Privacy Policy
Last updated: September 26, 2026
Draft to be reviewed by a legal adviser before final publication.
1. Data controller
The data controller is Pietro Gandi, D.C., Via Tito Speri 17, 50135 Firenze. Contact: quiropractica.gandi@gmail.com.
2. What data we process
Account data: email, language, and a name or made-up name if you provide one.
Profile and journal data: topics you want to work on, age range, sex, habits, sleep, stress, notes. Some of this may relate to your wellbeing and is therefore a “special category” of data (art. 9 GDPR).
Booking and payment data: date, session, amount, outcome. We do not see or store your card details.
Technical data: IP address and browser, for sign-in security.
3. Why, and on what legal basis
To manage your account, bookings and payments (performance of a contract, art. 6.1.b).
To prepare and follow your path using your profile and journal data (your explicit consent, art. 9.2.a), which you can withdraw at any time.
To update your summary with AI (your consent, optional).
For tax and accounting obligations (legal obligation, art. 6.1.c).
4. How we protect your data
Profile answers, journal entries and notes are encrypted in the database. Access is limited to Pietro and his team. We do not sell your data or use it for advertising.
5. Who we share it with
Providers that help us deliver the service, acting as data processors: hosting and database, email delivery, Google (Google sign-in and calendar), Stripe and Aurio (card payments), PayPal and Dracula Studio (PayPal payments), Anthropic (AI, only with your consent).
Some providers may process data outside the European Union; in these cases we use the safeguards provided by the GDPR, such as standard contractual clauses.
6. How long we keep it
Profile, journal and notes: for as long as you have an account, and in any case no longer than 24 months after your last activity. Payment data: 10 years, as required by law. Incomplete profiles are deleted after 48 hours.
7. Your rights
You can access, correct, download and delete your data, restrict or object to its processing, and withdraw your consent. You can download and delete your data directly from your personal space. For anything else, write to us. You can also lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority).
Tax details: Pietro Gandi · VAT number (P. IVA) to be added