Privacy Policy
Last updated: 22 October 2026
This policy explains how personal data is processed when you visit breakdrop.com (the “Website”) or contact us by email or social media. It is provided under Regulation (EU) 2016/679 (“GDPR”).
1. Who is responsible for your data
The data controller is BreakDrop (breakdrop.com). For any question about this policy or about your data you can write to us at any time at hello@breakdrop.com.
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email address and the content of messages you send us (for example from the “Start your project” button, which opens your email app) | Reply to your request, prepare a quote or start a project | Steps taken at your request before a contract; contract; our legitimate interest in answering you (Art. 6(1)(b) and (f) GDPR) |
| Technical data: IP address, browser, device, date and time of the visit, pages requested | Deliver the Website, keep it secure, prevent abuse | Our legitimate interest in running and protecting the Website (Art. 6(1)(f) GDPR) |
| Information needed to remember your choice on the cookie notice | Do not show the notice again | Strictly necessary (exempt from consent) |
The Website does not have forms, user accounts or payments, and does not use analytics, advertising cookies or third-party trackers. We do not make automated decisions or profile visitors.
3. Cookies and local storage
The Website only uses technical storage (a cookie or local storage entry) to remember that you closed the cookie notice. If analytics or marketing tools are added in the future, we will update this policy and ask for your consent where required.
4. Who receives your data
Your data is accessible only to us and to providers that process it on our behalf, such as:
- the hosting provider of the Website, Netlify, Inc. (United States), which keeps technical logs;
- our email service provider, which stores the messages you send us.
Where a provider is located outside the European Economic Area, transfers rely on adequacy decisions or on Standard Contractual Clauses.
The Website contains links to our Instagram profile (@breakdropstudio). If you follow them, Instagram (Meta) processes your data under its own policy; we do not embed its content or trackers in our pages.
5. How long we keep it
- Emails and project communications: for as long as needed to handle your request, and afterwards for up to 24 months, or longer if the law requires (for example accounting records).
- Server logs: for the period set by the hosting provider, normally a few days to a few weeks.
6. Your rights
You can ask us at any time to access your data, correct it, erase it, restrict or object to its processing, or receive it in a portable format. Where processing is based on consent you can withdraw it at any time. To exercise your rights write to hello@breakdrop.com; we will answer within one month.
You also have the right to lodge a complaint with your data protection authority. In Italy this is the Garante per la protezione dei dati personali.
7. Children
The Website is not directed to children under 16 and we do not knowingly collect their data.
8. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.