Privacy Policy
Last updated: 18 June 2026
Note: This is a courtesy English translation. The Romanian version is the legally binding text per Romanian law.
⚠ DEMO — The company's legal details (legal name, VAT ID, legal form, registered office) have not yet been set and will be completed before launch.
1. Data controller
This data is processed by:
GlowUp Business (trade name)
Legal name: ⚠ TODO: to be completed (sole trader / company)
VAT ID: ⚠ TODO: to be completed
Trade register no.: ⚠ TODO: to be completed
Contact person / owner: Andrei
Email: hey@andrei-c.dev
Hereinafter "we", "GlowUp Business".
2. About this policy
This policy explains what personal data we collect about you through the website glowup-business-website.pages.dev, why we collect it, how long we keep it and what rights you have. It complies with EU Regulation 2016/679 (GDPR) and Romanian Law 190/2018.
Questions? Write to hey@andrei-c.dev or message us on WhatsApp.
3. What data we collect
3.1. Data you provide when you contact us
The site has no contact form. You reach us directly via WhatsApp or email. When you do, we only collect the data you choose to send — typically your name or business name, the contact details you use, and the details of what you want (the message itself). We use it solely to reply, estimate and discuss a possible project.
3.2. Data collected automatically
The site is hosted on Cloudflare Pages. Cloudflare processes IP address (pseudonymised, anti-bot), browser/OS type, the page visited and the referrer — for security and performance only. We do not use Google Analytics, Facebook Pixel or marketing tracking. See the Cookie Policy.
3.3. Data we do not collect
- We do not collect national ID, bank details or other sensitive data via the site.
- We do not collect data about minors. The site is intended for people over 16.
- We do not use automated profiling or automated decisions (art. 22 GDPR).
- We do not sell your data or share it with third parties for marketing.
4. Why we collect this data (purpose and legal basis)
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Message data (WhatsApp / email) | Reply to your request, estimate a project, discuss working together | Art. 6(1)(b) — pre-contractual steps at your request |
| Cloudflare data (IP, browser) | Security, anti-bot, site performance | Art. 6(1)(f) — legitimate interest |
5. Who we share data with (processors)
| Provider | Purpose | Country | Safeguards |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, anti-bot security | USA + edge network (incl. EU) | Standard Contractual Clauses (SCC). Cloudflare policy |
| Meta Platforms Ireland Ltd. (WhatsApp) | Delivering the messages you send us via WhatsApp | Ireland (EU) + USA | Per the WhatsApp policy. WhatsApp policy |
If you message us on WhatsApp, the conversation is also processed by Meta under its own policy — as an independent controller for the WhatsApp service. We do not sell your data or share it for marketing.
6. How long we keep data
| Category | Duration |
|---|---|
| Messages received via WhatsApp / email | 12 months from last interaction, then deleted. |
| Cloudflare logs | Per Cloudflare's policy (typically 30 days). |
| Contract documents (if you become a client) | 10 years per Romanian tax law. |
7. Your rights
- Right of access (art. 15)
- Right to rectification (art. 16)
- Right to erasure (art. 17)
- Right to restriction (art. 18)
- Right to portability (art. 20)
- Right to object (art. 21)
- Right to withdraw consent at any time (art. 7)
To exercise these rights, write to hey@andrei-c.dev. We reply within 30 days (art. 12 GDPR).
8. Complaints to the supervisory authority
National Supervisory Authority for Personal Data Processing (ANSPDCP)
Address: B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest, 010336
Phone: +40 318 059 211 / +40 318 059 212
Email: anspdcp@dataprotection.ro
Web: www.dataprotection.ro
9. Security
- The site uses HTTPS (TLS encryption).
- Cloudflare provides anti-DDoS and anti-bot protection.
- Access to the business inbox is restricted to authorised persons.
- Notification to ANSPDCP within 72 hours in case of a security incident.
10. International transfers
Some data is processed outside the EU (USA — Cloudflare; Meta for WhatsApp), based on Standard Contractual Clauses (SCC) approved by the European Commission.
11. Cookies
See the Cookie Policy for details.
12. Changes to this policy
We may update this policy. The current version is indicated at the top. Significant changes will be announced on the site.
13. Contact
GlowUp Business
Email: hey@andrei-c.dev