Privacy policy

Data controller

The data controller is Elizabeth Lee Bell – The Sourcing Agent, sole trader, Località Valverde 21/3, 15040 Castelletto Monferrato (AL), Italy, VAT IT02758130062, REA AL-314717. For any privacy matter you can write to elizabeth@sourcingagent.it.

What data I process

• Data you send me through the brief form on this site, by email, phone or WhatsApp: name, company, contact details, information about your project and any file you attach.
• Browsing data: when you visit the site, the hosting server automatically records technical data such as IP address, browser, date and time of the request. These data are used only to keep the site working and secure.

The brief form only asks for what I need to reply: your name, your email and a short description of what you would like to make are required, everything else is optional. When you send it, its contents are delivered to my inbox by email, and a copy is sent to the email address you entered.

Why and on what legal basis

• Replying to your enquiries and preparing quotes – pre-contractual measures (Art. 6(1)(b) GDPR).
• Managing the project and the working relationship – performance of a contract (Art. 6(1)(b) GDPR).
• Accounting and tax obligations – legal obligation (Art. 6(1)(c) GDPR).
• Security and proper functioning of the site – legitimate interest (Art. 6(1)(f) GDPR).

Providing your data is optional, but without it I cannot reply to you or work on your project. I do not use your data for automated decisions or profiling.

Who receives the data

Your data are not sold or disclosed to the public. They may be processed, only as far as necessary, by:

• the website hosting provider: Vercel Inc. (United States);
• the service that delivers the brief form to my inbox: Resend (Resend, Inc., United States);
• the email provider: Zoho Mail (Zoho Corporation, United States);
• my accountant, for tax purposes;
• the Italian workshops involved in your project, limited to what they need to produce it.

Vercel, Resend and Zoho may process data outside the European Union. In that case the transfer takes place on the basis of the safeguards provided by the GDPR (Articles 45–46), such as the standard contractual clauses approved by the European Commission.

If you contact me on WhatsApp, your messages are also handled by WhatsApp (Meta Platforms Ireland Ltd.) under its own privacy policy, which may involve a transfer outside the EU on the basis of the EU–US Data Privacy Framework or standard contractual clauses.

How long I keep the data

• Enquiries that do not lead to a project: up to 24 months from the last contact.
• Contracts, invoices and related correspondence: 10 years, as required by Italian law (Art. 2220 Civil Code).
• Server logs: only for as long as necessary for technical and security purposes, as set by the hosting provider.

Cookies

This site does not use profiling cookies, analytics or advertising trackers, and fonts are served from the site itself, so no data is sent to third parties while you browse. For this reason no cookie banner is required. If this changes, this policy will be updated and your consent will be requested where needed.

The only cookie used is a technical one (lang) that remembers the language you chose, for up to 12 months. It contains no personal data.

Your rights

At any time you can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format (Articles 15–22 GDPR). Just write to elizabeth@sourcingagent.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).