Privacy policy

Last updated: 28 September 2026

This notice describes how personal data is processed in the LBCX app (iOS and Android) and the related service at lbcx.gestic.it. LBCX is a work tool for inspectors: it is used to complete quality inspections, take photos and sync reports.

Data controller

The controller is Luxury Brands Services S.r.l., tax code and VAT number IT02268900970, with registered office at Via Traversa Pistoiese 83, 59100 Prato (PO), Italy.

Operating sites: Via Salvador Allende 81 and Via di Limite 168, 50013 Campi Bisenzio (FI), Italy.
Email: info@luxurybrandscontrol.com
Phone: +39 055 7760710

What data we use

• Inspector account. Email, password and name. The password is sent over an encrypted connection (HTTPS) and stored on the server only as a hash, never in plain text.
• Work reference data. Clients, contacts, contact emails, suppliers, brands, inspection templates and the inspectors visible to your account. They are downloaded to the phone so you can work offline.
• Inspections. Inspection data: orders, results, measurements, defects, notes and the client/contact details entered in the report.
• Photos and attachments. Images taken with the camera or chosen from the library, used in the inspection file. They stay on the device. We do not upload the original photo archive to the server: when you sync, we send the PDF report, which may include those images.
• Technical sync data. App version and a technical device identifier (user agent), together with the date, outcome and any sync errors.

The app does not show ads, does not track your activity across other apps and does not sell data.

Why we process the data

The data is needed to run LBCX: to recognise the inspector, prepare and update inspections, generate the PDF and keep it for the party that commissioned the inspection. The legal basis is performing the employment or assignment relationship under which your account was provided, and legal obligations where they apply (for example document retention).

Technical logs help us see whether a sync succeeded and fix errors. We do not use them to profile you.

Where the data is stored

• On the phone. Inspections, reference data and photos are stored in a local app database. They stay there until you delete them or uninstall LBCX.
• On the server. After sync, accounts, inspections, PDFs and logs are stored on the systems that power https://lbcx.gestic.it, on behalf of the controller.

Whoever hosts that server processes the data only to provide the service. We do not transfer data outside the European Economic Area for the app’s own purposes. Apple and Google act only as the stores from which you download LBCX, under their own privacy notices.

How long we keep it

On the phone, data remains until you delete it in the app or uninstall LBCX. On the server, inspections and PDFs are kept for as long as needed to carry out the inspections and meet retention obligations. Sync logs are kept for as long as needed to keep the service working and secure.

Phone permissions

• Camera. To take inspection photos. It does not capture in the background.
• Photo library. To attach an image already on the phone.
• Network. To sign in and sync. Without a network the app still works with data already downloaded.

You can revoke camera and library access in the phone settings. Without those permissions you cannot add new photos; the rest of the app remains usable.

Your rights

You may request access, rectification, erasure, restriction, objection and, where applicable, portability of your data. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise your rights, write to info@luxurybrandscontrol.com. If your account was opened by the company you work for, you can also contact your internal contact person.

Who the app is for

LBCX is a professional tool. It is not directed at children under 16 and we do not create accounts for children.

Updates

If processing changes in a material way, we update this page and the date above. The version published at this URL is the authoritative one.