1. Data controller
magicforestdesign, Via Canton, 38, 00144 Roma (RM), Italy. hello@magicforestdesign.com. This policy covers data collected via magicforestdesign.com.
2. Data collected
- Contact forms: name, email, website, message and project type
- Checkout: first name, last name, email, phone, country
- Payment: processed by Stripe (not stored by us)
- Server logs: IP address, browser type, pages visited, timestamps
- Language preference cookie (mfd_lang, 1 year)
3. Legal basis and purpose
We process your data to respond to enquiries (legitimate interest), to fulfil contracts for services purchased, and with your consent for optional communications. We comply with EU GDPR, Italian D.Lgs. 196/2003 as amended by D.Lgs. 101/2018, and Garante Privacy guidelines.
4. Data retention
Enquiries: 12 months. Client project data: 5 years from project completion. Payment records: 10 years (Italian fiscal law requirements).
5. Your rights
Under GDPR you have the right to access, rectify, erase, restrict processing and port your data. Contact hello@magicforestdesign.com. You may also lodge a complaint with the Garante per la protezione dei dati personali (garanteprivacy.it).
6. Third-party processors
Stripe (payment processing, stripe.com/privacy). No personal data is sold or shared with advertising networks.