Privacy Policy

Last updated: 2 July 2026

1. Who I Am and Contact Details

The website ELBO (elenabotti.com) is owned and operated by Elena Botti, acting as the Data Controller for your personal information. I am committed to protecting your privacy and handling your data in a transparent, secure manner in full compliance with the General Data Protection Regulation (GDPR).

For any questions regarding this Privacy Policy or how your personal data is handled, you can reach me at:

2. Information I Collect and Legal Bases

When you interact with my website, I may collect certain personal information. Under the GDPR, I must have a valid legal basis to process your data.

  • Contact & Project Inquiries: When you submit a request through the contact form (hosted nativamente by Squarespace), I collect your first name, last name, email address, subject, project details, budget information, and desired timeline.

    • Legal Basis: Performance of a contract or taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

  • Newsletter Subscription: If you voluntarily sign up for the ELBO inner Circle newsletter, I collect your email address.

    • Legal Basis: Your explicit consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

  • Browsing Data & Analytics: This website uses Google Analytics to understand how visitors interact with the site. It collects anonymized and aggregated data such as device type, browser information, pages visited, time spent, and general geographic location.

    • Legal Basis: Your explicit consent (Article 6(1)(a) GDPR), granted only if you actively accept cookies through the website's cookie banner.

3. How Your Information Is Used

I use your personal data strictly for the following purposes:

  • To respond to your project requests, custom design inquiries, or licensing collaborations.

  • To send you studio updates, freebies, promotions, and new collection announcements (only if you subscribed to the newsletter).

  • To maintain the security, functionality, and optimal performance of this website.

  • To comply with legal, tax, or financial accounting obligations.

4. Newsletter and Third-Party Processors

If you join the ELBO inner Circle, your name and email address are securely transferred to and managed through MailerLite, my email marketing service provider. I never subscribe buyers or contact form users automatically; your opt-in must be direct and voluntary. You can withdraw your consent and unsubscribe at any fraction of a second by clicking the link at the bottom of any email.

5. Google Analytics and Cookies

To comply with EU data protection laws, this website implements a cookie consent banner powered by Squarespace. No tracking or non-essential cookies from Google Analytics will be placed on your browser until you actively click "Accept". You can change your preferences or block cookies directly through your browser settings at any time.

6. Data Sharing and Disclosure

I take data privacy seriously and never sell, rent, or trade your personal information. Your data is shared only with trusted service providers strictly necessary to run this website and deliver my services:

  • Squarespace: Website hosting, content management, and secure infrastructure.

  • MailerLite: Newsletter distribution and list management.

  • Google LLC: Website traffic analytics (anonymized data).

7. International Data Transfers (Outside the EU)

As an EU-based solopreneur, I process your data primarily within the European Economic Area (EEA). However, some of my trusted third-party providers (Squarespace, MailerLite, Google) operate globally and may store data in the United States. To ensure your personal data remains fully protected, these transfers are safeguarded under the EU-U.S. Data Privacy Framework and the European Commission’s Standard Contractual Clauses (SCCs).

8. Data Retention

I store your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

  • Inquiries & Invoices: Correspondence data is kept for up to five (5) years to satisfy standard legal, commercial, and tax recording requirements.

  • Newsletter: Your subscription data is securely kept until you actively decide to unsubscribe or request deletion.

9. Your Rights under the GDPR

If you reside within the European Union, you hold the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data I hold about you.

  • Right to Rectification: You can request the correction of any inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): You can request that I delete your personal data, provided it is no longer required for legal, tax, or contract obligations.

  • Right to Object/Restrict: You can object to the processing of your data based on legitimate interests or restrict its processing.

  • Right to Lodge a Complaint: If you believe your data privacy rights have been violated, you have the full legal right to lodge a formal complaint with your local Data Protection Authority (such as the Garante per la protezione dei dati personali in Italy).

To exercise any of these rights, please contact me directly at: byelbo@elenabotti.com.

10. External Links

This website contains direct links to external platforms, including my Etsy store, Spoonflower, and social media channels. Please note that I do not control and am not responsible for the privacy practices of external websites. I strongly encourage you to review their respective privacy policies upon arrival.

11. Changes to This Privacy Policy

I may occasionally update this policy to align with new legal requirements or business practices. Any revisions will be instantly reflected on this page with a modified "Last updated" date at the very top.