Privacy Policy

Last updated: 1 October 2026

1. Data controller

The controller of your personal data is , , VAT (“NEXORA DIGITAL”, “we”). You can contact us at .

2. What data we collect and why

a) Contact form, email and WhatsApp

When you write to us we process your name, email address, company name (optional), the service you are interested in, your estimated budget (optional), the content of your message and, if you use WhatsApp, your phone number.

• Purpose: replying to your request and preparing a quote.
• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Retention: up to 24 months after our last exchange, unless a contract follows.

b) Purchases in the Digital Store

Payments are handled by Stripe Payments Europe Ltd. on its secure checkout page. We never see or store your card details. We receive your name, email address, billing country, the product purchased and the payment status.

• Purpose: processing your order, delivering the download, customer support.
• Legal basis: performance of a contract (Art. 6(1)(b)) and compliance with tax and accounting obligations (Art. 6(1)(c)).
• Retention: accounting records are kept for 10 years as required by Italian law.

c) Project work

If you become a client, we process the data needed to deliver the project and issue invoices (Art. 6(1)(b) and (c) GDPR), for the duration of the contract and then for 10 years for accounting purposes.

d) Technical data and security

Our server processes your IP address and basic request data to deliver the website and to protect forms against abuse (rate limiting). Legal basis: our legitimate interest in keeping the service secure (Art. 6(1)(f)). Server logs are kept for no longer than 30 days.

e) Analytics (only with consent)

Analytics tools are loaded only if you accept the “Analytics” category in the cookie banner (Art. 6(1)(a) GDPR). You can withdraw consent at any time via Cookie settings. See our Cookie Policy.

3. Recipients and processors

We share data only with providers that help us run our business, bound by data processing agreements:

• our hosting provider (website and server infrastructure);
• Resend (transactional email delivery for the contact form and order emails);
• Stripe (payment processing — independent controller for payment data);
• Meta / WhatsApp, only if you choose to contact us on WhatsApp (independent controller);
• our accountant, for invoicing and legal obligations.

We do not sell your personal data and we do not use it for automated decision-making or profiling.

4. International transfers

Some providers may process data outside the European Economic Area (e.g. in the United States). In that case transfers are protected by an adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission’s Standard Contractual Clauses.

5. Your rights

Under Articles 15–22 GDPR you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw consent at any time without affecting prior processing. To exercise your rights, write to . You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the authority of your country.

6. Is providing data mandatory?

Fields marked as required in the contact form are needed to answer you; without them we cannot reply. Purchase data is required to complete an order.

7. Changes

We may update this policy. The current version is always available on this page with its date of last update.