1. Data Controller

The data controller for personal data collected through dppreadiness.agency is:
Nora Design Italiano Co. Ltd.
Ho Chi Minh City, Vietnam
Email: corradonora@noradesignitaliano.com

2. Data We Collect

We collect personal data only when you voluntarily provide it through our forms:

Pre-Audit Questionnaire: Company name, contact name, job title, company email, phone number, number of employees, questionnaire answers.
Contact Form: Name, company name, email, message content.
Analytics: We use Google Analytics 4 (GA4) to collect anonymous usage data (pages visited, session duration, device type). No personal identification.

3. How We Use Your Data

To prepare and deliver your personalized DPP Assessment proposal (Pre-Audit submissions)
To respond to your inquiries (Contact Form submissions)
To manage our client relationship and service delivery
We do not use your data for automated decision-making or profiling
We do not sell, rent or share your personal data with third parties for commercial purposes

4. Data Storage and Processors

Form data is processed through:

Netlify Forms: Form data is stored on Netlify Inc. servers (USA). Netlify is GDPR-compliant. See netlify.com/privacy.
Airtable: Pre-Audit data is transferred to our Airtable CRM (Airtable Inc., USA) for proposal preparation. Airtable is GDPR-compliant.
Google Analytics 4: Anonymous usage data via Google Ireland Ltd., compliant with GDPR.

5. Legal Basis for Processing

Pre-Audit forms: Legitimate interest and pre-contractual measures (Article 6(1)(b) GDPR)
Contact forms: Legitimate interest (Article 6(1)(f) GDPR)
Analytics: Legitimate interest for website improvement (Article 6(1)(f) GDPR)

6. Data Retention

We retain your data for as long as necessary to deliver the service you requested, plus a maximum of 3 years for legitimate business purposes. You can request deletion at any time (see Section 7).

7. Your Rights (GDPR)

If you are located in the EU/EEA or elsewhere with applicable privacy law, you have the right to:

Access your personal data we hold
Rectify inaccurate personal data
Erase your personal data ("right to be forgotten")
Restrict processing of your data
Object to processing based on legitimate interest
Data portability — receive your data in a structured, machine-readable format

To exercise these rights, email: corradonora@noradesignitaliano.com. We will respond within 30 days.

8. Cookies

This website uses only essential cookies (session management) and Google Analytics 4 cookies (anonymous usage statistics). We do not use advertising or tracking cookies. You can disable analytics cookies through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via a notice on this page. The date at the top of this page indicates when it was last updated.

10. Contact

For privacy-related questions or to exercise your rights:
Nora Design Italiano Co. Ltd. · DPP Readiness Agency
Email: corradonora@noradesignitaliano.com
Ho Chi Minh City, Vietnam