Privacy policy

1. Introduction and Scope

La Effe Digital LLC (“Company,” “we,” “us,” or “our”) is a Single-Member Limited Liability Company organized under the laws of the State of New Mexico, United States (Entity ID: 0008095411), with its registered office at 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA. We operate the website at laeffedigital.com (the “Site”) and provide landing pages, websites, custom software, hosting, website care plans, and technology consulting (collectively, the “Services”).

This Privacy Policy (“Policy”) describes how we collect, use, process, store, share, and protect personal information obtained through the Site and our Services. It applies to all visitors, prospective clients, clients, and their representatives (“you,” “your”) who interact with us in any capacity. For the personal information described in this Policy, La Effe Digital LLC is the data controller and can be contacted at info@laeffedigital.com.

By accessing or using the Site, submitting a contact form, engaging our Services, or otherwise interacting with us, you acknowledge that you have read and understood this Policy. If you do not agree, you must discontinue use of the Site immediately.

This Policy does not govern third-party websites, applications, or services that may be linked to or from our Site, nor the websites we build or host for our clients, which are governed by Section 10. We are not responsible for the privacy practices of third parties and encourage you to review their policies independently.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information you voluntarily provide, including when you:

• Submit our contact form (name, email address, company name, service of interest, budget range, project description, and any other details you include)
• Communicate with us by email, WhatsApp (including voice messages), telephone, or video call
• Request a free preview or proposal, enter into a service agreement, or purchase Hosting or a Website Care Plan
• Provide billing information for our Services (such as company name, VAT number, tax code, and address, and the name, role, and contact details of your representatives)
• Send us materials for your project, such as your logo, texts, photographs, and business information, or grant us access to your domain or other accounts
• Send us requests for changes to your website

The fields of the contact form marked with an asterisk are required: without them, we cannot respond to your request.

2.2 Information Collected Automatically

When you visit our Site, certain technical information is collected automatically, including IP address, browser type, device and operating system, pages requested, and the date and time of the visit. This information is recorded by our hosting provider and by the content delivery networks that serve some of the technical libraries used by the Site's pages (Section 5.1), and is used for operational and security purposes only. We do not use analytics tools on the Site.

2.3 Cookies and Tracking Technologies

The Site does not use cookies or similar technologies, and does not store information on your device. We do not use analytics, advertising, retargeting, or cross-site tracking cookies. For this reason, the Site does not display a cookie consent banner. If this changes, we will update this Policy and request your consent where required by law.

2.4 Payment Information

Payments for our Services are made by bank transfer. We receive the information associated with the transfer, such as the name of the payer, the bank details shown in the transfer, the amount, and the date, through our payment and banking provider. We do not collect or store credit or debit card numbers.

2.5 Information from Other Sources

To prepare a preview or a proposal, we may consult publicly available information about your business, such as your existing website.

2.6 Sensitive Information and Information About Others

We do not request, and ask you not to send us, special categories of personal data, such as health information. If you provide us with personal information about other people, such as your employees or colleagues, or include it in the materials for your website, you represent that you are authorized to do so and that you have informed them as required by applicable law.

3. How We Use Your Information

We use the information we collect to:

• Respond to inquiries, schedule calls, and prepare previews and proposals
• Deliver, host, and maintain our Services, and handle your requests for changes
• Issue invoices, receive payments, and prepare the pre-filled self-invoice (TD17) we send as a courtesy to clients established in Italy
• Send transactional and service communications
• Protect the security of the Site and our Services, and detect and prevent fraud and abuse
• Enforce our Terms and Conditions, and establish, exercise, or defend legal claims
• Comply with legal obligations

We do not sell, rent, lease, or trade your personal information to any third party for marketing or commercial purposes under any circumstances. We do not send newsletters or promotional communications, we do not use your personal information for profiling, and we do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. We may use information that has been aggregated or anonymized so that it no longer identifies you for any lawful purpose.

4. Legal Bases for Processing (GDPR)

For individuals in the European Economic Area, the United Kingdom, or Switzerland, we process personal data on the following legal bases:

• Contractual necessity (Art. 6(1)(b) GDPR): to respond to your requests, prepare previews and proposals at your request, and perform our agreements with you
• Legal obligation (Art. 6(1)(c) GDPR): to comply with tax, accounting, and other legal obligations to which we are subject; where such obligations arise under laws of countries outside the European Union, we rely on our legitimate interest in complying with them (Art. 6(1)(f) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR): to protect the security of the Site and our Services, prevent abuse, manage our relationship with the businesses we work with, keep records of our communications, and establish, exercise, or defend legal claims
• Consent (Art. 6(1)(a) GDPR): where we specifically ask for it. You may withdraw consent at any time without affecting prior lawful processing.

5. Data Sharing and Disclosure

5.1 Service Providers

We share personal information, to the extent necessary, with the following service providers, which process it on our behalf or, for the services they provide directly to you or to us, as independent controllers under their own privacy policies:

• Vercel Inc. (United States): hosting of the Site and of the websites we build, and the function that receives the contact form
• Supabase Inc. (United States), with servers in the European Union (Ireland): database storing contact form submissions and the client data and documents needed for invoicing
• Resend (United States): sending of notification emails and of emails to clients
• Our business email provider (United States)
• Wise (payments and banking): receipt of payments and issuing of invoices
• WhatsApp (Meta group): messages with clients and prospective clients who choose to contact us there
• Cloudflare, Inc. (United States), for the cdnjs service, and jsDelivr: delivery of technical libraries used by the Site's pages, for which they receive the visitor's IP address
• GitHub, Inc. (United States): storage of the source code of the Site and of the websites and software we build, which may include personal information published on them
• Other software tools and cloud services we use to develop and manage our projects

Service providers acting on our behalf are contractually bound to use personal information only to provide their services to us.

