Privacy Policy | ItalianCodiceFiscale.com

PRIVACY POLICY

Effective Date: 26 October 2026

Starne Consulting LLC, doing business as “The Italian Bureau” and operating ItalianCodiceFiscale.com (“Starne”, “TIB”, “ICF”, “we”, “us” or “our”), respects your privacy and processes personal data in accordance with this Privacy Policy.

This Policy explains what data we collect, why we use it, who we may share it with, how long we retain it and the rights you may exercise when you use ItalianCodiceFiscale.com and its related services.

For privacy questions or requests, contact support@theitalianbureau.com or call +1-215-579-1700.

DATA CONTROLLER

The data controller is:

Starne Consulting LLC

The Italian Bureau

196 W. Ashland St.

Doylestown, PA 18901

United States

Email: support@theitalianbureau.com

Telephone: +1-215-579-1700

DATA WE COLLECT

To prepare and manage a Codice Fiscale application, we may collect:

• name, surname, email address, telephone number and address;

• date and place of birth, gender, citizenship and country of residence;

• passport, identity card, birth certificate, proof of address and other required documents;

• the purpose of the Codice Fiscale application;

• information needed to prepare and file the application;

• payment and transaction information, without receiving or storing complete card details;

• communications, support requests and documents submitted through the portal; and

• IP address, browser type, device, pages visited and other technical data needed for the operation and security of the website.

DATA ABOUT OTHER PEOPLE AND MINORS

You may provide data about a minor or another person whom you legally represent. In that case, you confirm that you are authorized to provide the data and request the service on that person’s behalf.

We may ask for documents proving your identity, your relationship to the applicant and your authority to act for them.

PURPOSES AND LEGAL BASES

We use personal data to:

• prepare, review and file the Codice Fiscale application;

• communicate with you and provide updates and support;

• generate the required forms and allow you to sign and upload them;

• process payment and match it to the order;

• prevent fraud, abuse, unauthorized access and security problems;

• comply with legal, tax, accounting and regulatory obligations;

• manage disputes, refunds and legal requests;

• improve the operation and reliability of the service; and

• send marketing communications only when we have the required consent.

The principal legal bases are:

• performance of a contract or steps requested before entering into a contract;

• compliance with legal obligations;

• our legitimate interests in protecting, administering and improving the service; and

• consent, where required, including for marketing or non-essential cookies.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

REQUIRED DATA

Some information and documents are necessary to prepare and file the application. If you do not provide them, or if they are incomplete or illegible, we may be unable to provide the service or may have to pause the application.

HOW WE SHARE DATA

We may share only the data reasonably necessary with:

• the Italian Revenue Agency (Agenzia delle Entrate) and other Italian authorities involved in the application;

• the professional or partner firm assigned to handle the application in Italy;

• Cloudflare (Workers and R2) for website hosting, application processing and document storage;

• Supabase for the Postgres database, accessed through Cloudflare Hyperdrive;

• Resend for transactional email;

• Stripe for payment processing;

• Referly for affiliate-referral attribution;

• TrustIndex for review display only when staff enable its embed in the CMS;

• other providers that support security, customer service and technical operation;

• professional advisers, auditors or insurers when necessary;

• public authorities or third parties where disclosure is required by law or necessary to protect rights, security or prevent fraud; and

• a buyer or successor in the event of a merger, acquisition or transfer of the business, subject to applicable law.

We do not sell personal data. We do not share customers’ identity documents, personal data or order details with affiliates.

PAYMENTS

Payments are handled by the provider shown at checkout, currently Stripe. We do not receive or store complete payment-card details.

We receive the information needed to confirm payment, match it to the order, manage refunds and reconcile any discrepancy.

AFFILIATE PROGRAMME

If you reach the website through an approved partner, we may use an identifier or cookie to attribute the referral.

We may provide the partner with aggregated information, such as the number of valid referrals or commission due. We do not share the customer’s identity, uploaded documents or application details with the partner.

Commission, discount, tracking and payment terms are agreed separately with each approved partner.

COOKIES AND TECHNICAL DATA

We use essential cookies to keep the website secure, maintain the session and allow the application to work.

Referly may use a referral identifier or cookie to attribute an approved partner referral. Google Analytics is not enabled unless the required consent mechanism is in place. If analytics, preference or other non-essential cookies are enabled, we will obtain consent where required and provide a way to manage that choice. You can also control cookies through your browser settings.

Disabling essential cookies may prevent the application or portal from working correctly.

INTERNATIONAL TRANSFERS

Starne Consulting LLC is based in the United States. The Supabase database is currently hosted in AWS us-east-2 (Ohio, United States). Cloudflare R2 document storage is located in its Eastern Europe region. Cloudflare Workers run on Cloudflare’s global network and, through Smart Placement, generally process requests near the database. Resend and Stripe process data in the United States.

Cloudflare, Supabase, Resend and Stripe provide data-processing terms. Where applicable, their international-transfer safeguards include Standard Contractual Clauses and, for participating providers, the EU–US Data Privacy Framework. You may contact us for information about the mechanism applicable to a particular transfer.

RETENTION

We retain data only for as long as reasonably necessary to:

• complete the application and deliver the result;

• provide support and handle corrections or disputes;

• comply with legal, tax and accounting obligations; and

• prevent fraud and protect our rights.

Identity documents and supporting documents are deleted or anonymized when they are no longer required for these purposes, unless the law requires longer retention. An automated deletion process runs nightly to apply the configured retention rules.

Order, payment and accounting information may be retained for longer where necessary for legal or tax obligations, fraud prevention or the establishment, exercise or defence of legal claims.

SECURITY

We use technical and organizational measures appropriate to the nature of the data, including access controls, protection of communications and limiting access to authorized personnel and partners. Cloudflare R2 and Supabase provide AES-256 encryption for data stored on their services. The application does not add a separate layer of encryption to stored data.

No information system can guarantee absolute security. If you believe your data or secure link has been compromised, contact us immediately.

COMMUNICATIONS

Emails needed to manage the application—including confirmations, document requests, updates, security notices and support replies—form part of the service.

You may withdraw consent to marketing communications at any time by using the unsubscribe link or contacting support@theitalianbureau.com.

YOUR RIGHTS

Depending on applicable law, you may have the right to:

• know whether we process data about you;

• obtain a copy of your data;

• correct inaccurate or incomplete data;

• request deletion of data;

• restrict processing;

• object to processing based on legitimate interests or for marketing;

• receive certain data in a portable format;

• withdraw consent; and

• lodge a complaint with the competent data-protection authority.

To exercise a right, email support@theitalianbureau.com. We may request information reasonably necessary to verify your identity and protect data from unauthorized requests.

We will respond within the period required by applicable law.

AUTOMATED DECISIONS

We do not use decisions based solely on automated processing that produce legal or similarly significant effects on a person.

We may use automated rules to display relevant fields, calculate the price, check completeness or identify possible errors. These functions do not replace human review of the application.

EXTERNAL LINKS

The website may contain links to third-party websites or services. Their handling of personal data is governed by their own privacy policies, not this Policy.

CHANGES TO THIS POLICY

We may update this Policy to reflect changes to the service, providers or law. If a change is material, we will update the Effective Date above and provide an appropriate notice where required.

CONTACTS AND COMPLAINTS

For questions, requests or complaints concerning personal data: