Last updated: 19 October 2026
This Privacy Notice explains how Scripts & Styles collects and processes personal data when you visit scriptsandstyles.dev, contact us, request services, work with us, or receive a business communication from us.
1. Data controller
Data controller: SILLO ROBERT (trading as Scripts & Styles)
VAT number: IT02627350461
Location: Lucca, Italy
Privacy contact: hello@scriptsandstyles.dev
Website: https://scriptsandstyles.dev
For the processing of personal data relating to our own business activities, we act as data controller. Where we process personal data on a client’s behalf in delivering services, our role and responsibilities are governed by the applicable agreement.
2. Personal data we process
Depending on your interaction with us, we may process:
- Contact and professional information: name, email address, telephone number, role, business name and other information you choose to provide.
- Enquiries and project information: messages submitted through our contact form, emails, project briefs, proposals, correspondence and related files.
- Customer and administrative information: contractual details, service history, invoicing and payment-related records.
- Technical information: IP address, browser and device information, server logs and security events generated when you use our website.
- Website measurement and tracking information: online identifiers and usage information collected through analytics and other third-party technologies, where enabled.
- Business prospect information: relevant company and professional contact information obtained from public business websites, directories, professional profiles or other sources, together with the history of business communications and objections.
Please avoid submitting sensitive personal data unless we specifically request it for a legitimate purpose.
3. Purposes and legal bases
We process personal data for the following purposes, under the legal bases indicated in Article 6 of the EU General Data Protection Regulation (GDPR):
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and preparing requested proposals | Steps taken at your request before entering into a contract (Art. 6(1)(b)), or legitimate interests (Art. 6(1)(f)) where appropriate |
| Providing services and managing client relationships | Performance of a contract (Art. 6(1)(b)), or legitimate interests (Art. 6(1)(f)) for business contacts who are not contracting parties |
| Invoicing, accounting and compliance with statutory duties | Legal obligation (Art. 6(1)(c)) |
| Website operation, security and prevention of misuse | Legitimate interests (Art. 6(1)(f)), where applicable |
| Managing professional contacts and assessing potential business opportunities | Legitimate interests (Art. 6(1)(f)), subject to a balancing assessment and applicable marketing and communications laws |
| Non-essential analytics, advertising and tracking technologies | Consent (Art. 6(1)(a)) where required, including under applicable cookie rules |
Where we rely on legitimate interests, you may object to processing on grounds relating to your particular situation, subject to the conditions of the GDPR. You may object to direct marketing at any time.
4. Contact forms and communications
When you contact us through the website or by email, we use the information you provide to respond, assess your request, prepare a proposal if requested, and maintain the relevant correspondence. Fields identified as required in the contact form are necessary to process your enquiry; providing other information is voluntary.
We use Hostinger Mail to manage business email communications. Information submitted through the website may also be processed by the technical services supporting the website and our internal contact-management workflow.
5. Business prospecting and direct marketing
We may research businesses and professional contacts to identify relevant opportunities for our services. Sources may include publicly available business websites, business directories and professional profiles. We may record the source, reason for potential relevance, contact history and any request not to be contacted again.
The fact that contact details are publicly available does not, by itself, authorise unsolicited marketing emails. We assess whether each proposed communication is permitted under the applicable rules on electronic communications and direct marketing. Where prior consent is required, we must obtain it before sending the communication. A legitimate interest under the GDPR does not override separate consent requirements for electronic marketing.
You can object to the use of your personal data for direct marketing at any time by writing to hello@scriptsandstyles.dev or replying to a message you receive. We will stop the relevant marketing activity and may retain minimal information on an exclusion list to respect your request.
6. Service providers and recipients
Personal data may be accessible, to the extent necessary, to providers that support our operations, including:
- Hostinger: website hosting and business email services.
- Google: website analytics and business information management, including Google Sheets where used for internal contact records.
- Other analytics, advertising and embedded-content providers: where their services are enabled on the website.
- Professional advisers, administrative providers and public authorities: where required by law or necessary for legitimate business purposes.
Depending on the service, recipients may act as processors on our behalf or as independent controllers. Where required, we use contractual and organisational safeguards appropriate to the processing.
We do not sell personal data.
7. International data transfers
Some technology providers may process or make personal data accessible outside the European Economic Area. Where a transfer is subject to Chapter V of the GDPR, it must rely on an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses, together with any supplementary measures required by the circumstances.
The countries and transfer mechanisms applicable to each enabled provider must be confirmed against the actual service configuration and contractual documentation.
8. Retention periods
We retain personal data only for as long as reasonably necessary for the relevant purpose, unless a longer period is required by law or needed to establish, exercise or defend legal claims.
- Contact enquiries that do not lead to a client relationship: proposed operational period of 12 months after the last meaningful interaction, subject to implementation and exceptions for ongoing discussions or disputes.
- Prospect research and communications that do not lead to a relationship: proposed operational period of 6 months after the last meaningful interaction, followed by deletion or documented reassessment, subject to applicable law.
- Client project and contractual correspondence: for the duration of the relationship and thereafter for the period necessary to meet contractual, legal or evidentiary requirements.
- Invoices and mandatory accounting records: for the period required under applicable Italian law, generally 10 years for relevant accounting records, subject to specific obligations.
- Marketing exclusion records: minimal data for as long as reasonably necessary to ensure that an objection continues to be respected.
- Website and security logs: according to the actual hosting and security configurations and operational necessity.
- Analytics and tracking data: according to the retention settings of each active service and applicable consent choices.
The proposed 12-month and 6-month periods above must be adopted in practice, not merely stated in this notice.
9. Cookies, analytics and embedded content
Our website uses Google Analytics 4 and may use additional analytics, advertising or tracking technologies. It also includes third-party embedded content. Depending on their configuration, these services may collect technical information, set or read cookies, or transmit data to their providers.
Strictly necessary technologies may be used for the operation and security of the website. Non-essential cookies and tracking technologies that require consent must not be activated before valid consent has been obtained. Users must be able to refuse such tracking and, where consent is used, withdraw it as easily as they gave it.
The website’s cookie and tracking configuration, including the names of all active providers, cookie durations, purposes and consent controls, is subject to technical verification. A dedicated cookie policy and functioning consent-management interface may be required.
10. Your rights
Subject to the conditions of applicable law, you have the right to request access to your personal data, rectification, erasure, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests and to direct marketing at any time. Where processing is based on consent, you may withdraw consent without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact hello@scriptsandstyles.dev. We may request information reasonably necessary to verify your identity. We will respond within the periods required by law, normally within one month, subject to permitted extensions.
You may lodge a complaint with the Garante per la protezione dei dati personali, the Italian data protection authority: www.garanteprivacy.it.
11. Security
We take technical and organisational measures appropriate to the risks of processing personal data. These measures are reviewed in light of the systems and providers actually used. No transmission or storage system can guarantee absolute security.
12. Automated decision-making
We do not currently state that we carry out solely automated decisions producing legal or similarly significant effects. If such processing is introduced, we will provide the information required by applicable law before it takes place.
13. Third-party websites
Our website may contain links to external websites or embedded services. Those providers may process personal data under their own privacy notices and terms.
14. Updates and contact
We may update this notice to reflect changes to our services, providers, processing activities or legal requirements. The current version will be published on this page.
For questions or requests concerning personal data, contact hello@scriptsandstyles.dev.
SILLO ROBERT — Scripts & Styles
Lucca, Italy
VAT: IT02627350461