Fiamma Academy · Legal

Privacy Policy

Last updated: 15 July 2026

This policy explains how we handle personal data collected through the Fiamma Academy waitlist. It is written to meet the requirements of both the EU / Italian General Data Protection Regulation (GDPR) and the Australian Privacy Act 1988 (Cth) and its Australian Privacy Principles (APPs).

1. Who we are (Data Controller)

The controller responsible for your personal data is Giada Rimondi, trading as Fiamma Candele, based in Reservoir 3073, Melbourne VIC, Australia.

We have not appointed a Data Protection Officer (DPO), as we are not required to. You can reach us for any privacy question at the email above.

2. What personal data we collect

When you join the Fiamma Academy waitlist, we collect the information you provide in the sign-up form, and a limited amount of technical data needed to record your consent and protect the form:

DataSourceWhy
First nameYou, via the formTo address you personally in our emails
Email addressYou, via the formTo send the free guide and Academy updates
Consent record (date, time, and the fact you ticked the consent box; IP address may be logged by our email provider)Automatically, at sign-upTo prove valid consent, as required by law
Anti-spam signal (a hidden "honeypot" field)AutomaticallyTo block automated/bot submissions

We do not collect payment details, and we do not run advertising or analytics trackers on this page.

3. How we collect it and on what legal basis

We collect your data only when you actively submit the waitlist form and tick the consent box. We use a double opt-in process: after signing up, you receive an email asking you to confirm your subscription, and we only add you to the list once you confirm.

Under the GDPR (EU / Italy)

Our legal basis for sending you marketing and educational emails is your consent (Article 6(1)(a) GDPR). You give this consent freely by ticking the box and confirming your email, and you can withdraw it at any time (see section 8). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Under the Australian Privacy Act

We collect your personal information directly from you for the primary purpose of operating the Fiamma Academy waitlist and sending you the material you asked for. We handle it in line with the Australian Privacy Principles, and every marketing email includes a simple way to opt out.

4. How we use your data

We will not use your data for automated decision-making that produces legal or similarly significant effects, and we will not sell your personal data.

5. Email delivery and our processor (Brevo)

We use Brevo (Sendinblue) to manage our contact list and send emails. Brevo acts as our data processor, handling your data on our behalf and under our instructions. Brevo is an EU-based provider and stores contact data on servers located in the European Union (France and Germany), which offer GDPR-level protection.

Brevo's own handling of data is described in its privacy documentation at brevo.com/legal/privacypolicy.

6. Sharing, disclosure and international transfers

We share your personal data only with:

Because we operate from Australia and use an EU-based email provider, your data may be transferred and stored between Australia and the European Union. Where the GDPR applies, such transfers are protected by appropriate safeguards (for example, the European Commission's Standard Contractual Clauses). Where the Australian Privacy Act applies, we take reasonable steps to ensure overseas recipients handle your data consistently with the APPs.

7. How long we keep your data

We keep your data for as long as you remain subscribed to the Fiamma Academy waitlist. If you unsubscribe or withdraw your consent, we remove you from active mailing lists. We may retain a minimal record of your unsubscribe request and prior consent for as long as needed to comply with our legal obligations and to honour your choice not to be contacted.

8. Your rights and choices

You can unsubscribe at any time using the link at the bottom of every email we send, or by emailing us at giada@fiammacandele.com.

If you are in the EU / Italy (GDPR)

You have the right to:

You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).

If you are in Australia (Privacy Act)

We will respond to any request within the timeframes required by the applicable law.

9. Cookies and third-party resources

This page does not use advertising or analytics cookies. It does load a small number of third-party resources needed to display the page and run the sign-up form:

Typography fonts are served directly from our own hosting (self-hosted), so displaying this page does not send your IP address to Google Fonts or any other font CDN.

10. Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Email data is held within Brevo's secured, ISO 27001-certified infrastructure. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

11. Children

Fiamma Academy is intended for adults. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of the page. Significant changes affecting how we use your data will be communicated where appropriate.

13. Contact us

For any question about this policy or your personal data, contact Giada Rimondi (Fiamma Candele) at giada@fiammacandele.com, or write to us at Reservoir 3073, VIC, Australia.

← Back to the waitlist