Privacy Policy
Last Updated: January 2025
Website: www.arcaflow.ai
Welcome to ArcaFlow.ai.
This Privacy Policy explains how I, Thomas Filippa, collect, use, and protect your personal data when you visit this website or interact with me through it. By using this website, you acknowledge that you have read and accepted this Privacy Policy.
1. Data Controller
Thomas Filippa
Via Cala Lupo E2, 07040 Stintino (SS) – Italy
P.IVA IT02897280901
Email: [email protected]
I determine the purposes and means of processing personal data collected through this website.
2. Personal Data I Collect
Data you provide voluntarily: name, email, phone number, company name, or any other data you include when you fill out a contact form, book a call, download resources, or subscribe to a newsletter.
Automatically collected data: IP address, device type, operating system, browser type, pages visited, date/time, and referring URLs.
Cookies and tracking technologies: used to optimize performance, personalize content, analyze traffic, and support marketing campaigns.
Providing data is voluntary, but if you do not provide it, certain services (such as email responses or resource downloads) may be unavailable.
3. Purposes and Legal Bases
I process your data for the following purposes:
Operating and securing the website
To maintain the site, prevent abuse, and ensure security.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Responding to requests or messages
To reply when you contact me or request a consultation.
Legal basis: contractual necessity (Art. 6(1)(b)).
Marketing and commercial communication
To send you emails, offers, and updates about automation tools, AI services, and marketing solutions from ArcaFlow.ai that may interest you.
Legal basis: consent (Art. 6(1)(a)) for new contacts, and legitimate interest (Art. 6(1)(f)) for existing clients as permitted by Art. 130(4) of the Italian Privacy Code (“soft spam”).
Protection Clause:
By submitting your data through this website, you explicitly acknowledge that it may be used for promotional, educational, and informational purposes related to ArcaFlow.ai’s services. All communications are proportionate, relevant, and limited to professional content.
You can withdraw consent or object at any time by clicking “unsubscribe” in any email or by writing to [email protected].
Withdrawal will not affect the lawfulness of prior processing.
Analytics and optimization
To analyze aggregated user behavior and improve content and conversion performance.
Legal basis: legitimate interest.
Legal and administrative compliance
To comply with fiscal, accounting, and regulatory obligations.
Legal basis: legal obligation (Art. 6(1)(c)).
I do not engage in automated decision-making that produces legal or significant effects for users.
4. Data Sharing and Recipients
Access to personal data is restricted to myself and carefully selected processors necessary for the operation of ArcaFlow.ai, including:
Hosting and infrastructure: Vercel / Cloudflare (EU)
CRM & automation platform: GoHighLevel (USA)
Email & marketing services: ActiveCampaign (USA)
Analytics: Google Analytics 4 (Google Ireland Ltd.)
Chat and contact tools: ManyChat Inc. (USA) / Meta Platforms Ireland Ltd.
Payment and invoicing (if applicable): Stripe Payments Europe Ltd.
All providers are bound by Data Processing Agreements under Art. 28 GDPR.
I do not sell or rent personal data to third parties.
Public authorities may access data only when required by law.
5. Marketing Data Usage and Limitations
I process personal data collected via forms, downloads, and subscriptions primarily to build a professional relationship with you and share relevant business content.
This may include follow-up emails, AI automation case studies, service offers, and event invitations.
To protect both parties:
All communications are professional and contextual. No excessive or unrelated marketing will be sent.
You can opt out easily via an unsubscribe link or by emailing [email protected].
Shared third-party data: If you submit someone else’s data (e.g. a team member’s email), you confirm you have authorization to do so. ArcaFlow.ai assumes no liability for unauthorized submissions by users.
Data profiling: I may segment contacts (e.g. by interest or country) to send more relevant communications, but no fully automated decisions are made.
This approach ensures transparency while allowing legitimate use of data for commercial growth.
6. International Data Transfers
Some tools (e.g. GoHighLevel, ActiveCampaign, ManyChat) process data outside the EEA.
In such cases, I adopt EU-approved Standard Contractual Clauses or equivalent safeguards to ensure your data remains protected.
Details are available upon request at [email protected].
7. Data Retention
Client and project data: stored for the duration of the collaboration and up to 10 years for accounting compliance.
Marketing and newsletter data: retained until you unsubscribe or for a maximum of 24 months from your last interaction.
Analytics and technical logs: retained for up to 12 months.
Legal records: retained as required by law.
Once retention periods expire, data is deleted or anonymized.
8. Data Security
I implement strong security measures (HTTPS encryption, secure servers, access controls, and firewalls).
While I take all reasonable precautions, no system is entirely secure.
In case of a data breach that may pose a high risk, I will notify both affected individuals and the Italian Data Protection Authority (Garante) as required by law.
9. Your Rights
You have the right to:
Access, correct, or delete your personal data.
Restrict or object to its processing (especially for marketing).
Withdraw consent at any time.
Receive a copy of your data in a portable format.
Lodge a complaint with the Garante per la Protezione dei Dati Personali if you believe your data is mishandled.
To exercise these rights, email [email protected].
Identity verification may be required before action.
10. Cookies
ArcaFlow.ai uses essential, performance, and marketing cookies to ensure optimal functionality and improve user experience.
You can manage or delete cookies directly from your browser settings.
Analytics cookies help me understand user interactions, and marketing cookies support ad performance measurement.
11. Policy Updates
This Privacy Policy may be updated at any time to reflect new legal or technical requirements.
The most recent version is always available on this page and replaces all prior versions.
Continued use of the website after any update implies acceptance of the revised Policy.
12. Contact
Thomas Filippa
Email: [email protected]
Acceptance
By browsing or submitting your data on www.arcaflow.ai, you confirm that you have read this Privacy Policy and agree to its terms, including the controlled use of your data for professional and marketing communications.
If you disagree, please discontinue use of the website.
Would you like me to add a short “Marketing Consent Disclaimer” (around 2 lines) to include under your website’s contact form or newsletter signup — e.g., “By submitting this form, you agree that ArcaFlow.ai may contact you with relevant updates and marketing content. You may unsubscribe at any time.” This ensures you’re fully protected for every lead submission.