How we use
your personal data.

Who we are

Cornaglia Capital Ltd ("we", "us"), a company registered in England and Wales, is the controller of the personal data described in this notice.

For anything about your personal data, write to contact@cornagliacapital.com.

What we collect

When you contact us. Your name, email address, phone number, the messages you send us and anything you tell us about a property or project, whether by email, WhatsApp or during a call.

When you become a client. Details of the property and the project, the documents you share with us, site reports and photos, correspondence with the trades and professionals involved, billing details and, where the law requires it, proof of identity.

When you visit this website. The site sets no cookies and uses no analytics or advertising tools. The fonts and images are served from our own site, so no third party is contacted when the page loads. Our hosting provider keeps short-term technical logs (such as IP address, browser type and the pages requested) to keep the site secure and working.

We do not ask for special category data, such as health or religious beliefs. Please do not send it to us.

Why we use it, and on what basis

• To reply to your enquiry and prepare a quote: to take steps you ask for before entering into a contract, and our legitimate interest in answering people who contact us.
• To carry out a project for you: performance of our contract with you.
• To keep accounts and meet legal requirements: compliance with our legal obligations, including tax, accounting and anti-money-laundering rules where they apply.
• To keep records of our work and defend legal claims: our legitimate interest in running our business properly.

We do not send marketing messages and we do not make decisions about you by automated means.

Who we share it with

We share personal data only as far as each task needs it:

• trades, surveyors, advisers and letting or property-management professionals involved in your project, with your agreement;
• the providers we use to run our business, such as email, file storage, website hosting and WhatsApp (operated by WhatsApp Ireland Ltd, part of Meta);
• our accountants and professional advisers;
• public authorities, when the law requires it.

We never sell personal data.

International transfers

We work in the United Kingdom, Italy and France, so your data may move between these countries. The UK and the European Union recognise each other's data protection standards. Some of our providers may process data in other countries, such as the United States; when they do, we rely on an adequacy decision or on standard contractual clauses or the UK International Data Transfer Agreement.

How long we keep it

• Enquiries that do not become a project: up to 12 months after our last contact.
• Client files and accounting records: 6 years after the end of the project, the period UK law sets for tax records and most legal claims.
• Hosting logs: for the period set by our hosting provider, usually no more than 30 days.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it or send it to you or another organisation in a portable format. You can object to any use based on our legitimate interests. We reply within one month and there is normally no charge.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) or to the data protection authority where you live or work, such as the Garante per la protezione dei dati personali in Italy, the CNIL in France or the ANPD in Brazil.

Changes to this notice

If we change how we use personal data, we will update this page and the date at the top.