Privacy notice.

2. Who this does not cover

Praticale provides practitioners and studios with a website and a management app. The data of those practitioners' own clients (bookings, payments, training plans) is processed by the practitioner as controller, under their own privacy notice: Praticale processes it only on their behalf, as a processor under Article 28 GDPR and a written agreement. For that data, please contact the practitioner.

3. Data we process

Contact form:

• name and email address (required: without them we cannot reply)
• your line of work, how you work (on your own or as a studio) and your message (optional)

Template preview:

• the logo you upload stays in your browser and is never sent to our servers
• the studio name and subtitle you type may appear in the preview page's address, and therefore in the hosting provider's technical logs
• if you ask for suggested copy, the studio name, line of work, city and tone are sent to our server to write it; we do not store them

Browsing data:

• IP address and technical request data, recorded in the hosting provider's logs and used to keep the site secure
• the IP address of anyone requesting suggested copy, kept as a counter to prevent abuse
• aggregate visit and performance statistics, collected without cookies and without identifying individual visitors

4. Purposes and legal basis

• Replying to your request and, if you wish, preparing an offer: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Protecting the site from abuse and keeping it secure: our legitimate interest (Art. 6(1)(f) GDPR).
• Measuring use and performance of the site in aggregate: our legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for newsletters or marketing, and we do not sell it or pass it on to third parties.

5. How long we keep it

• Contact form requests: up to 12 months from our last exchange, unless it leads to a contract.
• If you become a customer: for the duration of the contract and, for tax records, the 10 years Italian law requires.
• Anti-abuse counters holding your IP address: deleted automatically within 48 hours.
• Technical logs: for the hosting provider's retention period.

6. Recipients

Data is handled by providers acting as our processors, only as far as the service requires:

• Vercel Inc. — site hosting and aggregate statistics
• Supabase Inc. — database
• Resend Inc. — delivery of messages sent through the contact form
• our email provider

Some of these providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission (Articles 45–46 GDPR).

7. Your rights

At any time you can ask for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Articles 15–22 GDPR). Write to privacy@praticale.it: we reply within 30 days.

You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

8. Cookies

The site uses no profiling cookies and no third-party advertising cookies. Any cookies it sets are technical and necessary for it to work, so no consent banner is required.

9. Automated decisions

We take no decisions based solely on automated processing and do no profiling (Art. 22 GDPR).

10. Changes

We may update this notice. The date of the latest update is shown at the top of the page.