Privacy Policy

ITOX LTD is the data controller for personal data collected through this website. Our registered office is Viale Lucania 3, 20139 Milan, Italy.

You can contact us about this policy at info@itox.it or by telephone on +39 351 5976359.

We only collect personal data that you give us directly through one of the forms on this site. We do not buy contact data, and we do not build profiles of visitors who have not contacted us.

• Service requests: your name, company, email address, telephone number, the site address, a description of the requirement, and any equipment or commercial references you supply.
• Contact enquiries: your name, company, email address, telephone number, country and message.
• Support tickets: your name, company, email address, the category and description of the issue, and any reference you quote.
• Job applications: your name, contact details, location, the role you are applying for, your experience, an optional LinkedIn URL and an optional CV.
• Technical data: the IP address a submission came from, recorded to prevent abuse of the forms.
• Cookie choices: your consent decision and when you made it, stored in your browser.

• To respond to your enquiry, quote for work, and deliver the services you ask for. Lawful basis: performance of a contract, or steps taken at your request before entering into one.
• To consider your job application. Lawful basis: steps taken at your request before entering into a contract, and your consent for us to retain the application.
• To protect the website from automated abuse and spam. Lawful basis: our legitimate interest in keeping the service available.
• To measure how the website is used, but only if you accept analytics cookies. Lawful basis: your consent.
• To meet our legal, accounting and tax obligations. Lawful basis: compliance with a legal obligation.

We keep enquiries and service requests for as long as needed to deal with them, and afterwards for as long as we may need them for our commercial, accounting or legal obligations.

Job applications are kept for up to twelve months from submission unless you ask us to remove them sooner, or you join us.

Your cookie choice is stored in your browser and expires or can be cleared by you at any time.

We do not sell personal data. We share it only with the service providers that operate this website and our operations, and only so far as they need it:

• Supabase, which hosts the database and file storage that submissions are written to.
• Resend, which delivers the confirmation and notification emails triggered by your submission.
• Vercel, which hosts the website itself.
• Google, if you have accepted analytics cookies, and for the map on our coverage page.
• Cloudflare, if the anti-spam check is enabled on our forms.
• Where a requirement is delivered by an engineer, the details necessary to complete the work are shared with the engineer attending your site.

Some of the providers above may process data outside the European Economic Area. Where that happens, the transfer is covered by the safeguards those providers put in place, such as the European Commission standard contractual clauses.

Under the General Data Protection Regulation you have the right to ask us for a copy of your personal data, to correct it, to erase it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, email info@itox.it. If you are not satisfied with our response you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali.

This site sets only what is strictly necessary unless you tell us otherwise. Analytics and marketing cookies are loaded only after you have accepted them, and you can change your decision at any time using the cookie preferences link in the footer. Our cookie policy explains this in more detail.

Submissions are transmitted over HTTPS and stored in access-controlled systems. Uploaded CVs are held in a private storage bucket that is not publicly readable. Access is limited to the people who need it to do their work.

No system is perfectly secure. If we become aware of a breach affecting your personal data we will act on our obligations to notify the authority and, where required, you.

If we change this policy we will update the date at the top of this page. Where the change is significant we will make that clear on the site.