Privacy & Cookie Policy

This notice explains how gianlucapiazza.com processes personal data when users browse the site or use its forms and tools. It is drafted with GDPR/UK GDPR, ePrivacy/cookie rules, US FTC privacy principles and major international privacy rights in mind, including US state privacy laws where applicable.

Data Controller

The Controller of the data collected through this website, which operates under the GP & Partners brand, is: 8Hz LLC, 4660 Arboretum Cir Unit 201, Naples FL 34112, United States — [email protected]

Types of Data Collected

During navigation and use of the site, the following data may be collected:

• Technical navigation data processed by the Vercel hosting infrastructure and the Cloudflare proxy (for example IP address, request logs, timestamps, user agent, response status).
• Data voluntarily provided by the user: name, email, company and message in the contact form.
• Contact attribution data attached to the request sent through the form: UTM parameters, referrer, landing pages and a session identifier. Collected only after analytics consent.
• Prompts and messages voluntarily entered in the AI Market Research tool, processed through the Google Gemini APIs to generate the answer.
• Aggregated usage data through Vercel Web Analytics, after analytics consent and without third-party cookies.
• Technical preferences stored in the browser, such as the chosen language and the cookie banner outcome.
• Navigation data for marketing measurement through the Meta Pixel, only after marketing consent: visited pages, referrer, browser, device and technical interactions essential to measurement.

Cookie Policy

The website separates technical preferences, analytics and marketing. Specifically:

• Technical preferences stored in the browser, not cookies: siteLanguage (chosen language) and cookieConsent (banner outcome). They persist until cleared from the browser and require no consent.
• Cloudflare Turnstile: loaded on the contact page only, to tell people from bots. It is a technical security measure necessary for the form to work and requires no prior consent.
• Vercel Web Analytics: enabled only after analytics consent. It measures visited pages, referrer, browser, operating system, country and device type, without third-party cookies.
• Google Analytics 4: enabled only after analytics consent. It sets the cookies _ga and _ga_7DW4MMZWP3, both lasting 2 years, used to distinguish users and keep session state. The IP address is anonymised.
• Meta Pixel: loaded only after separate marketing consent and only if configured with a valid Pixel ID. It sets the _fbp cookie, lasting 3 months, used for campaign attribution.
• Contact attribution data: siteAttribution in local storage and siteSession in session storage, holding UTM parameters, referrer and a session identifier. Stored only with analytics consent and removed automatically if consent is absent or withdrawn.
• Google Ads and TikTok Pixel: not active. Any future tags will be enabled only after updating this policy and obtaining prior consent.

Providers, Recipients and Transfers

Data may be processed by technical providers needed to operate the website and connected services:

• Vercel Inc. (United States) for hosting, deployment, security, technical logs and Web Analytics.
• Cloudflare, Inc. (United States) as CDN and proxy for the whole domain: it processes the IP address and technical data of every visit, and provides the Turnstile anti-bot service on the contact form.
• Google LLC (United States) for Google Analytics 4 and for the Gemini APIs used by the AI Market Research tool.
• Meta Platforms, Inc. (United States) for the Pixel, only after marketing consent and only if the Pixel ID is configured.
• Resend (United States) for delivering the emails generated by the contact form, including the notification to the Controller and the confirmation sent to the user.

Retention

Data is kept only for as long as necessary for the purposes described:

• Contact requests and correspondence: up to 24 months from the last exchange, unless legal obligations apply or a right must be established or defended.
• Technical and security logs: for limited periods defined by the infrastructure providers. Vercel application logs are retained for about 24 hours.
• Consent preferences: until changed, cleared from the browser or superseded by a new consent version.
• Analytics and marketing data: according to the retention settings of the respective tools, in line with the consent given.

Rights of Data Subjects

Users in the EU/EEA, United Kingdom and similar jurisdictions may request access, correction, deletion, restriction, portability, objection to processing and withdrawal of consent. They may also lodge a complaint with the competent supervisory authority: in Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).