Privacy policy


Last updated: October 2, 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Laura Brunazzo
Email: hello@laurabrunazzo.com

2. General Information

I take the protection of your personal data seriously. Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Personal data means any information relating to an identified or identifiable natural person.

3. Website Hosting and Server Data

This website is hosted by:

Squarespace Ireland Limited
Squarespace House, Ship Street Great
Dublin 8, Ireland

When you visit this website, technical data necessary to provide and secure the website may be processed. This may include your IP address, browser and device information, referring URL, and date and time of access.

Purpose: operation and security of the website
Legal basis: Art. 6(1)(f) GDPR

4. Cookies and Consent Management

This website uses cookies and similar technologies.

Technically necessary cookies may be used to provide and secure the website. Analytics, advertising and other non-essential technologies are used only where you have given your consent.

You can manage or withdraw your consent through the cookie settings on this website.

Legal basis: Art. 6(1)(f) GDPR for technically necessary processing and Art. 6(1)(a) GDPR for processing based on consent.

5. Contact

If you contact me by email or through a contact form, I process the information you provide, such as your name, email address and message.

Purpose: responding to your inquiry
Legal basis: Art. 6(1)(f) GDPR and, where applicable, Art. 6(1)(b) GDPR

6. Newsletter and Waitlist

If you subscribe to my newsletter or join a waitlist, I process the information you provide for the purpose described at the time of signup.

I use MailerLite to manage email subscriptions and communications.

Provider: MailerLite Limited, Ireland.

Depending on the settings used, MailerLite may also process information relating to the delivery and interaction with emails.

Legal basis: Art. 6(1)(a) GDPR

You may withdraw your consent and unsubscribe at any time using the unsubscribe link contained in each email.

7. Scheduling – Acuity Scheduling

Where appointment scheduling is offered on this website, I use Acuity Scheduling, a service provided by Squarespace.

When you make a booking, information such as your name, email address and appointment details may be processed.

Purpose: scheduling and managing appointments requested by you
Legal basis: Art. 6(1)(b) GDPR where the booking relates to a contractual or pre-contractual request and Art. 6(1)(f) GDPR in other cases.

Where non-essential cookies or similar technologies are used in connection with Acuity, these are subject to your consent where required.

8. Video Content – Vimeo

Videos on this website may be embedded using Vimeo.

Provider: Vimeo.com, Inc., USA.

When Vimeo content is loaded, technical information such as your IP address and device or usage information may be transmitted to Vimeo.

Where consent is required, Vimeo content will only be loaded after you have given your consent.

Legal basis: Art. 6(1)(a) GDPR where consent is required.

9. Community Platform – Heartbeat

Where access to my free community is offered through Heartbeat, personal data such as your name, email address, profile information and content you choose to share within the community may be processed.

Purpose: providing and administering community access
Legal basis: Art. 6(1)(b) GDPR where access is requested by you and, where applicable, Art. 6(1)(f) GDPR.

10. Google Analytics and Google Tag Manager

This website uses Google Analytics and Google Tag Manager, services provided by Google.

Google Analytics may process information about your use of this website, including device and browser information, interactions with the website and online identifiers.

Google Tag Manager is used to manage website tags and may facilitate the activation of other technologies described in this Privacy Policy.

Google Analytics and other non-essential Google technologies are activated only after you have given the required consent.

Legal basis: Art. 6(1)(a) GDPR

You can withdraw your consent at any time through the cookie settings.

11. Meta Pixel

This website uses the Meta Pixel, provided by Meta Platforms Ireland Limited.

The Meta Pixel may process information about visits to and interactions with this website. This may be used to measure the effectiveness of content or advertising and, where applicable, to create audiences within Meta services.

The Meta Pixel is activated only after you have given the required consent.

Legal basis: Art. 6(1)(a) GDPR

You can withdraw your consent at any time through the cookie settings.

12. Data Sharing

I do not sell your personal data.

Personal data is shared with service providers only where necessary to operate this website, provide functionality requested by you, send communications or comply with legal obligations.

Service providers may process personal data on my behalf or, where applicable, as independent controllers.

13. International Data Transfers

Some service providers may process personal data outside the European Economic Area, including in the United States.

Where required, international transfers are based on an applicable adequacy decision, including the EU-U.S. Data Privacy Framework where applicable, or appropriate safeguards such as Standard Contractual Clauses.

14. Retention

Personal data is retained only for as long as necessary for the respective purpose or as required by law.

Newsletter and waitlist data is generally retained until you withdraw your consent or unsubscribe, unless further retention is required by law.

Contact inquiries are retained for as long as necessary to process the respective inquiry.

15. Your Rights

Under the GDPR, you have the right, where the respective legal requirements are met, to:

  • access your personal data (Art. 15 GDPR)

  • rectify inaccurate personal data (Art. 16 GDPR)

  • request deletion (Art. 17 GDPR)

  • restrict processing (Art. 18 GDPR)

  • receive your data in a portable format (Art. 20 GDPR)

  • object to certain processing (Art. 21 GDPR)

  • withdraw consent at any time for future processing

To exercise your rights, contact: hello@laurabrunazzo.com

You also have the right to lodge a complaint with the competent data protection supervisory authority.

16. Right to Object

Where personal data is processed on the basis of legitimate interests under Art. 6(1)(f) GDPR, you have the right to object to such processing in accordance with Art. 21 GDPR.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

17. Automated Decision-Making

I do not use automated decision-making within the meaning of Art. 22 GDPR.

18. Changes to this Privacy Policy

This Privacy Policy may be updated when the website, the services used or legal requirements change.