Privacy Policy

Last updated: October 6, 2026

1. Introduction

Welcome to nicolatoledo.com ("the Site"), operated by Nicola Toledo ("we", "us", or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit the Site.

2. Data Controller

The data controller responsible for your personal data is Nicola Toledo. For any questions regarding this policy, you can contact us at [email protected].

3. Information We Collect

3.1 Analytics Data

We use PostHog, on its EU cloud with servers in Frankfurt (Germany), to understand how visitors use the Site, and Vercel Web Analytics and Speed Insights to measure performance. Together they collect:

  • Pages visited, the page you came from (referrer), and campaign parameters (UTM) in the link
  • Clicks, scrolling, and interactions on the page, and page load performance metrics
  • Browser type, language, time zone, and device information
  • Approximate geographic location (country/region level), from Vercel Web Analytics only

PostHog runs without cookies and does not use a persistent identifier. To count visits, it combines your IP address and browser information into an anonymous code that changes every day and cannot be traced back to you. The IP address itself is not stored. When you book a call, PostHog only records that a booking happened and the language of the page, never your name or email.

3.2 Booking Information

When you book a call through our contact page (powered by Cal.com), you provide your name, email address, and any additional information you choose to share. This data is processed by Cal.com according to their Privacy Policy.

3.3 Contact Form

When you submit the form on the AI page, I collect your name, email address, optional company, service of interest, and message. The data is delivered by email through Resend and is not stored in a Site database.

4. How We Use Your Data

We use the collected data to:

  • Understand how visitors interact with the Site to improve content and performance
  • Respond to requests submitted through the form or Cal.com and communicate about potential projects
  • Ensure the Site functions correctly

5. Cookies

The Site does not use profiling or marketing cookies. In particular:

  • PostHog and Vercel Web Analytics: PostHog runs in cookieless mode and stores nothing in your browser; Vercel states that Web Analytics does not use cookies
  • Third-party embeds: Cal.com and Substack may apply their own technologies according to their respective policies when you interact with their content
  • Cloudflare Turnstile: protects the form from spam and may process technical browser data to distinguish people from bots

You can manage or block any third-party cookies from your browser settings.

6. Third-Party Services

We use the following third-party services:

7. Your data rights

Even though I do not run a user database, some data may be processed when you submit the form, book a call, subscribe to the newsletter, or interact with the third-party services listed above. Where the GDPR applies, you may ask to:

  • Access your personal data
  • Rectify inaccurate personal data
  • Request erasure of your personal data
  • Object to processing of your personal data
  • Request restriction of processing
  • Data portability
  • Withdraw consent where consent has been given

For requests about data processed directly by me, please contact me at [email protected].

8. Data Retention

Data processed through Vercel, PostHog, Cal.com, Substack, Resend, and Cloudflare is retained according to their respective policies. I do not run a user database for the Site; data received directly through email, the form, or a booking is retained only as long as needed to handle the request and any follow-up communication.

9. Data Security

We take appropriate technical and organizational measures to protect your personal data. The Site is served over HTTPS, and we rely on Vercel's enterprise-grade security infrastructure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

11. Contact

If you have any questions about this Privacy Policy, please contact us at [email protected].