Last updated: 20 October 2026
Privacy Policy
This policy explains what personal information I collect when you ask for a quote, contact me or buy a service through fenegroni.com, and how I use it. If you have any questions, email me at [email protected].
1. Who I am
I am Filippo Negroni, a sole trader trading as fenegroni.com. I am the controller of your personal information under UK data protection law. If you live in the European Economic Area (EEA), the EU General Data Protection Regulation (GDPR) also protects your information, and this policy gives you the same rights. My address is Flat 47 Aviator House, Addlestone, KT15 2US.
2. What I collect
- Your name and email address, when you ask for a quote, email me or buy a service.
- Your billing details, when you pay. Stripe collects these on its checkout page. I see your name, email, billing address and the last four digits of your card. I never see or store your full card number.
- Anything you choose to tell me in your quote request, in emails or during our video calls, such as the problem you would like help with.
- Information about your health, such as ADHD, if you choose to share it. UK law treats this as special category information, so I take extra care with it.
- Whether you asked for occasional updates, by ticking the box on the quote form or by joining the newsletter on my site, and the date and time you did so.
- Your WhatsApp name, number and messages, if you choose to message me there.
When you send the quote form, your browser sends your message, your email address, your name, if you give it, and whether you ticked the updates box to Cloudflare. Cloudflare passes them to my inbox as an email, and I reply to the address you gave. When you join the newsletter, your browser sends your email address to Cloudflare in the same way. My site has no analytics and no advertising trackers, and it sets no cookies.
The quote page can show prices in your currency. It guesses your currency from your browser's language settings, and that guess stays in your browser. To get exchange rates, the page asks my own server on fenegroni.com, and it sends nothing about you.
3. Why I use it
| Purpose | Legal basis |
|---|---|
| To reply to your quote request and agree the work with you. | Steps you ask me to take before we make a contract. |
| To provide the service you bought and to book our video calls. | Performance of our contract. |
| To use any health information you share, such as ADHD, only to help with the problem you asked about. | Your explicit consent. You can withdraw it at any time by emailing me. |
| To take payment, issue receipts and invoices, and handle refunds. | Performance of our contract. |
| To keep accounting records for tax purposes. | Legal obligation. |
| To reply to enquiries from people who have not bought anything, by email or on WhatsApp. | My legitimate interest in answering questions about my services. |
| To email you occasional updates and new examples, only if you ticked the box on the quote form or joined the newsletter. | Your consent. You can withdraw it at any time by using the unsubscribe link in any update or by emailing me. |
I send updates only to people who ticked the box or joined the newsletter. I keep a record of when and how each person agreed, so I can show that they gave consent. I do not sell or share your information for marketing.
4. Who else receives it
I use a small number of trusted providers to run my business. Each one handles your information under its own privacy policy.
- Stripe processes payments, receipts and invoices.
- Cloudflare manages my domain, delivers this website to your browser, receives what you send through the quote form and the newsletter form and passes it to my inbox, and forwards email sent to [email protected] to my inbox. Like any web host, it sees visitors' IP addresses for security.
- Google hosts my email through Gmail. The site also loads its fonts from Google Fonts, so your browser connects to Google's servers when you visit.
- GitHub hosts this website. Like any web host, it records visitors' IP addresses in its server logs for security.
- WhatsApp, run by Meta, carries your messages if you choose to message me there. Meta handles them under WhatsApp's own privacy policy.
These providers may store data in the United States. They protect transfers out of the UK and the EEA with safeguards that UK and EU law recognise, such as the UK-US data bridge, the EU-US Data Privacy Framework or standard contractual clauses.
5. How long I keep it
- I keep client records and invoices for 6 years after the end of the tax year they relate to, because UK tax law requires it.
- I keep emails and WhatsApp messages from people who do not become clients for up to 2 years after our last contact, and then I delete them.
- I keep your email address on my updates list until you unsubscribe. I keep the record of your consent for 2 years after you unsubscribe, so I can show that you agreed, and then I delete it.
6. Your rights
You have the right to:
- ask for a copy of the information I hold about you;
- ask me to correct information that is wrong;
- ask me to delete your information, unless the law requires me to keep it;
- object to or ask me to limit how I use your information;
- ask me to send your information to you or to another organisation in a portable format.
To use any of these rights, email me at [email protected]. I will reply within one month.
7. Complaints
If you are unhappy with how I handle your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. If you live in the EEA, you can also complain to the data protection authority in your country.
8. Changes to this policy
If I change this policy, I will update the date at the top of this page.