Privacy Policy

This policy explains what personal data LACE collects through lacenapoli.com, why we collect it, who we share it with, and what you can ask us to do with it. It is written to meet Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.

1. Who we are

LACE is a running and social community founded in Naples, operating weekly sessions in Napoli, Caserta, Milano and Salerno. lacenapoli.com is our only official website. We are not affiliated with, and do not represent, any other organisation using a similar name.

2. What we collect

Data you give us

• Waitlist and enquiry form: your email address, and the language version of the site you used.
• Email to us: whatever you choose to include in your message.
• Membership and merchandise purchases: handled entirely by Stripe. We receive your name, email and order details from Stripe. We never see or store your card number.

Data collected automatically

• Analytics: pages viewed, approximate location at city level, device type, referring site, and which buttons you click. Collected through Google Analytics 4 (measurement ID G-B7Z8K7R6M2).
• Server logs: our host, GitHub Pages, records IP addresses and request data for security and abuse prevention.

3. Why we use it, and on what legal basis

• To answer you and send run and event updates — consent (Art. 6(1)(a)). You give it by submitting the form. You can withdraw it at any time.
• To process membership and merchandise orders — performance of a contract (Art. 6(1)(b)).
• To understand how the site is used and improve it — legitimate interests (Art. 6(1)(f)).
• To keep records required by Italian tax law — legal obligation (Art. 6(1)(c)).

We do not sell your data. We do not share it with advertisers. We do not build profiles for automated decision-making.

4. Third-party services we use

These providers process data on our behalf or as independent controllers. Each is listed with what it handles and where you can read its own policy.

• GitHub Pages (GitHub Inc., USA) — website hosting and server logs. Policy
• Web3Forms — delivers waitlist form submissions to our inbox. Policy
• Stripe — payment processing for membership and merchandise. Policy
• Google Analytics 4 (Google Ireland Ltd.) — site analytics. Policy
• Google Fonts — typefaces are requested from Google servers, which receive your IP address. Policy
• Google Workspace — our customersupport@lacenapoli.com inbox.

Some of these providers are based outside the European Economic Area. Transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

5. Cookies

The site itself sets no cookies for advertising or tracking across other websites. Google Analytics sets first-party cookies (_ga and _ga_<container>) to distinguish one visitor from another. They expire after two years. You can block them in your browser settings, or install Google's opt-out add-on, without losing access to any part of the site.

Clicking through to Instagram, Strava, WhatsApp or Stripe takes you onto their platforms, where their own cookie policies apply.

6. How long we keep it

• Waitlist emails: until you ask us to remove you, or after 24 months of no contact.
• Order and payment records: 10 years, as required by Italian accounting law.
• Analytics data: 14 months, after which Google deletes it automatically.
• Emails you send us: 24 months.

7. Your rights

Under GDPR you can ask us to:

• Give you a copy of the data we hold about you (Art. 15)
• Correct anything that is wrong (Art. 16)
• Delete it (Art. 17)
• Restrict how we use it (Art. 18)
• Send it to you or another provider in a portable format (Art. 20)
• Stop using it where we rely on legitimate interests (Art. 21)
• Withdraw consent at any time, without affecting anything done before you withdrew it (Art. 7(3))

Email customersupport@lacenapoli.com with the subject line "Privacy request". We reply within 30 days, free of charge.

If you are not satisfied with our answer, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma.

8. Children

Our weekly runs welcome all ages, but the website is not directed at children under 14. We do not knowingly collect their data. If you believe a child has submitted their details, email us and we will delete the record.

9. Security

The site is served over HTTPS with a valid TLS certificate. Payment data goes directly to Stripe and never touches our systems. Form submissions are transmitted over encrypted connections. Access to our inbox is restricted to LACE team members and protected by two-factor authentication.

10. Changes to this policy

If we change how we handle your data, we update this page and change the date at the top. Material changes affecting people on the waitlist will be sent by email.