Privacy policy

Last updated: 12 October 2026 · Version 2026-10-12

1. Who is responsible

The data controller is Fashion Billion di Wang Yi, an Italian sole proprietorship owned by Wang Yi, known professionally as Sofia Wang. VAT number: 02476670977. Registered with the Pistoia-Prato Chamber of Commerce, REA PT–615494, Italy.

For enquiries and to exercise your privacy rights, email fashionbillionsofia@gmail.com.

Registered office: Via del Frascone 61, 51100 Pistoia (PT), Italy. Correspondence address.

2. Information we process

• Enquiries: your name, email address, business type, optional telephone number, your message and any information you choose to send. The website does not ask for payment details or sensitive personal information.
• Technical information: IP address, browser and device information, requested URLs, timestamps and security information processed when Netlify delivers the website or handles a submitted form.
• Privacy choices: the purposes you enable or reject, the action taken, its timestamp, expiry and the version of this notice, recorded on your browser to apply and document your choice.
• Optional services: when enabled, Google reCAPTCHA processes device, network and interaction information to assess spam risk. Google Analytics processes online identifiers, page views, traffic sources, approximate location and device information for basic visit statistics. Enhanced measurement is disabled.

3. Why we use information and our legal bases

• Answering requests and discussing services: steps at your request before entering a contract, and performance of a contract where applicable (GDPR Article 6(1)(b)). For general questions or communications from someone acting for a business, our legitimate interest in responding and managing professional relationships (Article 6(1)(f)).
• Operating and securing the website: our legitimate interest in reliable delivery, preventing abuse and protecting communications (Article 6(1)(f)). Necessary storage of your privacy preference is used to respect and document your choice and meet consent obligations (Article 6(1)(c)).
• Loading Google reCAPTCHA and measuring visits with Google Analytics: your separate, optional consent for each purpose (Article 6(1)(a), together with applicable cookie rules). Refusing measurement does not prevent use of the enquiry form when you enable Functionality.
• Meeting legal obligations and dealing with disputes: Article 6(1)(c), or our legitimate interest in establishing, exercising or defending legal claims (Article 6(1)(f)), as applicable.

Submitting an enquiry does not subscribe you to a newsletter. The website has no newsletter signup or advertising tools. Any different use requiring consent must be explained and requested separately.

4. Your choice to provide information

Providing enquiry information is voluntary. Name, email and message are required to send the form and allow us to reply. The form also sends your business-type selection; the phone number is optional. If you do not enable Functionality or cannot use reCAPTCHA, you can email Sofia directly. You can browse the site without enabling either optional purpose.

5. Services and recipients

Information is accessible to the controller and, where needed for the stated purposes, authorised technical assistance, professional advisers or authorities with a lawful entitlement. The following services are involved:

• Netlify, Inc.: website hosting and form processing, including storage of submitted enquiries and email notifications. Netlify uses service providers including Automattic’s Akismet to filter form spam. See Netlify’s privacy information, its data-processing terms and Akismet’s privacy notice.
• Google: the Gmail mailbox used to receive and reply to enquiries, and, only when enabled, reCAPTCHA and Google Analytics. Google Ireland Limited provides relevant services to EEA users, with processing also involving Google LLC and other group entities according to the service terms. See Google’s privacy notice.

Providers process information under the terms and roles applicable to each service: Netlify’s hosted customer data is covered by its data-processing agreement; providers may also process security or service information for their own purposes, as explained in their notices. The contact form’s content is not intentionally sent to Google Analytics.

6. International processing

These services may process information outside the European Economic Area, including in the United States. Netlify and Google describe the applicable safeguards in their processing terms, including standard contractual clauses and, for covered transfers to certified organisations, the EU–US Data Privacy Framework. These mechanisms apply according to the recipient and service; optional-service consent does not replace the safeguards required for international transfers.

See Netlify’s trust centre and Google’s transfer safeguards. You may contact us for information about the safeguards relevant to your data.

7. How long information is kept

• Enquiries and correspondence: for the time needed to deal with your request and the related discussion or necessary follow-up. Where a request becomes a business relationship, the relevant information is kept for that relationship and any applicable accounting, statutory or legal-claim retention requirements. Retention is assessed by the status of the request, outstanding commitments and legal obligations; enquiries are not all kept indefinitely by default.
• Privacy preferences: six calendar months from the choice, unless you change it earlier or clear browser storage. The record is held in a first-party cookie with a browser-storage copy for synchronising tabs. The current site does not send this record to an external consent platform.
• Analytics: the website sets Analytics cookies for 180 days without automatic renewal. Cookie expiry is separate from Google Analytics property-level retention: event-level data is configured for 2 months and user-level data for 14 months. The user-identifier retention period resets with new activity. Google deletes expired detailed data through its monthly deletion process; standard aggregated reports are not subject to these settings. See Google’s retention explanation.
• Hosting, security and anti-spam data: for the periods needed to deliver the service, investigate abuse and meet the provider’s applicable obligations. Google explains its retention criteria in its retention information; Akismet explains its spam-data periods in its notice linked above.

Withdrawal stops future use of the optional service on this browser. It does not by itself delete messages already sent or data already lawfully processed by a provider. You can make a separate erasure request, subject to applicable exceptions.

8. Your rights

Under the GDPR, where the relevant conditions apply, you can request access, correction, erasure, restriction and a portable copy of data processed automatically on consent or contract grounds. You may object to processing based on legitimate interests for reasons relating to your situation. You can withdraw optional consent at any time without affecting the lawfulness of earlier processing.

Email fashionbillionsofia@gmail.com. We may need proportionate information to verify your identity. We respond normally within one month; where the GDPR permits an extension, we will explain it within that month. You can complain to the Italian Garante per la protezione dei dati personali, or the competent supervisory authority where you live or work.

9. Automated processing and external links

Spam checks are automated and may block a form submission; you can contact Sofia by email if a check prevents delivery. Fashion Billion does not use this website to make solely automated decisions producing legal or similarly significant effects about you.

WhatsApp and Instagram are ordinary external links, not embedded widgets. Following them opens a separate service governed by its provider’s privacy information. Fonts and photographs are hosted locally.

10. Changes

We update this notice when relevant processing changes. The date and version appear above; a material change affecting optional processing requires a new choice before that processing starts.