Privacy Policy

Last updated: December 15, 2025   •   Version: 1.1

This Privacy Policy explains how Pro Design Agency S.R.L. ("Pro Design", "we", "us", "our") collects, uses, discloses, and protects personal data when you visit or use our website and services (the "Service").

By using the Service, you understand and acknowledge the practices described in this Privacy Policy.

1. Definitions

• Personal Data: any information relating to an identified or identifiable person.
• Usage Data: technical data collected automatically (e.g., pages visited, time spent, device/browser info).
• Cookies: small files stored on your device. We may also use similar technologies (e.g., local storage) to remember preferences.
• Service Providers: third parties that process data on our behalf (e.g., hosting, analytics, email, payments).

2. What personal data we collect

2.1 Data you provide directly

• Contact details (e.g., name, email, phone) when you submit a form or contact us.
• Business and project information you send us (e.g., requirements, messages, attachments, website content you provide).
• Billing information (e.g., invoicing details). Note: payment card details are handled by our payment processor (if used) and are not stored by us.

2.2 Data collected automatically

• Usage Data (e.g., IP address, browser type, pages visited, timestamps, referrer URLs, approximate location inferred from IP).
• Cookie/consent data: we store your cookie preferences so we can remember your choices (see "Cookies & tracking").

2.3 Data from third parties

We may receive limited information from service providers that help us operate the Service (e.g., analytics reports, email delivery logs), and from payment processors (e.g., confirmation that a payment succeeded or failed).

3. How we use personal data

• To provide and deliver services (e.g., respond to inquiries, prepare proposals, execute contracts).
• To operate, maintain, and secure the Service (e.g., prevent fraud, troubleshoot issues).
• To communicate with you (transactional messages, service updates).
• To improve our website and services (analytics, performance monitoring) when permitted.
• To market our services (only where legally permitted and/or with consent where required).
• To comply with legal obligations (e.g., tax/accounting requirements).

4. Legal bases for processing (GDPR)

If you are in the EEA/UK, we process personal data under one or more legal bases:

• Contract: to provide services and fulfill agreements with you.
• Consent: for non-essential cookies (e.g., analytics/marketing) and certain marketing communications, where required.
• Legitimate Interests: to run and secure our business, improve the Service, prevent fraud, and communicate about similar services (balanced against your rights).
• Legal Obligation: to comply with applicable laws (e.g., invoicing, accounting).

When we rely on legitimate interests, we assess and balance our interests against your rights and freedoms, and we only process what is reasonably necessary for those purposes.

5. Cookies & tracking

We use cookies and similar technologies to operate the Service and, where you consent, to analyze usage and improve performance. Our cookie practices follow applicable EU "ePrivacy" rules and GDPR requirements for consent-based cookies.

For detailed information (including a cookie list/table), see our Cookies Policy.

5.1 Cookie categories

• Necessary: required for core site functionality and security.
• Analytics (optional): helps us understand how the site is used (only with consent).
• Marketing (optional): used for advertising/remarketing (only with consent, and only if enabled).

5.2 Managing consent

You can accept, reject, or customize non-essential cookies via our cookie banner. You can also revisit your choices using the "Cookie settings" button (if present) or by clearing your browser storage.

Note: we store your consent choices in your browser (e.g., local storage) so we can remember your preferences.

6. Email communications

We may send you transactional emails (e.g., invoices, service messages). Where permitted by law, we may also send marketing emails about services you requested or similar services you might be interested in.

You can unsubscribe from marketing emails at any time using the link in the email or by contacting us. Transactional emails are necessary for providing the Service.

7. Sharing and disclosure of personal data

We may share personal data in the following situations:

• Service Providers: hosting, email delivery, analytics, security, CRM, payment processing (as applicable).
• Legal: if required by law or valid governmental request.
• Business transfers: merger, acquisition, or asset sale (with notice where required).
• With your consent: where you explicitly ask us to.

7.1 Typical categories of processors (fill in what you actually use)

Replace placeholders below with your real stack. Delete anything you don't use.

• Website hosting / infrastructure: [Hostinger / other]
• CDN / security / performance: [Cloudflare / other]
• Analytics: [Google Analytics / GA4 / other]
• Email provider: [Outlook / Hostinger Mail / other]
• Forms / CRM / automation: [Formspree / GoHighLevel / Zapier / other]
• Payments: [Stripe / PayPal / other] (if applicable)

8. International data transfers

Your data may be processed in Romania and in other countries where our Service Providers operate. If we transfer Personal Data outside the EEA/UK to countries that do not provide an equivalent level of protection, we use appropriate safeguards (such as Standard Contractual Clauses) where required.

9. Data retention

We keep personal data only as long as necessary for the purposes described in this policy, unless a longer period is required by law.

10. Security

We use reasonable technical and organizational measures to protect personal data (e.g., access controls, secure configuration, and vendor security features). However, no method of transmission or storage is 100% secure.

11. Your rights (GDPR)

If you are in the EEA/UK, you may have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion (where applicable)
• Restrict processing (where applicable)
• Object to processing (including objection to marketing)
• Data portability (where applicable)
• Withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact [email protected]. We may need to verify your identity before responding. We typically respond within 30 days, as required by GDPR (unless an extension applies).

You also have the right to lodge a complaint with your local data protection authority. In Romania, this is ANSPDCP.

12. Automated decision-making

We do not use automated decision-making (including profiling) that produces legal effects concerning you or similarly significantly affects you.

13. Children's privacy

Our Service is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take steps to delete it.

14. Links to other websites

Our Service may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites. Please review their policies.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time by posting the updated version on this page and changing the "Last updated" date.

16. Contact

• Email: [email protected]
• Address: Pro Design Agency S.R.L., Romania
• Privacy page: /privacy-policy.html

Disclaimer: This Privacy Policy is provided for general informational purposes and does not constitute legal advice. Consider legal review to ensure it matches your exact processing activities and vendors.