Privacy statement

1. Who is the data controller

Andrew Rippon, independent consultant, based in Genoa, Italy, is the controller for the personal data described here.

Contact: andrew@ripponconsulting.com · +39 327 270 6012 (also WhatsApp).

2. What data is collected

• Contact and enquiry data you choose to send me by email, WhatsApp or phone: your name, contact details, employer or organisation, and the content of your message.
• Technical data generated when your browser loads this site: IP address, browser and device type, referring page, and pages viewed. This is processed by the hosting provider in server logs for security and reliability.
• A single local preference stored in your browser recording your cookie choice and your language selection. No advertising or profiling identifiers are set.

3. Why it is processed and on what legal basis

• To reply to your enquiry and prepare a Project Approach Brief — performance of a contract or steps prior to a contract (Art. 6(1)(b) GDPR).
• To operate, secure and maintain this website — legitimate interests (Art. 6(1)(f) GDPR).
• To comply with accounting, tax and legal obligations where an engagement follows — legal obligation (Art. 6(1)(c) GDPR).
• Any non-essential cookies or analytics would only be used with your consent (Art. 6(1)(a) GDPR); consent can be withdrawn at any time.

4. There is no contact form

This site stores no enquiry database. Contact buttons simply open your own email, WhatsApp or phone application, so your message is sent through the provider you already use, under their terms.

5. Cookies and similar technologies

This site uses only strictly necessary storage required to deliver the pages and remember your cookie and language choice. Strictly necessary storage does not require consent. If optional analytics are introduced in future, they will be loaded only after you accept them in the cookie banner, and you can change or withdraw that choice at any time by clearing your browser storage for this site.

6. Who data is shared with

• Live end-user data you input to my applications is never used for training AI.
• Hosting and content-delivery providers that serve this website, acting as processors under Art. 28 GDPR.
• Google Fonts, which serves the typefaces used on these pages; your IP address is visible to that service when fonts load.
• Email, WhatsApp and telephone providers used to carry your enquiry.
• Professional advisers or authorities where required by law. Personal data is never sold.

7. International transfers

Some providers may process data outside the European Economic Area. Where that happens, transfers rely on European Commission adequacy decisions or Standard Contractual Clauses with appropriate supplementary safeguards.

8. How long data is kept

• Enquiry correspondence: up to 24 months after our last exchange, unless an engagement follows.
• Engagement and accounting records: as required by Italian law, generally 10 years.
• Server logs: short retention set by the hosting provider, typically no more than 12 months.

9. Your rights

You have the right to access your data, correct it, have it erased, restrict or object to processing, receive it in a portable format, and withdraw consent where processing is based on consent. Write to andrew@ripponconsulting.com and you will receive a reply within one month.

You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or your local supervisory authority.

10. Children

This site is aimed at professional and institutional audiences and is not directed at children.

11. AI governance commitment

This site is published by an AI governance adviser and is therefore held to the standard it recommends: AI use here is limited, disclosed and supervised by a named human. Andrew Rippon remains responsible for every page, claim and line of code published on ripponconsulting.com and reviews what is released.

Sections of this site and parts of its code have been created using AI, including drafting, editing and code generation. Where AI is used, the output is checked by Andrew Rippon before publication, no personal data of identifiable individuals is used to train third-party models, and live end-user input is never used for training (see section 6).

A full report describing which parts of the site and its code were produced with AI assistance, which tools were used and what human review was applied, can be sought on request. Write to andrew@ripponconsulting.com and it will be provided.

12. Changes

This statement may be updated to reflect changes in services or law. The date above shows the current version.