Privacy · Updated on 20 October 2026
Privacy and cookie policy.
How we handle your data when you visit this website or write to us. In short: we collect only what we need, we sell nothing to anyone, and you can ask us at any time to see, correct or delete your data.
Data controller
Nalu is a brand of Marco Bagiacchi, registered at Via Piana, 36 – 06026 Pietralunga (PG), Italy, VAT IT03882380540. Nalu is a network of independent professionals coordinated by Marco Bagiacchi, who is the controller of the data collected through this website.
Contact: ciao@naluwebagency.com · Certified email (PEC) marco.bagiacchi@spidmail.it
What data we collect
- Data you send us through the contact form or the site chat: name, email, phone if provided, company, the service you are interested in, indicative budget and timing, the text of your messages and the language you write in. The site chat works with predefined automatic replies: messages reach our team, who replies to you in person.
- Technical data of the submission: the page you write from and some anti-spam checks (for example the time spent on the page). When enabled, the Cloudflare Turnstile anti-spam service checks that the message is not sent by an automated program, only at the moment you send it.
- Browsing data: technical information collected automatically by the servers hosting the site (for example IP address, date and time, browser type, pages requested), used to run the site and keep it secure.
- Preferences saved in your browser: light or dark theme, sound, animations and your cookie choices. They stay on your device and are not sent to us.
- Analytics, only if you accept them: see the section Cookies.
We do not ask for, and do not want to receive, special categories of data (for example health data): please do not include them in your messages.
Why we use them and on what legal basis
| Purposes | Legal basis |
|---|---|
| Replying to your requests, sending you an email confirmation and preparing a quote | Pre-contractual steps you requested (art. 6.1.b GDPR) |
| Carrying out the project, invoicing and managing the relationship | Contract and legal obligations (art. 6.1.b and 6.1.c GDPR) |
| Protecting the form and the chat from spam and abuse | Legitimate interest in the security of the site (Art. 6.1.f GDPR) |
| Running the site and remembering your preferences | Legitimate interest; technical tools that do not require consent |
| Measuring website use statistically | Your consent through the cookie banner (art. 6.1.a GDPR) |
| Keeping proof of your cookie choices | Obligation to be able to demonstrate consent (Art. 7(1) and 6(1)(c) GDPR) and legitimate interest in protecting our rights (Art. 6(1)(f) GDPR) |
Providing contact details is necessary to receive a reply; statistics are optional and you can refuse them with no consequence on your use of the site. We do not use your data for automated decisions or profiling.
Who we share data with
Nalu works as a network of professionals. To reply to your request and carry out the project, your data may be shared with the network collaborators involved (for example developers, designers, advertising specialists). The project’s lead specialist, who issues the contract and invoice, is always named in the quote and processes the data as an independent controller for their part of the work.
Data is also processed by providers who help us run the site, appointed as data processors where required:
| Provider | Service |
|---|---|
| Hostinger | Hosting of the website, the contact form and email |
| Cloudflare | Turnstile anti-spam service, when enabled, at the moment a message is sent |
| Google Tag Manager and Google Analytics 4, only if you accept statistics |
Some providers, such as Google and Cloudflare, may also process data outside the European Union on the basis of appropriate safeguards, for example the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.
We do not sell or hand over your data to third parties for marketing purposes.
How long we keep them
- Contact requests and chat that do not become a project: up to 24 months after the last exchange, then they are deleted.
- Project and billing data: for the duration of the relationship and then for 10 years, as required by tax law.
- Server browsing data: for the time strictly necessary for security and operation, according to the hosting provider’s settings.
- Analytics: up to 14 months in the analytics tool.
- Cookie choice register: 24 months, after which the records are deleted automatically.
- Preferences in the browser: until you delete them; your cookie choice is asked again after 6 months or if the tools we use change.
Your rights
You can ask at any time to access your data, correct it, delete it, restrict its processing, object, receive it in a portable format and withdraw any consent given, without affecting what was done before the withdrawal (Arts. 15–22 GDPR). We reply within one month.
Just write to ciao@naluwebagency.com or to our certified email (PEC) marco.bagiacchi@spidmail.it. If you believe your data is not being processed lawfully, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
The site is not aimed at children under 14 and we do not knowingly collect their data.
Cookies and similar tools
The website uses technical tools to work and remember your preferences. They do not require consent and stay on your device.
With your consent we use Google Tag Manager e Google Analytics 4 to understand, in aggregate form, how the site is used; Google Analytics 4 does not store IP addresses. These tools stay off until you accept them in the banner; closing the banner with the X counts as rejecting them.
To be able to demonstrate the choices made, as the law requires, every time you accept, reject or change your preferences we record on the server that hosts the site: a random code stored in your browser, date and time, your choice, the banner version, the page and language, the browser type and your IP address without its last part. Your choice code is shown under “Manage cookie preferences”: you can give it to us to exercise your rights over this data.
| Name | Type and purpose | Duration |
|---|---|---|
| nalu-consent | Technical: remembers your cookie choices and the choice code | 6 months |
| nalu-theme, nalu-sound, nalu-motion | Technical: preferred theme, sound and animations | Until you delete them |
| nalu-intro | Technical: avoids repeating the intro animation | Until you close the browser |
| _ga, _ga_* | Google Analytics 4 statistics, only with consent | Up to 14 months |
You can change your mind at any time: . You can also delete cookies and site data from your browser settings.
This policy may be updated: the date at the top shows the latest version. The Italian version is the legally binding one.