Legal

Privacy policy

Last updated: June 2026

Who we are

Milan School Reviews operates the website milanschoolreviews.com. We are based in Milan, Italy. For any privacy-related questions, contact us at contact@milanschoolreviews.com.

What data we collect

When you create an account, we collect your first name, last initial, chosen public alias, and email address. When you submit a review, we collect your written review content, school ratings, and an enrolment verification document (PDF or image). We also collect your IP address and basic usage data through our hosting provider.

We do not collect payment information, precise location data, or any data about your children beyond what you choose to include in your review text.

Why we collect it

Your email is used solely to send you a sign-in link and notify you when your review is approved or rejected. Your name and alias are used to manage your account. Your verification document is used to confirm that you are a current or former parent at the school you reviewed. It is never shown publicly and is deleted once verification is complete.

Legal basis (GDPR)

We process your data on the basis of your consent, given when you create an account. You may withdraw this consent at any time by requesting account deletion. Where we have a legitimate interest (such as preventing fraudulent reviews or understanding how the site is used), we rely on that basis only where it does not override your rights.

Who sees your data

Your email address and full name are never shown publicly. Your alias appears next to your reviews only if you choose one. Your verification document is seen only by Milan School Reviews administrators and is never shared with the school, other users, or third parties.

We use the following third-party services to operate the site:

  • Supabase, database and authentication (servers in EU)
  • Vercel, website hosting
  • Resend, transactional email delivery
  • Google Analytics, anonymous traffic statistics

How long we keep your data

Your account data is kept for as long as your account is active. Verification documents are deleted within 30 days of your review being approved or rejected. If you request deletion of your account or review, all associated personal data is deleted within 30 days. To make a request, email us at contact@milanschoolreviews.com.

Your rights under GDPR

As a resident of the EU, you have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your data, object to or restrict processing, and lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) at garanteprivacy.it.

To exercise any of these rights, email us at contact@milanschoolreviews.com. We will respond within 30 days.

Cookies and analytics

We use technically necessary cookies to keep you signed in. We also use Google Analytics to understand how visitors use the site, which sets its own cookies to count visits, pages viewed, and approximate location. We do not use this data to identify you personally, and we do not run advertising on the site.

If you prefer not to be measured, you can install the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout, use your browser's private or incognito mode, or block analytics cookies with any standard tracker-blocking extension.

Changes to this policy

If we make significant changes to how we handle your data, we will notify you by email and update the date at the top of this page.