Last updated: 15 August 2026
This Privacy Policy explains what personal data Earendel collects when you use our website or contact us, why we collect it, and what rights you have over it. We collect the minimum amount of information needed to respond to your enquiry and deliver our services — nothing more.
Earendel, a Romanian SRL based at Str. Armoniei, 23a, Ap:b1, Timișoara, Romania, is the data controller responsible for the personal data described in this policy.
We only collect personal data that you choose to give us directly. We do not use tracking cookies, analytics scripts, or advertising pixels on this site beyond what is strictly necessary for it to function.
| When | What we collect |
|---|---|
| You submit our contact form | Name, email address, and the message/project details you provide |
| You message us on WhatsApp | Your phone number and the content of our conversation |
| You email us directly | Your email address and the content of your message |
We use the information you provide for one purpose: to respond to your enquiry and, if you become a client, to deliver the website design and development services you've engaged us for. We do not sell, rent, or share your personal data with third parties for marketing purposes.
Under the EU General Data Protection Regulation (GDPR) and the UK GDPR, we process your data on the following legal bases:
We do not sell your data. We may share limited information with trusted third-party tools strictly necessary to operate our business — for example, our email provider (to send and receive messages) or WhatsApp/Meta (if you choose to message us there, subject to WhatsApp's own privacy policy). We do not share your data with advertisers or data brokers.
If you contact us but don't become a client, we retain your enquiry details for a reasonable period (up to 12 months) in case you follow up, after which it is deleted. If you become a client, we retain project-related information for as long as necessary to deliver the service and meet any legal or accounting obligations, typically in line with Romanian record-keeping requirements.
Under GDPR and UK GDPR, you have the right to:
To exercise any of these rights, contact us using the details below. We'll respond within one month, as required by law.
As we work with clients in both the EU and the UK, your data may be processed in either jurisdiction depending on where you're based and which tools we use to communicate with you. Where data is transferred between the UK and EU, we rely on the respective adequacy arrangements recognized between the two regions.
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Our services are intended for business use by adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will always reflect the most recent version.
If you're unhappy with how we've handled your data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a supervisory authority — in Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP); in the UK, this is the Information Commissioner's Office (ICO).
