Income Foundry

Personal data protection

Privacy Notice

This notice explains what personal information we collect, why we use it, who may receive it, how long we keep it and the rights available to you.

Last updated:
Scope of this notice. Income Foundry is operated from Italy and offers digital products to customers including customers in the United Kingdom. This notice addresses the EU General Data Protection Regulation and, where applicable, the UK GDPR and the Data Protection Act 2018.
1

Controller and Contact Details

The Income Foundry website and brand are operated by:

  • Controller: Andrea Ricciarelli
  • Business address: Via Domenico Briziarelli 2, 06055 Marsciano (PG), Italy
  • Italian tax code / VAT number: 04005150547
  • Privacy email: support@income-foundry.com

The controller determines why and how personal information is processed through the website, forms, checkout and digital-product delivery process.

2

Information We Process

Information you provide

We may collect your name, email address, telephone number, postal address, billing details, company name, tax code or VAT number when these details are required.

Order information

We process information about your order, the product purchased, the amount, payment status and delivery of digital content.

Payment information

Full card details are collected and handled by the payment provider displayed at checkout. Income Foundry receives only the information required to confirm and administer the transaction.

Technical and usage information

Our systems and service providers may record IP address, device and browser type, request date and time, pages viewed, technical identifiers and security information.

Communications

If you contact us, we may retain the content of your message and the information needed to respond and keep a record of the request.

3

Why We Use Personal Information

Orders and delivery To process an order, confirm the purchase and provide digital files. Lawful basis: performance of a contract.
Billing and legal obligations To meet tax, accounting and other legal requirements. Lawful basis: compliance with a legal obligation.
Customer support To answer questions, resolve delivery issues and manage pre-contract enquiries. Lawful basis: contract or steps taken before entering a contract.
Security and misuse prevention To protect the website, transactions and users. Lawful basis: our legitimate interests in operating a secure service.
Marketing emails Only where permitted and, when required, after separate consent. Lawful basis: consent, which may be withdrawn at any time.
Analytics and advertising For non-essential measurement or advertising tools enabled after your cookie choice. Lawful basis: consent where required.

Messages required to confirm an order, deliver a purchased product or provide requested support are service communications and are not promotional emails.

4

Purchases, Payments and Digital Products

The purchasing process is operated through systeme.io and the payment provider made available in the order form, such as Stripe or PayPal when enabled.

These providers process the information required for their services under their own privacy terms and may act as processors or independent controllers, depending on the activity.

Checkout information is required to complete the purchase, verify the transaction, meet tax and accounting obligations and deliver the digital product. If required information is not provided, the order cannot be completed.

5

Cookies and Similar Technologies

The website may use strictly necessary cookies for operation, security, checkout and storage of privacy choices.

Analytics, measurement or advertising technologies, including tools associated with Meta advertising campaigns when enabled, are used only in accordance with your choices in the cookie banner and applicable law.

You may change or withdraw non-essential cookie choices through the preference control available on the website. You may also use your browser settings, although blocking essential cookies may prevent parts of the checkout from working.

The cookie preference panel should display the current list of cookies, providers, purposes and retention periods used on the live website.

6

Recipients and Service Providers

Where necessary, personal information may be disclosed to:

  • website, funnel, hosting, email and digital-delivery providers;
  • payment and fraud-prevention providers;
  • accounting, tax, legal or technical advisers;
  • analytics and advertising providers, where permitted;
  • public authorities or other recipients entitled to receive information by law.

Providers acting on our instructions receive appropriate directions and may process only the information needed for the assigned service. We do not sell personal information.

7

International Data Transfers

Some technology, payment, email, analytics or advertising providers may process personal information outside the European Economic Area or the United Kingdom.

Where transfer restrictions apply, we rely on a recognised transfer mechanism. This may include an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, together with additional safeguards where required.

You may request information about the relevant safeguards by contacting us at the address in section 1.

8

How Long We Keep Information

  • Orders, invoices and accounting records: for the period required under applicable civil, tax and accounting rules.
  • Product access and delivery records: for as long as necessary to provide the service and document the purchase.
  • Customer-support requests: for the time needed to manage the request and establish, exercise or defend legal claims where necessary.
  • Marketing records: until consent is withdrawn, an objection is received or the applicable retention period ends.
  • Cookies and technical data: for the duration shown in the cookie preference panel or the period required for service security.

When the relevant period ends, information is deleted, anonymised or retained only where continued storage is required by law.

9

Your Rights and How to Complain

Subject to the conditions and exceptions in applicable data-protection law, you may have the right to:

  • request access to your personal information;
  • ask us to correct inaccurate or incomplete information;
  • request erasure of your information;
  • request restriction of processing;
  • receive or transfer certain information in a portable format;
  • object to processing based on legitimate interests or to direct marketing;
  • withdraw consent at any time, without affecting earlier lawful processing.

Rights depend on the lawful basis and circumstances of the processing. We may request information needed to verify your identity before responding.

To exercise a privacy right or raise a concern:
support@income-foundry.com

Supervisory authorities

You may lodge a complaint with the Italian Data Protection Authority. Where UK data-protection law applies, you may also contact the UK Information Commissioner’s Office. We encourage you to contact us first so we can try to address the concern.

10

Other Information

Automated decision-making

We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects on you.

Children

Income Foundry products and services are intended for freelancers, professionals and businesses. They are not designed to intentionally collect personal information from children.

Security

We use technical and organisational measures proportionate to the nature of the processing to reduce the risk of loss, misuse, unauthorised access or disclosure.

Changes to this notice

We may update this notice when our services, providers or legal requirements change. The date at the top identifies the current version.