Legal
Privacy notice
Last updated 21 October 2026.
Who is responsible
AYO Consulting di Erica Franco Oliveira, Via Urbino, 17/C, 26023 Crema CR, Italy, P.IVA 01868610195, is the data controller for personal data collected through growwithayo.com. Contact: through the contact form, or by post to the address above.
What this site does not do
No analytics, no tracking pixels, no advertising tags and no embedded third-party content. Fonts and scripts are served from this site. The only page that talks to another service is Contact: the form is run by Wix Forms, so what you type there goes to Wix when the page loads the form and when you send it.
What is collected, why, and for how long
| Purpose | Data | Legal basis | Kept for |
|---|---|---|---|
| Replying to an enquiry sent through the form | Name, company, email, your message | Steps taken at your request before a contract, GDPR art. 6(1)(b) | 24 months after the last exchange |
| Preparing and running an engagement | Contact details, project correspondence, invoices | Performance of a contract, art. 6(1)(b), and legal obligation, art. 6(1)(c) | Ten years, as Italian civil and tax law requires |
| Keeping the site secure | Server logs: IP address, time, page requested | Legitimate interest in a secure site, art. 6(1)(f) | As set by Wix in its own retention policy |
Who else sees it
Only providers that process data on my behalf under a written agreement (GDPR art. 28): Google Workspace (Google Ireland Limited) for email, and Wix.com Ltd. for hosting the website and for the contact form (Wix Forms), which stores each enquiry and sends a copy to my business email. Nothing is sold, and nothing is shared for marketing.
If you book a call through the Calendly link, you leave this site and book on calendly.com. Calendly handles what you enter there under its own privacy policy, and I receive the booking details to hold the call.
Transfers outside the European Economic Area
Wix.com Ltd. is based in Israel, a country the European Commission recognises as giving an adequate level of protection, and stores data in its data centres in Ireland and the United States; transfers to the United States and other countries without an adequacy decision are made under the European Commission's Standard Contractual Clauses. Google may process email data outside the European Economic Area under the safeguards set out in its data processing terms for Google Workspace, including the Standard Contractual Clauses.
Your rights
Under GDPR articles 15 to 22 you can ask for access, correction, deletion, restriction or portability, and you can object to processing. Use the contact form or write to the address above. You may also complain to the Garante per la protezione dei dati personali (garanteprivacy.it). No decision about you is made by automated means.
AI use
AI tools are used in delivery. No client personal data or confidential material is entered into a consumer AI tool, and any AI system built for a client is documented against its obligations under Regulation (EU) 2024/1689.
Changes
If this notice changes, the date at the top changes with it.