Privacy Policy
Last updated: 19 August 2026
Who is responsible for your data
ProformaWorks is a trading name of Francesco Saviano, a sole trader (ditta individuale) established in Italy, VAT number IT04779960618, registered at Via G. di Vittorio 4, 81030 Gricignano di Aversa (CE), Italy. It operates proformaworks.com and is the data controller for the personal data described here. You can reach us at support@proformaworks.com with any question about this policy or about your data.
What we collect, and why
When you buy a model
We collect your name, email address, billing country and, where you provide it, your company name and tax number. We need this to take your order, deliver the files, issue an invoice and meet our accounting obligations. The legal basis is performance of a contract, and for the invoice, a legal obligation.
We never see or store your card details. Card data is entered into a payment form hosted by Stripe and travels to Stripe, not to us. We receive only the outcome of the payment, the last four digits and the card brand.
When you create an account
We store your email address and a hashed password so you can sign in and download the files you have already paid for. The legal basis is performance of a contract.
When you write to us
We keep the message and your email address for as long as it takes to answer you and to have a record of the exchange. The legal basis is our legitimate interest in providing support.
When you subscribe to the newsletter
We store your email address on the basis of your consent. Every message carries an unsubscribe link that works immediately, and we act on it at once.
When you browse the site
Analytics run only after you accept them in the cookie banner. Until you do, no analytics cookie is set and no analytics script is loaded at all. Details are in our Cookie Policy. The legal basis is your consent.
Independently of consent, our servers keep short-lived technical logs (IP address, requested URL, timestamp, user agent) to keep the service running and to detect abuse. The legal basis is our legitimate interest in the security of the service.
Who else processes your data
- Stripe Payments Europe, Ltd. — payment processing. Stripe acts as an independent controller for the payment data it collects.
- Google Ireland Ltd. — Google Analytics 4, only with your consent.
- Microsoft Ireland Operations Ltd. — Microsoft Clarity, only with your consent.
- Contabo GmbH — hosting of the site, the database and the mail server, in Germany.
We do not sell your personal data, and we do not share it for advertising or for cross-context behavioural advertising. We have never done so.
Where your data goes
The site, its database and its mail server are hosted in Germany. Stripe, Google and Microsoft may process data in the United States under the EU-U.S. Data Privacy Framework or under Standard Contractual Clauses approved by the European Commission.
How long we keep it
- Orders and invoices — ten years, as required by Italian tax law.
- Account — until you ask us to delete it. Deleting the account does not delete invoices we are legally obliged to keep.
- Support messages — twenty-four months.
- Newsletter — until you unsubscribe.
- Analytics — fourteen months.
- Server logs — thirty days.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Where processing rests on consent, you can withdraw that consent at any time without affecting what was done before.
Write to support@proformaworks.com. We answer within thirty days, and we never charge for a first request. We will not treat you differently for exercising any of these rights.
If you are in the European Economic Area or the United Kingdom
These rights come from the GDPR. If our answer does not satisfy you, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority of the country where you live.
If you are in the United States
State privacy laws such as the California Consumer Privacy Act, as amended by the CPRA, and the equivalent laws of Virginia, Colorado, Connecticut, Utah, Texas and Oregon apply to businesses above revenue or volume thresholds that this business does not reach. We grant the same rights anyway: you can ask us what categories of personal information we hold about you, request a copy, ask for correction or deletion, and opt out of any sale or sharing — there is none to opt out of, because we do not sell or share personal information.
The categories we collect are identifiers (name, email), commercial information (what you bought), internet activity (only with consent) and, if you provide them, professional details. We collect them for the purposes listed above and from you directly. We do not collect sensitive personal information, we do not use automated decision-making or profiling, and we do not knowingly sell the personal information of anyone under 16.
To make a request, write to support@proformaworks.com from the address associated with your order. An authorised agent may act for you with written permission.
Email you receive from us
Transactional email — the receipt, the download link, an answer to your question — is part of the service and is sent because you bought something or wrote to us. Marketing email is sent only if you asked for it, always carries a working unsubscribe link, and always identifies who sent it. We honour unsubscribe requests immediately and in any case well within the ten days required by the U.S. CAN-SPAM Act.
Children
This site sells professional tools and is not directed at anyone under 16. We do not knowingly collect data from children, and if we discover we have, we delete it.
Changes
If we change this policy we update the date at the top. Material changes are announced on the site before they take effect.