🔒 Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

Last updated: January 2025

1. Information We Collect

Personal Information

  • • Name, email address, phone number
  • • Company information and business details
  • • Billing and shipping addresses
  • • Payment information (processed securely by third parties)

Technical Information

  • • CAD files and technical specifications
  • • Manufacturing requirements and preferences
  • • Project communications and correspondence
  • • Website usage data and analytics

Automatically Collected Data

  • • IP address and location data
  • • Browser type and device information
  • • Pages visited and time spent on site
  • • Cookies and tracking technologies

2. How We Use Your Information

Service Delivery

  • • Process and fulfill manufacturing orders
  • • Provide quotes and technical consultations
  • • Communicate about project status and updates
  • • Handle billing and payment processing

Business Operations

  • • Improve our services and user experience
  • • Analyze usage patterns and preferences
  • • Develop new features and capabilities
  • • Ensure security and prevent fraud

Communications

  • • Send order confirmations and updates
  • • Provide customer support
  • • Share relevant industry insights (with consent)
  • • Send marketing materials (opt-in only)

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties.

Limited Sharing

  • • Trusted service providers (payment processors, shipping companies)
  • • Manufacturing partners (only necessary technical information)
  • • Legal compliance (when required by law)
  • • Business transfers (merger, acquisition, asset sale)

Data Protection Measures

  • • All third parties sign confidentiality agreements
  • • Technical data shared on need-to-know basis only
  • • Regular audits of data handling practices
  • • Secure data transmission and storage protocols

4. Data Security

Technical Safeguards

  • • 256-bit SSL encryption for data transmission
  • • Secure servers with regular security updates
  • • Multi-factor authentication for staff access
  • • Regular security audits and penetration testing

Physical Security

  • • Restricted access to manufacturing facilities
  • • Secure storage for physical documents
  • • Surveillance systems and access controls
  • • Clean desk and clear screen policies

Staff Training

  • • Regular privacy and security training
  • • Confidentiality agreements for all employees
  • • Role-based access to customer data
  • • Incident response procedures

5. Your Privacy Rights

Access and Control

  • • Request access to your personal information
  • • Correct inaccurate or incomplete data
  • • Delete your account and associated data
  • • Export your data in a portable format

Communication Preferences

  • • Opt out of marketing communications
  • • Choose communication channels
  • • Set frequency preferences
  • • Update contact information

Legal Rights (where applicable)

  • • Right to be forgotten (GDPR)
  • • Data portability rights
  • • Right to restrict processing
  • • Right to object to certain uses

6. Cookies and Tracking Technologies

Types of Cookies

  • • Essential cookies (required for site functionality)
  • • Analytics cookies (site usage and performance)
  • • Preference cookies (user settings and choices)
  • • Marketing cookies (with explicit consent)

Cookie Management

You can control cookies through:

  • • Browser settings and preferences
  • • Our cookie consent banner
  • • Opt-out links in marketing emails
  • • Third-party opt-out tools

7. Data Retention

Retention Periods

  • • Account information: Until account deletion
  • • Project data: 7 years for business records
  • • Payment information: As required by law
  • • Marketing data: Until consent withdrawal

Secure Deletion

  • • Automated deletion of expired data
  • • Secure overwriting of storage media
  • • Certificate of destruction for sensitive data
  • • Regular purging of backup systems

8. International Data Transfers

We may transfer your data internationally for processing and storage. When we do:

  • • We ensure adequate protection through appropriate safeguards
  • • We use standard contractual clauses approved by regulators
  • • We conduct due diligence on international partners
  • • We maintain records of all international transfers

9. Contact Us

If you have questions about this Privacy Policy or your personal information:

Privacy Officer: privacy@geppetto.studio

Data Protection: dpo@geppetto.studio

General Inquiries: legal@geppetto.studio

Response Time: We respond within 30 days

10. Policy Updates

We may update this Privacy Policy periodically. When we make material changes:

  • • We will notify you via email or website notice
  • • We will provide a 30-day notice period for significant changes
  • • We will maintain previous versions for reference
  • • Continued use indicates acceptance of changes