Privacy Policy

giorgiaprestento.com · Last updated: 20 August 2026

1. Who we are

This website is operated by Giorgia Prestento Ltd ("we", "us", "our"), a company registered in England and Wales, company number 10826622, registered office at 196 Fernhead road, London. We are the data controller for the personal information described in this policy.

Contact: giorgia@giorgiaprestento.com

2. What information we collect

We collect information in the following ways:

  • Mailing list sign-up. If you subscribe via the site, we collect your email address. This is passed to Substack, which hosts and sends the GiorgiaOnChange newsletter on our behalf.
  • Booking a call. If you use "Book an executive call," you'll be taken to Calendly, which collects your name, email address, and any details you provide to schedule the call.
  • Direct contact. If you email us directly, we collect whatever information you choose to share (e.g. your name, email address, and the content of your message).
  • Automatic technical data. Our hosting provider, Cloudflare, automatically processes standard technical information (such as IP address and browser type) to deliver and secure the site.
  • Analytics. We use Google Analytics to understand how visitors use the site, for example, which pages are viewed and how long visitors stay. This uses cookies and processes data including your IP address, browser and device type, and approximate location. Google acts as a data processor on our behalf, but also uses this data under its own privacy policy. See Section 6 for how you can control this.

3. How we use your information

We use the information we collect to:

  • Send the newsletter you've subscribed to, and communications about our services
  • Schedule and prepare for calls you've booked
  • Respond to enquiries you send us directly
  • Understand how the site is used, so we can improve it
  • Keep the site secure and functioning correctly

4. Our legal basis for processing

  • Consent for mailing list sign-ups and for non-essential analytics cookies (Google Analytics). You can withdraw consent at any time, by unsubscribing, or by changing your cookie preferences.
  • Legitimate interests for responding to direct enquiries and scheduling calls you've requested, our interest in running our business, balanced against your right to privacy.

5. Who we share information with

We don't sell your information. We share it only with the service providers who help us run the site and business, each of whom processes data under their own privacy policy:

  • Substack (mailing list and newsletter delivery)
  • Calendly (call scheduling)
  • Cloudflare (website hosting and security)
  • Google Workspace (email)
  • Google Analytics (Google LLC) (website usage analytics)

Some of these providers may process data outside the UK/EEA. Where they do, they are required to provide adequate safeguards (such as Standard Contractual Clauses) under UK GDPR.

6. Cookies

This site uses two kinds of cookies:

  • Strictly necessary cookies, required for the site and embedded content (such as YouTube videos or the Calendly booking widget) to function. These don't require consent.
  • Analytics cookies (Google Analytics), which help us understand how the site is used. These are not strictly necessary and require your consent under UK data protection law.

Before this policy goes live: add a cookie consent banner that lets visitors accept or decline analytics cookies, and ensure Google Analytics does not load until consent is given.

You can control or delete cookies at any time through your browser settings. For more on how Google uses data collected through Analytics, see Google's Privacy Policy at policies.google.com/privacy.

7. How long we keep your information

We keep mailing list data for as long as you remain subscribed. We keep enquiry and booking-related correspondence for as long as reasonably necessary to respond to you and maintain business records, and no longer than 24 months after our last contact, unless we're required to keep it longer by law. Google Analytics data is retained according to the settings in our Analytics account 24 months.

8. Your rights

Under UK GDPR, you have the right to:

  • Access the personal information we hold about you
  • Ask us to correct inaccurate information
  • Ask us to delete your information
  • Object to or restrict how we use your information
  • Request a copy of your information in a portable format
  • Withdraw consent at any time (e.g. by unsubscribing from the mailing list, or declining analytics cookies)

To exercise any of these rights, email giorgia@giorgiaprestento.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.

9. Data security

We rely on the security measures provided by our service providers (Cloudflare, Substack, Calendly, Google Workspace, Google Analytics) and take reasonable steps to protect information shared with us directly.

10. Changes to this policy

We may update this policy from time to time, for example, when we add a new tool. The "last updated" date at the top will always reflect the most recent version.

11. Contact us

Questions about this policy or your data: giorgia@giorgiaprestento.com