5.2 Professional Advisors

We may share personal information with our accountants, legal advisors, and other professional advisors, who are bound by duties of confidentiality.

5.3 Legal Requirements

We may disclose your information if required by law, legal process, or to protect the rights, property, or safety of La Effe Digital LLC, our clients, or the public. Where legally permitted, we will attempt to notify you before any such disclosure.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to a successor entity. We will provide notice before your data becomes subject to a different privacy policy.

6. International Data Transfers

La Effe Digital LLC is based in the United States. If you are located outside the United States, the personal information you provide to us is sent to and processed in the United States, and some of our service providers process it in the United States or in other countries. Where personal information of individuals in the European Economic Area, the United Kingdom, or Switzerland is transferred to countries that do not provide an adequate level of protection, we rely on the adequacy decisions for the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, for certified recipients, on the Standard Contractual Clauses approved by the European Commission, or on other lawful mechanisms available under applicable law. You may request information about these safeguards by contacting us at info@laeffedigital.com.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, plus any additional periods required or permitted by law:

• Contact form submissions and communications that do not lead to an engagement: up to 3 years from the last contact
• Client data, agreements, invoices, and tax documents: for the duration of the relationship and up to 10 years after it ends, to comply with tax and accounting obligations and to establish, exercise, or defend legal claims
• Technical logs: for the period set by our hosting and delivery providers, generally short, and in any case up to 12 months, unless needed to investigate abuse or security incidents

We may retain information for longer where necessary to comply with a legal obligation or in connection with an actual or potential legal claim. When data is no longer needed, it is securely deleted or anonymized.

8. Data Security

We implement industry-standard technical and organizational security measures, including HTTPS/TLS encryption, encrypted data storage, access controls, secure cloud infrastructure, and server-side API key management. In the event of a data breach posing a risk to your rights, we will notify affected individuals and relevant authorities in the manner and within the time limits required by applicable law.

No method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your data and are not responsible for breaches outside our reasonable control.

9. Your Privacy Rights

9.1 General Rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, including processing based on our legitimate interests. You may also withdraw consent or lodge a complaint with a supervisory authority.

9.2 EEA, UK, and Swiss Residents (GDPR, UK GDPR, and Swiss Law)

You may exercise your rights under the GDPR, the UK GDPR, or Swiss data protection law by contacting us at info@laeffedigital.com. We will respond within one month, with a possible extension of two further months for complex requests, with prior notice. We may need to verify your identity before responding. Where a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on it, as permitted by law. Some rights are subject to limitations, for example where we must retain information to comply with a legal obligation or to establish, exercise, or defend legal claims. You may also lodge a complaint with the supervisory authority of the country where you live, work, or where the alleged infringement took place; in Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

9.3 United States Residents

We do not sell or share personal information for cross-context behavioral advertising. Where applicable U.S. state privacy laws grant you rights over your personal information, you may exercise them by submitting a verifiable request to info@laeffedigital.com, and we will respond within the time required by those laws. We will not discriminate against you for exercising your rights.

10. Websites We Build and Host for Clients

This Policy does not apply to the personal information of visitors to the websites we build, host, or maintain for our clients, including contact form submissions, technical logs, and, where activated, Google Search Console and Google Analytics data. For that information, our client is the data controller and we act as its data processor, on the terms set out in our agreement with the client. The privacy policy and cookie policy published on the client's website apply, and requests regarding that information should be addressed to the client; if we receive such a request, we will forward it to the client.

11. Children's Privacy

Our Site and Services are directed to businesses and professionals and are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected such information inadvertently, we will delete it immediately. Contact us at info@laeffedigital.com if you believe we may have collected information from a minor.

12. Do Not Track Signals

Our Site does not currently alter its data collection and use practices in response to Do Not Track (DNT) browser signals, as no industry-wide standard exists. We will revisit this position if a uniform standard is adopted.

13. Third-Party Links and Integrations

Our Site may contain links to third-party websites or tools, such as WhatsApp. These third parties have their own privacy policies, and we have no control over and accept no responsibility for their content or practices. We encourage you to review the privacy policy of any website you visit.

14. Portfolio and Case Studies

Unless expressly agreed otherwise in writing, we reserve the right to reference the existence of a client relationship, include completed work in our portfolio and marketing materials with the client's name, images, and a link, and include a “Realizzato da La Effe Digital” credit in the footer of the websites we build, as set out in our Terms and Conditions. For custom projects covered by a non-disclosure agreement, we do so only with the client's prior written consent. We will not disclose confidential project details without your prior written consent. To opt out, notify us in writing, including by email to info@laeffedigital.com.

15. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. We will revise the “Last updated” date at the top of this page. For material changes, we will make reasonable efforts to notify you via the Site or email. Continued use of the Site after any changes constitutes acceptance of the updated Policy.

16. Language

This Policy is drafted in English. Any translation is provided for convenience only, and the English version prevails.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Contact

La Effe Digital LLC

1209 Mountain Road Pl NE, Ste N

Albuquerque, NM 87110, USA

Email: info@laeffedigital.com

We aim to respond to all privacy-related inquiries within 30 days.