Privacy Policy
Last updated: 06/06/2026
This Privacy Policy explains how personal data is collected, used and protected through this website: saracantagallo.com.
This website is owned and managed by Sara Cantagallo, freelance UX/UI Designer and Strategist for brands and e-commerce businesses.
For any privacy-related request, you can contact me at:
Email: saracantagallo16@gmail.com
1. Data Controller
The Data Controller is:
Sara Cantagallo
Email: saracantagallo16@gmail.com
At the moment, the activity is managed personally. Business and tax details may be updated in this Privacy Policy once a VAT number or professional business structure is opened.
2. What personal data is collected
Through the contact form on this website, I may collect the following personal data:
-
first name;
-
last name;
-
website URL;
-
email address;
-
phone number, if voluntarily provided;
-
selected service;
-
any information voluntarily included in the message field.
The website does not collect payment details, credit card information or bank details.
3. Why personal data is collected
The personal data provided through the contact form is used only for the following purposes:
-
to reply to your request;
-
to understand which service you are interested in;
-
to review your website or project before replying;
-
to arrange an introductory call, if needed;
-
to send information, details or a quotation related to the requested service;
-
to manage possible future professional collaboration.
Your data will not be used for newsletter, advertising, remarketing or automated marketing communications, unless this changes in the future and you are properly informed.
4. Legal basis for processing
The processing of your personal data is based on:
-
your request to be contacted and to receive information about a service;
-
the need to take pre-contractual steps before a possible collaboration;
-
the legitimate interest in managing professional communications and keeping track of client relationships;
-
legal obligations, where applicable.
5. How data is collected
Personal data is collected when you voluntarily fill in and submit the contact form on this website.
The contact form is created using Contact Form 7. The form is used only to send the request by email and is not intended to store form submissions in the website database.
6. Where data is stored
The data submitted through the contact form is received and stored in the email inbox connected to:
Some contact details may also be manually saved in the email address book/contact list, only when useful for managing the request or the professional relationship.
Data is not stored in a separate CRM or marketing platform.
7. How long data is kept
If a contact request does not lead to a collaboration, the data will not be intentionally stored as a client record and may be deleted when it is no longer needed to manage the request.
If the contact leads to a professional collaboration, the data may be kept for approximately 2 years, or longer where necessary to manage the working relationship, protect legitimate interests, or comply with legal, tax or administrative obligations.
8. Who can access the data
The data is accessed only by Sara Cantagallo.
Personal data is not sold, rented or shared with third parties for marketing purposes.
However, some technical service providers may process limited technical data as part of the normal functioning of the website and email services, including:
-
the website hosting provider, currently Hostinger;
-
the email service provider, currently Gmail/Google;
-
WordPress and installed plugins necessary for the website and contact form to work correctly.
These providers may process data according to their own privacy and security terms.
9. Payments
Payments for services are not processed through this website.
If a collaboration starts, payments will be arranged outside the website, usually by bank transfer. This website does not collect or store card details, payment details or online checkout information.
10. Cookies and analytics
At the moment, this website is intended to use only essential technical cookies needed for the website to work correctly.
Google Site Kit or Google Analytics may be added in the future to understand basic website performance and traffic. If analytics tools are activated, this Privacy Policy and the Cookie Policy will be updated accordingly, and, where required, a cookie consent banner will be added.
11. International users
The website is written in English and may be accessed by users in Europe and internationally.
If you contact me from outside the European Economic Area, your data will still be processed only for the purposes described in this Privacy Policy.
12. Data security
Personal data is handled with reasonable technical and organizational measures designed to protect it from unauthorized access, loss or misuse.
Access to the email account and devices used to manage requests is protected by password and, where available, additional security measures.
13. User rights
You have the right to request:
-
access to your personal data;
-
correction of inaccurate or incomplete data;
-
deletion of your personal data, where applicable;
-
restriction of processing;
-
objection to processing, where applicable;
-
information about how your data is processed.
To exercise your rights, you can send a request to:
You also have the right to lodge a complaint with the competent data protection authority, if you believe your personal data has been processed unlawfully.
14. Updates to this Privacy Policy
This Privacy Policy may be updated in the future, especially if new tools, analytics services, marketing activities, booking systems or payment methods are added to the website.
The updated version will always be published on this page.