Privacy Policy

Last updated: April 2026

Note on GDPR compliance: This website uses Iubenda to generate and maintain GDPR-compliant legal documents. The full, legally current version of this policy is hosted and maintained via Iubenda. The text below is a summary provided for readability. The Iubenda-hosted version governs.

🔒

Iubenda Privacy Policy loads here

Replace this block with your Iubenda Privacy Policy embed code or button.
Example: <a href="https://www.iubenda.com/privacy-policy/YOUR_ID" class="iubenda-white iubenda-noiframe iubenda-embed" title="Privacy Policy">Privacy Policy</a>

1. Controller

The data controller for this website is Matteo de Padova, operating under the brand 28CFO. Contact: matteo@28cfo.com.

2. What data we collect

We may collect the following personal data when you use this website:

Contact data: name, email address, company name, submitted through our contact form or booking system
Usage data: IP address, browser type, pages visited, time on site — collected via analytics tools
Marketing data: email address submitted through lead magnet forms (e.g. Financial Health Scorecard download)

3. Legal basis for processing

Contract: to respond to enquiries and deliver requested services
Legitimate interest: for analytics and website improvement
Consent: for marketing communications where you have opted in

4. How we use your data

To respond to contact form submissions and schedule discovery calls
To deliver digital products you have requested
To send you content you have subscribed to receive
To improve the performance and content of this website

5. Third-party services

This website uses the following third-party services, each with their own privacy policies:

Google Fonts — typography delivery
WPForms — contact and lead capture forms
Cal.com — booking and scheduling
Google Analytics — website analytics (where enabled)
Iubenda — cookie consent and legal document management

6. Data retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Contact enquiries are retained for up to 3 years. Marketing data is retained until you unsubscribe.

7. Your rights under GDPR

If you are located in the EU or UK, you have the following rights:

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

To exercise any of these rights, contact matteo@28cfo.com.

8. Cookies

This website uses cookies. See our Cookie Policy for full details.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after changes constitutes acceptance.

10. Contact

For any privacy-related questions or requests, contact: matteo@28cfo.com