Lawyer review required. This is a template document. A qualified attorney must review and confirm all four legal pages before go-live. This notice is for internal use only and should be removed prior to publication.

Legal

Privacy Policy

Last updated: 24 June 2026

Introduction

Pinnacle Software Labs ("we," "us," or "our") operates pinnaclesoftwarelabs.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding your data.

We are committed to handling your personal data in compliance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), the Italian Personal Data Protection Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018), and the EU ePrivacy Directive as implemented in Italy. This policy is governed by Italian and EU law.

If you have questions about this policy, contact us at: legal@pinnaclesoftwarelabs.com

1. Who we are

  • Legal entity: Pinnacle Software Labs
  • Operating address: Contrada Scorrione S. Rosalia, 34, 97015 Modica RG, Italy
  • Contact email: legal@pinnaclesoftwarelabs.com
  • Data controller: Pinnacle Software Labs, at the registered address above
  • Governing jurisdiction: Italy (data protection governed by the EU General Data Protection Regulation (GDPR))

2. What data we collect

A. Information you provide directly

When you submit the "Start a Project" contact form, we collect:

  • Full name
  • Email address
  • Phone number (optional, if provided)
  • Company or business name (optional, if provided)
  • Service type selected
  • Project description
  • Budget range (optional, if provided)
  • Whether you requested an NDA
  • Your consent to this Privacy Policy and our Terms of Service

We collect only what you provide. We do not collect payment card data through this site — payment is handled externally when a project is scoped and agreed.

B. Data collected automatically

When you visit our site, we may collect:

  • IP address (anonymised before storage when analytics are active)
  • Browser type and version
  • Device type and screen size
  • Pages visited and time spent
  • Referring URL (how you arrived at our site)
  • Country of origin (derived from IP, not stored at the individual level)

This data is collected via Google Analytics 4 only if you consent to the Analytics cookie category. If you reject analytics cookies, no analytics data about your visit is collected or transmitted to Google.

C. Cookies

See our Cookie Policy for full details. In summary:

  • Strictly necessary cookies (CSRF token, consent preference) run without your consent — they are required for the site to function and for your consent choice to be remembered.
  • Analytics cookies (Google Analytics 4) run only with your explicit opt-in consent.

3. How we use your data

Contact form submissions: We use the data you provide to respond to your project inquiry, prepare a scope document, communicate with you throughout the project lifecycle, and send project-related correspondence. We do not add you to a marketing list or newsletter without separate consent.

Analytics data: Where you have consented, we use anonymised analytics data to understand how visitors use our site — which pages are visited most, where visitors come from, and which services attract interest. This data is aggregated and does not identify you individually. It is used solely to improve the site.

Legal basis for processing (GDPR Article 6):

  • Contact form data: legitimate interests (Art. 6(1)(f) — responding to a business inquiry you initiated) and, where a project scope is agreed, performance of a contract / pre-contractual steps (Art. 6(1)(b)).
  • Analytics data: consent (Art. 6(1)(a) — you must opt in; analytics do not run before consent, and you may withdraw consent at any time).

4. Who we share your data with

We share data with the following third-party processors:

Resend (resend.com) — Email delivery service. When you submit the contact form, your submission is transmitted via Resend's API to our email inbox. Resend processes your name, email address, and the content of your message. Resend's privacy policy is available at resend.com/legal/privacy-policy.

Google LLC (Google Analytics 4) — Analytics service. If you consent to analytics cookies, Google Analytics 4 collects anonymised usage data. IP anonymisation is enabled; we do not share personally identifiable information with Google via this tool. Google's privacy policy is available at policies.google.com/privacy.

We do not sell your personal data. We do not share your data with advertisers, data brokers, or marketing platforms.

5. Data retention

  • Contact form data: We retain project inquiry emails for up to 3 years from the date of inquiry, or for the duration of a client relationship plus 2 years after its end, whichever is longer — to allow for reference in the event of a dispute and to comply with applicable legal obligations. After this period, project correspondence is deleted or anonymised.
  • Analytics data: Anonymised analytics data retained in Google Analytics for 14 months (our configured retention period). Raw visit data is not stored by us.
  • Cookie consent record: Your consent preference is stored in a browser cookie for 6 months, then resets.

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your data, subject to legal retention obligations.
  • Objection: Object to processing based on legitimate interests.
  • Portability: Request your data in a structured, machine-readable format (applies to data processed by consent or contract).
  • Withdraw consent: Withdraw consent to analytics at any time via the "Manage cookie preferences" link in the footer, or by clearing your cookies.

To exercise any of these rights, email: legal@pinnaclesoftwarelabs.com

EU residents: You have the right to lodge a complaint with your local data protection authority. In Italy, this is the the Italian Garante per la Protezione dei Dati Personali (garante.privacy.it). You may also lodge a complaint with the supervisory authority in your EU member state.

We will respond to data rights requests within 30 days.

7. Data transfers

Pinnacle Software Labs operates from Italy. Our email delivery service (Resend) and analytics service (Google Analytics 4) may process data on servers located in the United States or other jurisdictions.

Where data is transferred outside the EU/EEA, we rely on:

  • Standard Contractual Clauses (SCCs) adopted by the European Commission, or
  • The recipient's participation in equivalent data transfer frameworks

For more information on how specific processors handle international transfers, see their respective privacy policies listed in Section 4.

8. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

  • HTTPS encryption for all data in transit
  • CSRF tokens on all forms
  • API keys stored as environment variables, not in source code
  • Access controls limiting who can read stored data
  • Spam and bot protections on contact forms

No method of transmission or storage is 100% secure. If you believe your data has been compromised, contact us immediately at legal@pinnaclesoftwarelabs.com.

9. Children

This site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us at legal@pinnaclesoftwarelabs.com and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we update the "Last updated" date at the top. For significant changes, we will provide notice on the site. Continued use of the site after a policy update constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or data rights requests: