Privacy notice
Last updated
This notice explains what personal data SiteChatbots holds, why, and what you can do about it. It’s written to be read in two minutes.
Who is responsible
The data controller is Mario Corea, trading as SiteChatbots, Via Laura Solera Mantegazza 5, 20121 Milano, Italy. Contact: mario@sitechatbots.com. SiteChatbots is a sister service of ChatbotCheck, which Mario also runs.
What we hold
About online stores we contact or work with, and the people there:
- the store’s name and website;
- the business email address the store publishes, and the page where it’s published;
- a contact’s name and role, only if the store publishes them itself;
- the emails we send and the replies we receive.
We don’t collect sensitive data, and we don’t buy, scrape or enrich contact lists.
Where it comes from
- the store’s own website: only the business addresses a store publishes there, for example on its contact page;
- what you send us yourself, for example when you email us or book a call.
Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Emailing online stores about setting up an AI assistant | Legitimate interest (GDPR Art. 6(1)(f)), with the safeguards below. We have assessed this in a Legitimate Interest Assessment, available on request. |
| Answering your enquiries | Legitimate interest (GDPR Art. 6(1)(f)) |
| Setting up and testing an assistant for a client | Contract (GDPR Art. 6(1)(b)) |
How we contact stores
- We only write to business addresses a store publishes on its own website. We never guess addresses.
- We research the company, not people: what the store sells, whether it has a chat, and its public policy pages.
- One email, and at most two short follow-ups within 9 days. We stop at the first reply of any kind.
- Every email says who we are and what we offer, and tells you how to opt out. Emails to US stores include our postal address.
- In the UK we only email limited companies (Ltd, LLP or PLC).
- A store that’s already in touch with ChatbotCheck isn’t emailed by SiteChatbots.
- Replies written by AI say so.
Opting out
One reply is enough: answer “no” to any email from us, or email mario@sitechatbots.com. We then delete your data and keep only your email address on a suppression list, shared with ChatbotCheck, so that neither service contacts you again.
How long we keep it
If you don’t reply, we delete your data 6 months after our last email. Client data is kept for as long as the contract and the law require.
Who else handles it
- Cloudflare hosts this website. It may process visitors’ IP addresses in its server logs, for security and to deliver the site.
- Zoho provides our email, from its EU data centre.
- Instantly (Instantly.ai, USA) sends our outreach emails, with open and link tracking switched off. Instantly’s data processing terms include the European Commission’s Standard Contractual Clauses, with the UK addendum, for data sent to the USA.
- Cal.com handles call bookings. When you book a call, you do it on Cal.com’s own site, under Cal.com’s terms and privacy policy, and we receive the booking details you enter there (such as your name, email address and the time you chose).
We don’t sell or share your data with anyone else.
Your rights
You can ask us to:
- give you a copy of your data (access);
- correct it;
- erase it;
- restrict how we use it;
- stop using it (objection). You have an absolute right to object to direct marketing: if you object, we stop;
- give you your data in a portable format (portability).
Email mario@sitechatbots.com. We reply within one month.
Complaints
You can complain to Italy’s data protection authority, the Garante per la protezione dei dati personali. If you live in the UK, you can also complain to the Information Commissioner’s Office (ICO). We’d appreciate the chance to fix things first, so please write to us too.
This website
This website uses no cookies, no analytics and no third-party requests: fonts and scripts are served from our own server. If you choose a currency in the pricing section, your browser remembers that choice locally; it isn’t sent to us. Our host may keep standard server logs (such as IP address, date and page requested) for security and troubleshooting.