Privacy Policy

Last updated: April 2026

1. Data Controller

Luca d'Alessandro, Italy — info@lucadalessandro.org
Website: lucadalessandro.org

2. What data we collect

We collect and process personal data in two scenarios:

When you purchase BLINDSPOT. — Stripe collects your name, email, and payment information directly. We receive your name and email from Stripe in order to deliver the PDF.
When you browse this website — if you consent to marketing cookies via the banner, the Meta (Facebook) Pixel records anonymous page views, clicks, and conversion events tied to a pseudonymous identifier. Without consent, the pixel does not load.

We do not collect card data. We do not run server analytics on this page.

3. How we use your data

To deliver the purchased PDF to your email
To respond to support requests you initiate
To measure advertising performance and build lookalike audiences on Meta (only if you consent)

We do not sell your data. We do not share your data with third parties beyond the sub-processors listed below.

4. Sub-processors

Stripe, Inc. (payment processing, USA) — stripe.com/privacy
Brevo (Sendinblue SAS, France) (transactional email delivery) — brevo.com/legal/privacypolicy
Supabase, Inc. (purchase database, USA/EU) — supabase.com/privacy
Netsons S.r.l. (hosting, Italy) — netsons.com/privacy-policy
Meta Platforms, Inc. (Meta Pixel, USA) — loaded only with your consent. facebook.com/privacy/policy

Fonts on this website are self-hosted. No data is transmitted to Google or any third party when you load this page before giving cookie consent.

5. Legal basis (GDPR Art. 6)

PDF delivery & order fulfilment — contract performance (Art. 6(1)(b) GDPR).
Invoicing and accounting records — legal obligation (Art. 6(1)(c) GDPR).
Meta Pixel & marketing cookies — your consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive).

6. Data retention

Your email and name are retained for as long as necessary to fulfil the purchase and to comply with applicable legal obligations — including Italian accounting retention rules (10 years for tax documents). Support-related correspondence is retained for up to 2 years.

Cookie-based identifiers set by Meta Pixel follow Meta's retention rules and can be revoked by withdrawing consent at any time (see Section 9).

7. Your rights (GDPR)

If you are in the EU, EEA, or UK, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict processing
Request data portability
Withdraw consent at any time (see Section 9)
Lodge a complaint with a supervisory authority — Italy: Garante per la Protezione dei Dati Personali; UK: ICO

To exercise any of these rights, contact: info@lucadalessandro.org. We respond within 30 days.

8. International transfers

Stripe, Meta, and Supabase process data on servers in the United States. These transfers are covered by Standard Contractual Clauses approved by the European Commission, in accordance with GDPR Chapter V.

9. Cookies and tracking

This website uses two categories of cookies and similar technologies:

Strictly necessary — none are set on this domain at present.
Marketing (Meta Pixel) — sets _fbp and related identifiers. Loaded only after you accept via the cookie banner. Lifetime: 90 days (rolling).

To change or withdraw your consent, use the button below. This clears your choice and the banner will reappear on your next page load.

10. Contact

For any privacy-related question: info@lucadalessandro.org