Privacy Policy
Last updated: 10 July 2026
Who we are
infinity-designer ("we", "us", "our") is the data controller for the personal data processed through this website, infinity-designer.com. Our registered address is Via Giuseppe Parini 31, 20862 Arcore (MB), Italy, VAT IT 03847520968. For any question about this policy or your personal data, write to support@infinity-designer.com — this is also our dedicated address for privacy requests.
What data we collect
We collect only what we need to respond to your enquiry, deliver a service you’ve engaged us for, or run this website:
- Contact / quote-request data: name, email address, phone number (optional), and — where you give it to us as part of a project (invoicing, delivery, contracts) — a postal address. Collected via the "Request a quote" form and any direct email or phone contact.
- Engagement data: if a quote turns into a paid engagement, the same categories above, plus the details of the project itself (brief, files you share, invoicing information) needed to deliver and invoice the work.
- Website usage data (analytics): if you accept analytics cookies, Google Analytics 4 collects pseudonymous usage data (pages viewed, approximate location at city level, device and browser type, referring site). This only runs after you actively consent — see our Cookie Policy for full detail.
- Technical/security data: basic server logs and a spam-prevention signal on the contact form (a hidden "honeypot" field and submission timing) to block automated abuse. No fingerprinting or tracking beyond what’s needed to stop spam.
We do not collect payment card details directly — where applicable, payments are handled by a third-party payment/invoicing provider that has its own privacy notice.
Why we process it, and on what legal basis
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Responding to a quote request or enquiry | Name, email, phone, project details | Art. 6(1)(b) — pre-contractual steps taken at your request |
| Delivering and invoicing an engaged project | Name, email, phone, postal address, project/invoicing data | Art. 6(1)(b) contract performance; Art. 6(1)(c) legal obligation |
| Keeping accounting and tax records | Invoicing data | Art. 6(1)(c) legal obligation |
| Site analytics (Google Analytics 4) | Pseudonymous usage data | Art. 6(1)(a) consent — loads only after you accept analytics cookies |
| Preventing spam and abuse of the contact form | Submission metadata, honeypot signal | Art. 6(1)(f) legitimate interest (site security) |
We never sell your personal data, and we never use it for marketing you haven’t asked for.
How long we keep it
- Enquiries that don’t turn into a project: up to 24 months from your last contact with us, then deleted, unless you ask us to delete it sooner.
- Engaged-project and invoicing data: kept for the duration of the engagement plus the period required by Italian civil and tax law (generally 10 years for accounting and invoicing records, per Art. 2220 of the Italian Civil Code and applicable tax rules).
- Analytics data (Google Analytics 4): retained per our GA4 configuration, currently 14 months, then automatically deleted by Google.
- Contact-form security/anti-spam metadata: kept only as long as needed to operate the anti-abuse check, typically a few days.
Your rights (GDPR)
As a data subject under the GDPR, you have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure ("right to be forgotten") — ask us to delete your data, subject to any legal obligation we have to keep it (e.g. invoicing records).
- Restriction — ask us to limit how we use your data in certain circumstances.
- Portability — receive the data you gave us in a structured, machine-readable format, or have it transferred to another controller where technically feasible.
- Object — object to processing based on our legitimate interest, and to any direct marketing at any time.
- Withdraw consent — where processing relies on consent (analytics cookies), withdraw it at any time via the "Cookie preferences" link in the footer, with no effect on processing carried out before withdrawal.
- Lodge a complaint — with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or the supervisory authority in your EU member state of residence, if you believe your data has been processed unlawfully.
To exercise any of these rights, write to support@infinity-designer.com. We respond within one month, as required by GDPR Art. 12(3) (extendable by two further months for complex requests, with notice).
Children
This website and our services are directed at businesses and adult individuals seeking design services. We do not knowingly collect personal data from children under 16.
Security
We apply reasonable technical and organisational measures (encrypted connections, access controls, minimal data collection) to protect the personal data we hold. No online service can guarantee absolute security, but we review our practices as the site and our tooling evolve.
Changes to this policy
We may update this policy as our services, tooling or the law changes. The "last updated" date at the top of the page reflects the latest revision; material changes will be reflected here before they take effect.
Contact
Data controller: infinity-designer, Via Giuseppe Parini 31, 20862 Arcore (MB), Italy. Privacy requests: support@infinity-designer.com.
Questions about this policy? Contact us