How your personal data is handled when you visit this site or write to me, in line with the EU General Data Protection Regulation (GDPR) and the UK GDPR / Data Protection Act 2018.
Last updated: 21 September 2026
follid lab is based in Italy and works with clients across Europe, the UK and beyond. This policy is written to meet the standards of both the EU Regulation 2016/679 (GDPR) and the UK GDPR (the UK's retained version of the GDPR, together with the Data Protection Act 2018) — the two frameworks are closely aligned, and this single policy is intended to satisfy both. If you are visiting from outside the EU/UK, the same principles of transparency apply, and the rights described below are honoured for any visitor who writes in, regardless of where you are based, to the extent your local law provides for them.
The data controller is:
Fiorillo Denise
Italian tax code (C.F.) FRLDNS97C42G713S — VAT no. (P.IVA) 02130010479
Via Rimini 3, Pieve a Nievole (PT), Italy
Email: denise@follidlab.it
Phone: +39 335 6214250
For any request about your personal data, you can write directly to this email address.
The form on the Contact page collects: your name, your brand/business name (optional), your email address, and the message you write.
This data is never sent to a server or stored on this site: when you fill in and send the form, your device simply opens your default email application with an email already drafted, addressed to denise@follidlab.it. The message then travels from your email account to mine like any ordinary email, and from that point on is handled under normal email-management practice (see section 5).
If you contact me through the links on the site to Instagram (DM) or Google Calendar (booking a call), the data you share in those contexts is handled under the respective privacy policies of Meta/Instagram and Google, which I encourage you to review before proceeding.
This site uses technical cookies, necessary for it to function, and — only with your consent, collected through the cookie banner — statistics cookies (Google Analytics) and marketing cookies (Meta Pixel). You'll find the full list of cookies, their purpose, duration, and how to manage or withdraw consent in the Cookie Policy.
The hosting provider (Netlify, Inc.) may automatically collect, for technical operation and security reasons, generic information such as IP address and browser data, under its own privacy policy, available at netlify.com/privacy.
The site loads typefaces (fonts) directly from Google Fonts' servers: this means your IP address is transmitted to Google when the page loads, under Google's policy available at policies.google.com/privacy.
Where you consent, the site also uses: Google Analytics 4 (Google Ireland Limited), to analyse site traffic and usage in aggregate form — policy at policies.google.com/privacy; Meta Pixel (Meta Platforms Ireland Limited), to measure the effectiveness of Instagram/Facebook advertising and for retargeting — policy at facebook.com/privacy/policy.
Data you send me by email or DM is kept in my mailbox/social account for as long as needed to handle your request and, if we work together, for the duration of the professional relationship plus the period required by Italian tax and civil law for record-keeping (usually 10 years). After that, data is deleted or anonymised.
Your data is never sold or passed to third parties for their own marketing purposes. It may be accessed, within the limits of their respective roles, by: the controller; any collaborators or suppliers acting as data processors (e.g. accountant, email or hosting providers); the statistics and marketing tool providers listed in section 3.3 (Google, Meta), where you have consented; competent authorities where required by law.
Some of the technical providers this site relies on (Netlify, Google Fonts, Google Analytics, Meta Pixel) are based in the United States. Transfers of data to these providers rely on appropriate safeguards under the GDPR and UK GDPR — such as Standard Contractual Clauses (and, for UK transfers, the UK's International Data Transfer Addendum) — or adherence to recognised adequacy frameworks, such as the EU-US Data Privacy Framework and its UK extension (the "UK-US Data Bridge").
At any time, by writing to the email address in section 2, you can exercise the rights set out in Articles 15-22 of the GDPR / UK GDPR, including the right to:
You also have the right to lodge a complaint with a supervisory authority: if you are in the UK, the Information Commissioner's Office (ICO); if you are in the EU, your national data protection authority, or Italy's Garante per la protezione dei dati personali at garanteprivacy.it; if you are elsewhere, the equivalent authority in your own country, where one exists.
For the detailed list of cookies used, their purpose, retention period and how to give, refuse or withdraw consent, see the Cookie Policy. You can change your preferences at any time from the "Cookie preferences" link at the bottom of every page.
This policy may be updated over time, for example following changes in the law or new tools used on the site. Please check back periodically. The last-updated date is shown at the top of the page.