Privacy & Cookie Policy

Last updated: 10/17/2026

 

1. Introduction

Welcome to mattiamedia ("Company", "we", "our", "us").

We are committed to protecting your privacy and ensuring that your personal data is handled securely and transparently.

 

This Privacy & Cookie Policy explains how we collect, use, disclose, and safeguard your information when you visit or interact with our website:

www.mattiamedia.com (the "Website"),

including the project brief form (/workwithme), booking pages (/bookacall), purchasing pages, and any services or automations integrated into our Website.

 

The data controller is:

Mattia Gregoroni, operating as "mattiamedia" (NIF 338282610)

Av. D. Carlos I 122, 1200-651 Lisbon, Portugal

Email: hello@mattiamedia.com

By accessing or using our Website, you agree to this Policy.

 

2. Information We Collect

We collect different categories of personal data depending on how you interact with the Website.

 

A. Personal Data You Provide Directly

• Name and surname

• Email address

• Phone number (optional)

• Brand or product name and website (optional)

• Project details submitted through the project brief form: services of interest, project description, preferred timing, estimated budget and how you heard about us

• Booking details (date, time, timezone)

• Payment information, only if you buy a product or paid service (handled by our payment provider; we do not store card data)

• Any other data you voluntarily provide through contact or application forms

 

Name, email, services of interest and project description are required to send the project brief form, because we need them to reply to you. All other fields are optional.

 

B. Automatically Collected Data

Through essential cookies and server logs, our hosting provider (Wix) may collect:

• IP address

• Browser type and version

• Device information

• Operating system

• Time zone

• Pages visited and time spent

• Interaction with booking pages

• Referral sources

 

Your device's time zone is also read by your browser to pre-select the phone country code in the project brief form. This happens on your device only and is not stored.

 

C. Third-Party Data Sources

We may receive or process data from:

• Wix (form submissions, automations)

• Google Calendar and Google Meet (appointment metadata)

 

3. Project Brief Form

When you submit the project brief form on /workwithme, we receive the information listed in section 2.A.

We use it only to review your request, reply to you, and prepare a proposal or schedule a call.

To keep the form free of spam, it includes automatic checks (for example an invisible anti-bot field and basic validation of the data entered). These checks do not track you.

 

4. Payments and Digital Products

If you buy a paid service or a digital product (e.g., PDF guides, templates, videos, downloadable files):

Payments are processed by a third-party payment provider. We never see or store your full card details.

• We process your name, email and delivery information.

• Digital products may be delivered via email or download link.

• We may store purchase history for tax and legal purposes.

 

5. How We Use Your Data

We use your data to:

• Review project requests and prepare proposals

• Provide, manage, and improve our services

• Process bookings and payments

• Deliver digital products

• Respond to inquiries and client requests

• Send transactional emails (booking confirmations, invoices, updates)

• Send promotional emails (only when you give us consent)

• Keep the Website secure and working properly

• Ensure legal compliance and fraud prevention

 

6. Legal Basis for Processing (GDPR)

We rely on the following legal bases:

• Pre-contractual steps and contractual necessity (Art. 6(1)(b) GDPR): reviewing the project brief you send us, preparing a proposal, bookings, purchases and service delivery

• Legitimate interest (Art. 6(1)(f) GDPR): protecting forms and the booking system from spam and abuse

• Consent (Art. 6(1)(a) GDPR): non-essential cookies (if any) and marketing emails

• Legal obligation (Art. 6(1)(c) GDPR): tax, invoicing, compliance with authorities

 

7. Data Sharing

We do not sell your data.

We only share it with trusted third-party processors when necessary:

• Wix – website hosting, form submissions & automations

• Payment providers – only when you make a purchase

• Google Calendar & Google Meet – appointment handling

• Email delivery providers – transactional communications

All providers comply with GDPR or use appropriate safeguards (e.g., SCCs).

 

8. International Data Transfers

Some of our service providers operate globally, and your data may be stored or processed outside the European Economic Area.

We ensure all transfers follow lawful safeguards such as Standard Contractual Clauses (SCCs).

 

9. Your Rights (GDPR, CCPA, PIPEDA)

Depending on your region, you may request to:

• Access your personal data

• Correct inaccuracies

• Request deletion (when legally possible)

• Restrict or object to processing

• Receive your data in a portable format

• Opt-out of marketing communications

• Withdraw consent at any time (cookies, email marketing)

To exercise your rights, contact us at: hello@mattiamedia.com

If you are in the EU, you also have the right to lodge a complaint with your local data protection authority (our lead authority is the Portuguese Comissão Nacional de Proteção de Dados, www.cnpd.pt).

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

 

10. How We Handle Your Requests

We reply to privacy requests free of charge and within one month (GDPR), or within 45 days for U.S. residents, extendable where the law allows it.

To protect your data, we may ask you to confirm your identity before acting on a request, usually by replying from the email address you used with us.

You may also make a request through an authorized agent, where the law of your region allows it.

We will not discriminate against you for exercising any of your privacy rights.

 

11. Notice for California and Other U.S. Residents

This section applies to residents of California and other U.S. states with privacy laws, to the extent those laws apply to us.

In the last 12 months we have collected the categories of personal information described in section 2: identifiers (such as name, email and phone number), commercial information (such as bookings and purchases), internet activity (such as pages visited) and professional information you choose to share about your business or project.

We collect this information for the purposes described in section 5 and disclose it only to the service providers listed in section 7, for business purposes.

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We have not done so in the last 12 months.

We do not use or disclose sensitive personal information for purposes other than those allowed by law.

Depending on your state, you have the right to know, access, correct and delete your personal information, to opt out of its sale or sharing, and to appeal our decision on your request by writing to hello@mattiamedia.com.

 

12. Notice for Canadian Residents

We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws.

We collect, use and disclose your personal information only with your consent or as permitted by law, and only for the purposes described in this Policy. You can withdraw your consent at any time, subject to legal or contractual limits.

You can access and correct the personal information we hold about you by writing to hello@mattiamedia.com.

The person accountable for our compliance is Mattia Gregoroni, reachable at hello@mattiamedia.com.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).

 

13. Children's Privacy

Our Website and services are intended for adults and businesses. We do not knowingly collect personal data from anyone under 16 years of age (under 13 in the United States).

If you believe a child has sent us personal data, contact us at hello@mattiamedia.com and we will delete it.

 

14. Cookies & Tracking Technologies

We currently use only the cookies needed to make the Website work (for example security, forms and bookings).

We do not use Google Analytics, Meta Pixel or other advertising trackers.

If we add analytics or marketing tools in the future, we will update this Policy and ask for your consent through the cookie banner before they are activated.

You can manage cookies through the cookie banner or your browser settings.

 

15. Data Retention

We keep personal data only as long as necessary:

• Project requests that do not lead to a collaboration: up to 24 months, then deleted

• Client, contract and invoicing data: for the period required by tax and accounting law (in Portugal, generally 10 years)

• Booking data: for as long as needed to manage the appointment and related payments

• Technical logs: for the period set by our hosting provider

After these periods, data is securely deleted.

 

16. Data Security

We implement industry-standard measures to safeguard your data from unauthorized access, loss, or alteration. Form data is checked again on our server before being saved.

However, no online system is 100% secure.

If you suspect a security issue, contact us immediately.

 

17. Updates to This Policy

We may update this Policy from time to time.

The latest version will always be available on this page.

We encourage you to review it periodically.

 

18. Contact Us

For questions regarding this Policy or to exercise your rights:

Email: hello@mattiamedia.com

Website: www.mattiamedia.com