Legal and privacy
Who runs this website
Itria is a trading name of Ilaria Basile, 66 Paul Street, London, EC2A 4NA. I am the "controller" of the personal data described here under UK GDPR. You can reach me at [email protected].
This website
This site does not use cookies, advertising trackers or third-party fonts. It is hosted by Cloudflare, which sees your IP address and basic browser details when you load a page, so it can deliver the site and protect it from attacks.
I use Cloudflare Web Analytics to count visits. It sets no cookies and does not track you across sites or build a profile of you. I only see totals, such as page views, the countries visits come from and the type of device. I can't tell who you are from it.
What I collect and why
| When | What | Why, and the legal basis |
|---|---|---|
| You email me or book a call | Your name, work email, firm, role, and anything you tell me. Booking goes through Google Calendar. | To reply, run the call and follow up. Legitimate interests (running my business), and steps taken at your request before a contract. |
| I contact you about Itria and you are a business contact | Your name, job title, firm, work email, and the public source I found them in (a company website, a trade directory such as the Lloyd's, MGAA or CILA lists, or LinkedIn). | To write to you about services relevant to your role. Legitimate interests. I only email limited companies and LLPs, and every message tells you how to stop them. |
| You work with me | Contact details, contract and payment records. | To deliver the work and keep accounts. Contract, and legal obligation. |
If you work with me on claims data, I will only handle it under a written data processing agreement, on your instructions.
Who else sees it
Only the services I use to run the business: Google Workspace (email, calendar and video calls) and Cloudflare (website hosting). I do not sell personal data. Both providers may process data outside the UK, under the UK's approved transfer safeguards.
How long I keep it
- Business contacts who never reply: up to 12 months from the last message, then deleted.
- People who reply or book a call: while we are in touch, then up to 24 months after the last contact.
- Anyone who opts out: I keep your email address on a "do not contact" list so I do not write to you again, and nothing else.
- Contracts and accounts: 6 years, as the law requires.
Your rights
You can ask to see the data I hold about you, correct it, have it deleted, or object to me using it. To object to my emails, reply "stop" or email [email protected]. I will act on it straight away. If you are unhappy with how I handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If I change this page I will update the date at the top.