Privacy Policy

Last updated: November 15, 2025

Cipher Folio
Piazza del Duomo 31
20122 Milan, Italy

Our Commitment to Your Privacy

At Cipher Folio, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website or use our services.

We believe in transparency about our data practices. This policy describes what information we collect, why we collect it, how we use it, and the choices you have regarding your personal data.

Information We Collect

Information You Provide Directly

When you contact us or request our services, you may provide personal information including your name, email address, phone number, and details about your financial analysis needs. This information is collected when you fill out contact forms, send us inquiries, or engage with our services.

Examples: Contact forms, service requests, email communications, consultation bookings

Information Collected Automatically

When you visit our website, we automatically collect certain technical information such as your IP address, browser type, device information, operating system, referring URLs, and pages visited. This data helps us understand how visitors use our website and improve our services.

Collection methods: Server logs, cookies, web beacons, analytics tools

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content. These technologies help us remember your preferences and understand how you interact with our website.

For detailed information, please review our Cookie Policy

Analytics Data

We collect aggregated and anonymized data about website usage patterns, including page views, session duration, bounce rates, and user flow. This analytical information helps us improve website performance, optimize content, and enhance user experience.

Purpose: Website optimization, performance measurement, user experience improvement

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: You have given clear consent for us to process your personal data for specific purposes
  • Contract Performance: Processing is necessary to fulfill our contractual obligations to you
  • Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving services and preventing fraud
  • Legal Obligation: Processing is required to comply with applicable laws and regulations

How We Use Your Information

Service Delivery

We use your personal information to provide our financial analysis services, respond to your inquiries, schedule consultations, deliver educational materials, and communicate about your service requests. This includes processing your contact information to respond to questions and provide the analytical services you've requested.

Website Improvement

Analytics data helps us understand how visitors interact with our website, identify areas for improvement, optimize user experience, and develop new features. We analyze usage patterns to make our website more intuitive and helpful for visitors seeking financial clarity.

Marketing Communications

With your consent, we may send you information about our services, educational content about financial analysis, and updates that we believe may be relevant to your interests. You can opt out of marketing communications at any time through the unsubscribe link in our emails.

Security and Fraud Prevention

We process certain data to protect our website, detect and prevent fraudulent activity, ensure security of our systems, and maintain the safety of our users. This includes monitoring for suspicious activity and implementing appropriate security measures.

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

  • Service Providers: Trusted third-party service providers who assist with website hosting, analytics, email delivery, and other operational functions under strict confidentiality agreements
  • Legal Requirements: When required by law, court order, or governmental authority, or when necessary to protect our legal rights
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity
  • With Your Consent: When you explicitly authorize us to share your information for specific purposes

How We Protect Your Data

Security Measures

We implement industry-standard security measures including encryption for data in transit, secure server infrastructure, regular security audits, access controls limiting data access to authorized personnel only, and continuous monitoring for potential security threats. Our systems are designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Contact information is typically retained for three years from the last interaction, service-related data for seven years to meet regulatory requirements, and analytics data in aggregated form indefinitely.

Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by applicable data protection laws. We will provide clear information about the nature of the breach and the steps we are taking to address it.

Your Rights and Choices

Right to Access

You have the right to request a copy of the personal data we hold about you and receive information about how we process it.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Right to Restrict Processing

You can request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

  • Avoid filling out contact forms, account registrations, or any data-submitting features
  • Disable cookies through your browser settings (see our Cookie Policy for more details)
  • Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly in accordance with applicable data protection regulations.

Exercising Your Rights

To exercise any of your privacy rights or if you have questions about how we handle your personal data, please contact us through our contact page or reach out directly. We will respond to your request within one month, though complex requests may take up to three months with advance notice.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data appropriately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you by posting a prominent notice on our website or sending you an email notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The date at the top of this policy indicates when it was last updated.