Privacy policy

1. Who we are

This website is operated by Corviado Ltd, a company registered in England and Wales (company number 17098795). Our registered office is 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Corviado Ltd is the data controller. You are welcome to write to us at the address above. We take correspondence about this site by post, and the contact page explains what we can receive.

2. What this site does

This is a directory of Italian citizenship service providers serving the United Kingdom. We compile information from publicly available sources and present it in a structured format. The site does not sell services, take payments or have user accounts.

3. Data we collect

We collect very little personal data. Specifically:

We do not ask for special category data, such as health, religion, political opinions, biometric data or criminal records. A letter is yours to write, so something of that kind may reach us anyway. If it does, we aim to use it only to answer you and not to copy it elsewhere. If you would rather we did not hold it, please tell us and we aim to destroy it. We do not seek data from children, and the site has no user accounts.

3a. Information about other people

A letter about your family line may describe your parents, grandparents or other relatives, who may not know we hold it. We aim to use it only to answer you. We do not plan to contact anyone named in it, and we aim to destroy it with the rest of your letter. This section is our notice to them.

4. How we use your data

5. Lawful basis

We process personal data under Article 6(1)(f) of the UK GDPR (legitimate interests). Our legitimate interest is operating this directory, responding to enquiries, and maintaining site security. Given the minimal data we collect and the low privacy impact, we consider this proportionate. You can object to processing based on legitimate interests at any time (see “Your rights” below).

For information about listed firms, our legitimate interest is helping the public compare professional services in a field with no single regulator, using information that can be checked. We have weighed this up. The information is already public, it relates to professional business activity rather than private life, and we link to original sources where we can. We believe that makes publication fair and proportionate, and a firm is welcome to write to us if it sees things differently.

A data protection officer is not required under Article 37 of the UK GDPR given the nature and scale of our processing. Letters to the address in section 1 are the point of contact for all data protection matters.

6. Who we share data with

We share personal data only with service providers who help us operate this site:

Vercel hosts the site from the United States. For the personal data it handles for us, it acts as our processor, and transfers rest on the UK Addendum in its data processing agreement. For some usage data, including log data, Vercel decides how the data is used and acts as a controller under its own privacy notice, which also describes its certification under the UK Extension to the EU-US Data Privacy Framework. We have not separately checked that certification. Our address service handles post as our processor, and it may scan post and use its own suppliers, some outside the UK.

If you used a form on this site before 29 October 2026, your message did not reach us, and we are sorry for that. The forms have since been removed, and you are welcome to write to us by post instead.

We do not sell, rent, or trade your personal data. We do not share data with advertisers or marketing platforms. We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts.

7. Data retention

Letters are kept with the rest of our post. We aim to destroy them after about twelve months, when we review them by hand, and sooner if you ask. A letter about a complaint or a dispute may be kept longer, for as long as we need it for that matter. Server log retention is set by our hosting provider.

8. Your rights

Under the UK GDPR, you have the following rights in relation to your personal data:

To use any of these rights, you are welcome to write to us at the address in section 1. It costs no more than a stamp, and ordinary post is fine. The law gives us one month from receiving your request to answer.

9. Complaints

You have the right to complain to the Information Commissioner's Office (ICO) about how we handle your data:

We would welcome the chance to help first, if you would like to write to us at the address in section 1. It is entirely up to you.

10. Changes to this policy

We may update this policy from time to time. We aim to show material changes by updating the “last updated” date at the top of this page. We do not hold the details to tell you individually, so you may like to look back at this page now and then.

11. Information about listed providers

This directory contains business information about Italian citizenship service providers. This information is sourced from publicly available records including provider websites, Companies House, the SRA Register, and public review platforms. It relates to businesses and professional services, not to private individuals.

Where a listed firm is a sole trader or named individual, we process their business name and professional details under Article 6(1)(f) (legitimate interests), to help people compare professional services. They can write to us at the address in section 1 to ask for a correction or to ask to be removed, and we consider each request. They also have the right to object, and to complain to the ICO.

We also regard processing this information as carried out for journalistic purposes within Schedule 2, Part 5 of the Data Protection Act 2018, to the extent that exemption applies.