Your data, in plain words.
What I collect when you use this site, why, where it is kept, for how long, and how to get it back or deleted.
Last updated 31 October 2026
The short version
- No ads, no analytics, no tracking pixels. Nothing is sold or shared for marketing.
- I only get personal data when you send it: a form, the Clarity Check, the newsletter or a booking.
- It is used to reply to you and, if you ask, to prepare a proposal. Nothing else.
- You can see, correct or delete it at any time by writing to hello@gbwebsites.com.
Who is responsible
The data controller is Giuliano Barducci, trading as GB Websites, Italy, P.IVA 16560811008. Write to hello@gbwebsites.com for anything about your data. There is no separate data protection officer: you deal with me directly.
What I collect and why
Each row is one way your data reaches me. The legal basis is the reason the GDPR allows it.
| When | What | Why | Legal basis | How long |
|---|---|---|---|---|
| Contact form | Name, email, website, the service you picked, your message | To reply and, if you want, prepare a proposal | Steps you asked for before a contract (GDPR art. 6(1)(b)) | 24 months after our last exchange, unless you become a client |
| Clarity Check quiz | Your answers, name, email, website | To send your write-up and follow up on it | Your consent, given with the checkbox (art. 6(1)(a)) | 24 months, or until you withdraw consent |
| Knowledge base question | Your question, email and, if you add it, your website | To answer your question | Steps you asked for before a contract (art. 6(1)(b)) | 24 months after our last exchange, unless you become a client |
| Email address | To send tips about websites that bring in work | Your consent (art. 6(1)(a)) | Until you unsubscribe | |
| Booking a call | Name, email, the time you pick and anything you write | To hold the call | Steps you asked for before a contract (art. 6(1)(b)) | Kept by Calendly under its terms; my copy as for the contact form |
| Every form | Your country (two letters, from Cloudflare). Your IP address goes to the spam check only and is never stored | To stop spam and know where enquiries come from | Legitimate interest in a site free of spam (art. 6(1)(f)) | With the enquiry |
| Only if you allow it | The first page you opened, the site that sent you, campaign tags | To know which pages and links bring enquiries | Your consent in the cookie settings (art. 6(1)(a)) | Sent with a form, kept with the enquiry |
| Clients | Contact and billing details, project files | To deliver the work and invoice it | Contract (art. 6(1)(b)) and tax law (art. 6(1)(c)) | As long as Italian tax law requires invoices and records to be kept |
Where it is kept and who helps
I use a few providers to run the site. They process data only on my instructions, under data processing terms.
| Provider | What they do | Where | Safeguard for transfers |
|---|---|---|---|
| Cloudflare | Hosting, the database that stores form entries, the spam check (Turnstile) | Worldwide network, company in the United States | EU US Data Privacy Framework, with EU standard contractual clauses as fallback (Cloudflare DPA) |
| Calendly | The booking calendar, only when you open it | United States | EU US Data Privacy Framework, with EU standard contractual clauses as fallback (Calendly DPA) |
| Titan | Email hosting for hello@gbwebsites.com, where replies come from | Set out in Titan’s policy | Titan’s privacy policy and processing terms |
Fonts and scripts are served from this site itself. No other company receives your data when you browse.
Your rights
Under the GDPR you can ask me to:
See your data
Get a copy of everything I hold about you (art. 15).
Correct it
Fix anything wrong or out of date (art. 16).
Delete it
Erase your data when there is no reason left to keep it (art. 17).
Limit or object
Pause the use of your data, or object to use based on legitimate interest (arts. 18 and 21).
Take it with you
Receive what you gave me in a common format (art. 20).
Withdraw consent
Unsubscribe or change your cookie settings at any time. It does not affect what happened before.
Write to hello@gbwebsites.com. I reply within one month. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or the authority where you live, such as the ICO in the United Kingdom.
AI on this site
No AI system reads your messages or makes decisions about you. The Clarity Check result comes from fixed rules I wrote, not from AI, and it is a suggestion, not a decision.
The site itself was designed and coded with the help of AI tools, and some articles are drafted with AI. Every article is reviewed and edited by me before it is published, and each one says so at the end.
Visitors outside the EU
I do not sell or share personal information, as those words are used in US state privacy laws such as California’s. Emails I send identify me, include a way to unsubscribe, and unsubscribes are honoured promptly, in line with the rules in the United States, Canada, the United Kingdom and Australia.
Children
This site is for businesses. It is not meant for children under 14, and I do not knowingly collect their data.
Changes to this policy
When something changes, for example a new provider, I update this page and the date at the top.