Privacy policy

DRAFT — TO BE REVIEWED by a legal advisor before publishing.

Data controller

The controller for the data collected through this site is Lele's Forge, reachable atciao@lelesforge.it.

What we collect and why

We only collect data through forms you fill in voluntarily on the site:

Waitlist form: email address and, optionally, a description of your miniature idea. Used to notify you when a slot opens up and to reply to your request.
Commission request form: name, email, country, character description, size, tier, chosen add-ons, name to engrave, desired deadline, and uploaded reference images. Used solely to prepare a quote and produce the requested miniature.
Pack order form: name, email, country, shipping address, pack and quantity, notes. Used solely to handle payment and shipping of the order.

We do not collect browsing data, do not use profiling cookies and do not install tracking tools by default.

Legal basis

We process your data based on the consent you give by ticking the dedicated checkbox on each form, and to carry out pre-contractual or contractual steps when you request a quote or a commission.

How forms are handled

Forms are handled through Netlify Forms, the hosting service that publishes this site. Submitted data therefore also passes through Netlify's servers, which acts as a data processor for this technical aspect. You can review Netlify's own privacy policy on their official site.

How long we keep data

We keep commission request data for as long as needed to complete the order and to handle any warranty or dispute, and in any case no longer than 24 months from the last contact. Waitlist data is kept until deletion is requested or for a maximum of 12 months of inactivity.

Your rights

You can request access, correction, deletion or restriction of processing of your data at any time, or object to processing, by writing to ciao@lelesforge.it. You also have the right to lodge a complaint with the competent data protection authority.

Analytics

We currently don't use any traffic analytics tool. If we enable one in the future, we will only use cookieless solutions (such as Plausible or Umami), which don't require a cookie consent banner because they don't identify individual visitors.