Privacy
Privacy Policy
Last updated: 22 August 2026
Who is responsible for your data
In Any Room — publisher of
Stay in the Room
VAT / P.IVA: IT10828040963
[email protected]
Established in Italy. We are the data controller for everything described below.
1. The short version
We ask for an email address so we can send you a file you paid for. We keep the record of the
sale because tax law says we have to. We do not sell your data to anybody, and there is nothing
clever going on underneath.
2. What we collect
- Your email address, and your name if you give one, from the checkout form.
- What you bought, when, and for how much. Not your card number — that
goes straight to the payment provider and never reaches us.
- Whether our emails were delivered, opened or clicked, which is how we tell
a file that never arrived from a file that arrived and was ignored.
- Ordinary technical data your browser sends to any website: IP address,
device and browser type, the pages you looked at.
- What you write to us, if you reply to an email or send a message.
3. Why we use it, and on what legal basis
- To deliver what you bought and to handle refunds — performance of the
contract between us (Art. 6(1)(b) GDPR).
- To keep accounting and tax records — a legal obligation
(Art. 6(1)(c) GDPR).
- To email you about the other books, if you bought one — our
legitimate interest in offering related things to our own customers
(Art. 6(1)(f) GDPR). Every one of those emails has an unsubscribe link, and it works.
- To keep the site working and to prevent fraud — legitimate interest
(Art. 6(1)(f) GDPR).
- To email you if you asked to be emailed without buying — your consent
(Art. 6(1)(a) GDPR), withdrawable at any time.
4. Who else touches it
Only the companies that make the shop run, each acting on our instructions as a processor:
- HighLevel Inc. (GoHighLevel), United States — the checkout, the
customer record and the emails.
- Stripe Payments Europe, Limited, Ireland — card and wallet
payments, including Apple Pay and Google Pay. Your card details go straight to Stripe and never
reach us. Stripe is an independent controller for the payment itself and keeps its own record
of it.
- PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg — only if you
choose to pay with PayPal.
Nobody else. We do not sell, rent or trade your data, and we do not hand it to advertisers.
5. Where your data goes
Some of these providers are in the United States, so your data leaves the European Economic
Area. Those transfers rely on the European Commission's Standard Contractual Clauses, or on the
EU–US Data Privacy Framework where the provider is certified under it.
6. Cookies and tracking
The pages use the cookies GoHighLevel needs to keep a checkout session alive and to remember
that a form was submitted. Those are strictly necessary: without them the shop does not work, and
they cannot be switched off from here.
As of the date at the top of this page, no advertising or analytics pixels run on this
site. If that changes, this section changes with it and the date changes too.
7. How long we keep it
- Sales and accounting records: ten years, because Italian law requires it.
- Your email address on the mailing list: until you unsubscribe, or after
three years with no interaction at all.
- Emails you send us: as long as they are useful to the conversation, and no
longer than three years.
8. Your rights
Under the GDPR you can ask us to show you the data we hold about you, correct it, delete it,
restrict what we do with it, hand it to you in a portable format, or object to us using it for
our legitimate interests — including marketing, which you can stop at any moment with no
reason given. Where we rely on consent, you can withdraw it, and withdrawing it does not undo
what was lawful before.
Write to [email protected].
We answer within thirty days. One thing we cannot do is delete the record of a sale before the
ten years are up: the obligation to keep it is not ours to waive.
9. Complaints
If you think we have handled your data badly, tell us first — but you have the right to
complain directly to the Italian supervisory authority, the
Garante per la protezione
dei dati personali, or to the authority in the EU country where you live.
10. Children
Nothing here is sold to anyone under 18, and we do not knowingly collect data from anyone
under 18. If you believe we have, write to us and it will be deleted.
11. Changes
When this policy changes, the date at the top changes. If a change matters to people already
on the list, they get an email about it rather than a quietly edited page.