inc. (payment processing) — acting as a data processor under the GDPR; the transfer of data to the United States relies on the Standard Contractual Clauses approved by the European Commission.
• PayPal (Europe) S.à r.l. et Cie, S.C.A. (PayPal payments) — only if you choose to pay with PayPal; it processes the data as an independent controller, under its own privacy policy.
• Google LLC (Google Analytics and Google Ads) — only if you have given consent; the same safeguard (Standard Contractual Clauses) applies to the transfer outside the EEA.
• Tawk.to Inc. (live chat) — only with your consent; it processes the data on our behalf as a data processor.
• Our email service provider, to send communications related to your request or order.
• Our hosting provider, which technically hosts the site and the data collected.

4. How long we keep your data

• Quote calculator contacts: up to 12 months after the last interaction if they do not become customers; you can ask for deletion at any time from the link at the bottom of our emails. The anonymous anti-abuse fingerprint is kept for one hour at most.
• Order requests and contact messages: up to 24 months from the last interaction, unless you request earlier deletion.
• Data related to confirmed payments: kept in line with Italian tax law requirements (10 years), as legally required.
• Cookie consent choice: kept until you change it yourself via the "Cookie preferences" link.

5. Your rights

As a data subject, you have the right to:

• access your personal data (Art. 15 GDPR);
• request rectification if inaccurate (Art. 16 GDPR);
• request erasure (Art. 17 GDPR);
• request restriction of processing (Art. 18 GDPR);
• receive your data in a structured, portable format (Art. 20 GDPR);
• object to processing based on legitimate interest (Art. 21 GDPR);
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, write to us at [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with your own country's supervisory authority.

6. Cookies we use

The banner shown on your first visit lets you allow all cookies, keep only the essential ones, or choose category by category (analytics, marketing and, if enabled, live chat). Your choice lasts 6 months, after which we ask again; you can change it at any time from "Cookie preferences" at the bottom of every page. Here is the full list:

Strictly necessary cookies (the first two in the table) do not require consent, since they are essential to the site's functioning. All others remain switched off until you explicitly accept them.

7. Security

We adopt appropriate technical and organisational measures to protect your data: HTTPS across the entire site, password-protected access to the admin area, and no payment data is ever stored on our own servers (it is handled entirely by Stripe).

8. Changes to this policy

We may update this policy from time to time, for example when adopting new tools on the site. The date of the most recent update is always shown at the top of the page.