Privacy Policy
This policy explains how VaCa Marquetry (“we”, “us”) handles personal data when you visit vacamarquetry.shop, send an enquiry, or contact us on WhatsApp. It is provided under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable Italian law.
1. Data controller
VaCa Marquetry — handcrafted marquetry art studio, Italy
Email: vacamarquetrysales@gmail.com
You can write to this address with any question or request about your personal data. Business registration details (legal name, registered address and, where applicable, VAT number) will be published on this page.
2. What data we collect
Enquiry forms
When you use one of our forms (custom portrait, artwork enquiry, contact, or project enquiry) we collect the information you enter, such as:
- name, email address and, if you choose, phone number;
- your message and enquiry details (e.g. subject, preferred size, budget range, occasion, desired date, notes);
- photographs you choose to upload for a portrait preview;
- for project enquiries: company name, role, project type and scale.
When you click a WhatsApp button, we record the click in our enquiry system (the page you were on, the artwork you were viewing, the time, and the technical and campaign data described below). Conversations on WhatsApp itself are provided by WhatsApp (Meta) under its own terms and privacy policy.
Technical and campaign data
To understand which page or campaign led to an enquiry, your browser stores a random visitor identifier, a session identifier, the page you first arrived on, the referring website, and campaign parameters from the link you followed (for example utm_source, utm_campaign, and Google or Meta click identifiers such as gclid, gbraid, wbraid or fbclid). This information stays in your browser and is sent to us only together with an enquiry or a WhatsApp click. See our Cookie Policy for details.
Analytics and advertising measurement
Only if you accept cookies, we use Google Analytics 4 to understand how the website is used, and Google Ads measurement to learn which advertisements lead to enquiries.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Replying to your enquiry, preparing a preview or quotation | Steps taken at your request before a contract — art. 6(1)(b) |
| Carrying out a commission or purchase (production, updates, delivery, certificate) | Performance of a contract — art. 6(1)(b) |
| Invoicing, accounting and tax obligations | Legal obligation — art. 6(1)(c) |
| Knowing which page or campaign led to an enquiry, and reporting enquiries and sales back to advertising platforms (e.g. Google Ads) using the click identifier from your visit | Legitimate interest in measuring the effectiveness of our advertising — art. 6(1)(f); you may object at any time |
| Website analytics and advertising cookies | Your consent — art. 6(1)(a), given via the cookie banner and revocable at any time |
Providing your name and email is necessary for us to reply. All other fields are optional.
4. Who processes your data
We do not sell your personal data. To run the studio we use the following service providers, who process data on our behalf:
- Hostinger — website hosting;
- Make (Celonis) — automation that receives form submissions and routes them to our systems;
- Airtable — our customer and enquiry records;
- Google — email (Gmail), storage of uploaded photos (Google Drive), Google Analytics and Google Ads measurement;
- Telegram — internal notifications to the studio when a new enquiry arrives;
- WhatsApp (Meta) — if you choose to contact us on WhatsApp;
- shipping carriers and insurers — to deliver a purchased work.
Some of these providers are located outside the European Economic Area (for example in the United States). Where this happens, transfers rely on the safeguards provided by the GDPR, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
5. How long we keep your data
- Enquiries that do not lead to a commission: kept only for as long as needed to answer your enquiry and any follow-up you request, then deleted.
- Customer and order records: for the duration of the commission and, for accounting documents, for the period required by law (in Italy, generally 10 years).
- Uploaded photos: kept only for as long as needed to prepare your preview and, if you commission a portrait, to complete it; then deleted.
You can ask us to delete your enquiry and photos at any time by writing to vacamarquetrysales@gmail.com, unless we are required by law to keep them.
6. Your rights
You have the right to access your personal data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting processing carried out before withdrawal. To exercise these rights, email vacamarquetrysales@gmail.com.
You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country of residence.
7. Security
The website is served over an encrypted (HTTPS) connection, and access to enquiry records is limited to the studio.
8. Changes to this policy
We may update this policy when our services or legal requirements change. The date at the top of this page shows the latest version.