Privacy Policy

This Privacy Policy explains how Chiaro Valuations collects, uses, and protects your personal data when you visit chiarovaluations.com or contact us about our services. We take your privacy seriously and process personal data in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") and Italian data protection law.

1. Who is responsible for your data

The data controller for personal data collected through this website is:

Francesco Vitaliano, operating as Chiaro Valuations, based in Milan, Italy.
Email: contact@chiarovaluations.com

Chiaro Valuations is currently operated by an individual professional. There is no data protection officer appointed, as one is not required at our scale. For any question about how your data is handled, contact us using the email above.

2. What data we collect

We only collect the data you choose to give us and the minimal technical data needed to run the website. Specifically:

Data you provide directly

• Contact and enquiry data: your name, email address, company name (optional), the package you are interested in, and the message you write when you submit the contact form or email us.
• Scheduling data: if you book an introductory call, the name, email, and any details you enter when scheduling through Calendly.
• Engagement data: if you become a client, the business and financial information you share so we can prepare your valuation (for example historical financials, projections, cap table details, and business descriptions).

Data collected automatically

• Hosting logs: our hosting provider may record standard technical information such as your IP address, browser type, and the pages requested, for security and to keep the site running. This site does not run its own analytics or advertising trackers.

3. Why we use it and our legal basis

Purpose	Legal basis (GDPR)
Responding to your enquiry and providing a quote	Steps taken at your request prior to entering a contract (Art. 6(1)(b))
Delivering our valuation services and communicating with you as a client	Performance of a contract (Art. 6(1)(b))
Keeping records for accounting, tax, and legal obligations	Legal obligation (Art. 6(1)(c))
Securing the website and preventing spam or abuse	Our legitimate interests in a safe, functioning site (Art. 6(1)(f))

We do not use your data for marketing, we do not build advertising profiles, and we never sell your data.

4. Who we share it with

We do not sell or rent your personal data. We share it only with the service providers ("processors") that help us run the business, and only to the extent needed. These currently include:

Provider	Purpose
Formspree	Processes and delivers contact-form submissions to us
Calendly	Scheduling introductory calls, if you choose to book one
Netlify	Website hosting and delivery
ImprovMX and Microsoft (Outlook)	Business email forwarding and email correspondence

Each provider processes data under its own privacy terms and, where required, under a data processing agreement. We may also disclose data where we are legally required to do so, for example to comply with a lawful request from a public authority.

5. How long we keep it

• Enquiries that do not lead to work: kept for up to 24 months, then deleted, so we can follow up on ongoing conversations.
• Client engagement records and deliverables: kept for the duration of the engagement and afterwards for as long as needed to meet accounting and tax obligations under Italian law (generally up to 10 years).
• Email correspondence: kept for as long as needed for the purpose it relates to, then deleted.

You can ask us to delete your data sooner where we are not required to keep it (see your rights below).

6. International transfers

Some of our providers are based outside the European Economic Area (for example in the United States). Where data is transferred outside the EEA, it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision, as offered by the provider concerned.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data ("right to be forgotten"), where no legal obligation requires us to keep it;
• ask us to restrict or object to certain processing;
• receive your data in a portable, machine-readable format;
• withdraw any consent you have given, at any time.

To exercise any of these rights, email contact@chiarovaluations.com. We will respond within one month. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority in your country of residence.

8. Security

We apply reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and trusted service providers. No method of transmission over the internet is completely secure, but we work to protect your data and to notify you and the relevant authority where required if a breach occurs.

9. Changes to this policy

We may update this policy from time to time, for example if our tools or legal obligations change. The "last updated" date at the top always reflects the current version. Material changes will be posted on this page.

10. How to contact us