What we do with your data

Last updated: 1 October 2026.

This translation is provided for convenience; the binding version is the Italian original.

Who is responsible

Faro Studio, Lugano (Switzerland). For any question about your data, write to ciao@farostudio.ch.

What data we process, and why

• Quote or contact request: name, email, business name and the message you write. We use them to reply to you.
• Bussola, without signing in: your answers to the check stay in your browser and never reach us.
• Bussola, signed in: if you choose to sign in or to receive the summary, we process your email and your check progress (what you already have, what's missing), so you can pick it up on another device. Sign-in uses a one-time code sent to your email: we don't use passwords.
• Orders and payments: email, the services chosen, the amount and the payment identifiers. We use them to carry out the work, send you the receipt and keep our accounts. Card and payment-method details are handled by Stripe alone: we never see or store them. If you provide it, we also process the name of the person who referred you (optional "Who sent you?" field), to give them their discount.
• Emails we send you: confirmations, receipts and messages about your order. We only send tips or news if you ticked the box for it; reply STOP to stop receiving them.
• Server technical data: like every website, the server logs the IP address, page and time of visits, for security and to prevent abuse.

Legal basis: we reply to you and work for you because you ask us to (performance of a contract or of your request); we keep accounting records because the law requires it; the security of the website is our legitimate interest.

Cookies and browser storage

The website uses no tracking cookies and no third-party analytics or advertising tools, and the fonts are hosted by us. It only uses your browser's local storage, and only for what the service you ask for needs: remembering your Bussola progress, your chosen language and, if you sign in, your session. You can clear it at any time in your browser settings.

Who processes data for us

• Infomaniak (Switzerland): hosts the website, the emails and form data.
• Supabase: handles sign-in to Bussola and stores progress, orders and accounting records.
• Stripe: processes payments, under its own privacy policy.
• Cloud backup service: receives encrypted copies of our archives; it cannot read their contents.

Some of these providers may also process data outside Switzerland, in the European Economic Area or the United States, with the contractual safeguards required by law. We don't sell your data and don't use it for third-party advertising.

How long we keep it

• Requests that lead nowhere: 12 months, then we delete them.
• Bussola account and progress: until you ask us to delete them.
• Orders, receipts and accounting records: 10 years, as Swiss law requires.
• Server technical logs: for a short period, as long as security requires.

Your rights

You can ask us what data we hold about you, have it corrected or deleted, receive it in a readable format, or object to its processing: write to ciao@farostudio.ch and we'll reply within 30 days. Some accounting data cannot be deleted before the legal retention period ends. If you believe your data is being processed improperly, you can contact the Federal Data Protection and Information Commissioner (FDPIC).

Security

The connection to the website is encrypted, the access keys to our services are kept away from public pages and access to our archives is restricted. No system is 100% secure: if an incident affected you, we would inform you as the law requires.

Changes

If we change the way we process data, we'll update this page and the date at the top.