Legal
Privacy policy
This policy explains how IMCREATIVE S.R.L., trading as IMCode, processes personal data on this website and when you ask for or buy a website from us.
Who is responsible for your data
- Controller: IMCREATIVE S.R.L. (IMCode), CUI 42506829
- Trade register number: J37/264/2020
- Registered office: Str. Carpați nr. 24, Bl. O1, Sc. C, Et. 1, Ap. 45, cod poștal 731209, Bârlad
- Contact for privacy questions: office@imcreative.ro
What we process, why and on what basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| You write or call us (WhatsApp, phone) | Name, phone number, the content of your messages | Answering your request and preparing a quote | Steps at your request before a contract (GDPR art. 6(1)(b)); our legitimate interest in answering (art. 6(1)(f)) |
| You hire us | Contact and billing data of you or your company; the materials you send (texts, photos, domain details); role-based access to your Google accounts | Building the website, issuing invoices, keeping the records the law requires | Performance of the contract (art. 6(1)(b)); legal obligation for accounting and tax records (art. 6(1)(c)) |
| You accept analytics cookies | Pseudonymous identifiers, pages visited, approximate location, device and browser data, collected by Google Analytics 4 | Understanding which pages are used and improving the site | Your consent (art. 6(1)(a)); you can withdraw it at any time |
| You choose a theme or a cookie option | Your theme choice and your consent choice, stored in your browser | Remembering your choices | Our legitimate interest in a site that works as you chose (art. 6(1)(f)); this data stays in your browser |
We do not use your data for advertising, and we do not sell it. This site has no advertising cookies and does not use the Meta Pixel.
Who receives the data
We share data only with providers that help us run the service. Their own terms apply:
- Google, for Google Analytics 4, only if you accept analytics.
- WhatsApp (Meta), if you contact us through WhatsApp. Their privacy policy applies to the messages.
- The quote wizard on this website composes your message in your browser. WhatsApp and email open your own apps, and we receive the message only when you send it. If a “Send now” button is offered, the message goes through our server (a Cloudflare Worker) to our mailbox by SMTP; we do not store it on that server.
- The hosting provider of this website: Cloudflare, Inc., which hosts and delivers this website and processes technical request data such as IP addresses.
- Our accountant, for invoices and accounting records.
- Authorities, when the law requires it.
Some of these providers, such as Google and Cloudflare, can process data outside the European Economic Area. They rely on safeguards that the law accepts, such as standard contractual clauses. See their own terms for details.
How long we keep it
- Messages and quote requests that do not lead to a contract: 30 days.
- Contract and billing records: as long as the law requires accounting and tax documents to be kept.
- Project materials you sent us: 12 months after the handover, so we can fix defects and answer questions, then we delete them unless the law requires us to keep them.
- Your consent choice: stored in your browser for up to 180 days, then we ask again.
- Google Analytics data: 14 months.
Your rights
Under the GDPR you have the right to:
- access your data and receive a copy;
- have inaccurate data corrected;
- have your data erased, in the cases the law lists;
- restrict the processing;
- receive your data in a portable format;
- object to processing based on our legitimate interest;
- withdraw your consent at any time, without affecting the processing done before. For analytics, use the cookie settings in the footer.
To use a right, write to office@imcreative.ro. We answer within one month, as the GDPR requires.
You can also complain to the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), or to the authority of your own country.
Security and children
The site is served over HTTPS. We ask for access to client accounts only by role and never for passwords. The services are not aimed at children.
Changes
If we change this policy, we update the date at the top. If the change affects consent, we ask for it again.