Privacy policy

01Who is the controller

The data controller is Alex Edward, trading as edosign (website edosign.com). You can write to us at hello@edosign.com or on WhatsApp at +39 352 071 1359.

02What data we collect

• From the contact form: name, phone number (we also use it for WhatsApp), email, the service you are interested in, your message, the site language, date and time of sending, and the version of this notice you accepted.
• For security: your IP address is shortened (we drop the last part) and turned into a non-reversible code (hash), used only to limit spam. We also record the browser type.
• Anti-robot check: when you start filling in the form or open the sign-in page, Cloudflare Turnstile invisibly looks at a few technical signals from your browser (such as IP address, browser type and how you interact with the page) to tell whether you are a person. Usually you don’t have to do anything; only rarely does it ask for a click. We only receive the result of the check; Cloudflare handles this data under its own Turnstile privacy policy (cloudflare.com/turnstile-privacy-policy).
• Statistics, only if you accept them: with Vercel Web Analytics we count visits in an anonymous, aggregated way (page viewed, referring site, country, device and browser type). It uses no cookies and does not let us recognise you.
• On WhatsApp: if you message us on WhatsApp, the conversation goes through WhatsApp (Meta Platforms Ireland Ltd.), which processes data under its own privacy policy.

03Why we use it

• To reply to your request and, if you want, prepare a quote: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR), with the consent you give by sending the form (Art. 6(1)(a)).
• To protect the site from spam, bots and abuse (sending limits and the Cloudflare Turnstile check): legitimate interest (Art. 6(1)(f)).
• For anonymous statistics: only with your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which you can withdraw at any time from the cookie policy.

We do not use your data for advertising, we do not sell it and we do not profile you.

04Who processes it for us

• Supabase: database, with servers in the European Union.
• Vercel: website hosting and, only with your consent, anonymous statistics.
• Cloudflare: invisible anti-robot check (Turnstile) on the contact form and the sign-in page.
• Resend: sending the email that tells us about your request, the confirmation to you and our replies by email.

These providers act as data processors (Art. 28 GDPR). Some are based in the United States: transfers rely on the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

05How long we keep it

• Requests sent through the form: 24 months, then deleted automatically.
• Anti-spam data (hashed IP): 24 hours.
• Statistics: aggregated numbers only; the temporary identifier used to count visits resets every 24 hours.

06Cookies

We only use technical cookies and, if you accept them, anonymous statistics that use no cookies. No advertising, no profiling. The cookie policy lists everything and lets you change your choices at any time.

07Your rights

At any time you can ask us to access, correct or delete your data, restrict its use, receive it in a readable format or object to processing, and you can withdraw your consent (Arts. 15–22 GDPR). Write to hello@edosign.com or on WhatsApp: we reply within 30 days.

You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the authority in your country.

08Children

The contact form is not meant for anyone under 14. If we find we have received a child’s data, we delete it.

09Changes

If this notice changes, the updated version is published on this page with the new date.