Privacy Policy

Last updated: February 2026

1. Who We Are (Data Controller)

• Controller: Amortoae Petru PFA
• Address: Sibiu, Romania
• Contact email: info@sitein72.com

If you have any questions or requests about your data, contact us at the email above.

2. What Data We Collect

We may collect the following categories of personal data (depending on how you interact with us):

A. Data you provide

• Contact details: name, email, phone number
• Business details: company name, industry, location, services, service area
• Project data: website content you send us (text, images, logos), brand assets, instructions, feedback
• Communications: emails/messages you send us, support requests

B. Payment and billing data

• Invoice details and payment status
• Transaction identifiers and confirmations from our payment provider

Note: we do not typically store full card data; payment processing is handled by the payment provider.

C. Technical and usage data

• IP address (often), device/browser type, pages viewed, approximate location (from IP), referral source
• Cookies and similar technologies (see Section 8)

3. How We Use Your Data

We use your data to:

• Provide and deliver our services (build, host, and maintain websites)
• Communicate with you about your project, requests, and support
• Process payments, prevent fraud, and keep accounting records
• Improve our website, service quality, and security
• Comply with legal obligations (tax, bookkeeping, and lawful requests)

4. Legal Bases (GDPR)

If you are in the European Economic Area/UK, we process personal data under these legal bases:

• Contract (to deliver the service you request)
• Legitimate interests (running and securing our business, improving our service)
• Legal obligation (accounting/tax compliance)
• Consent (for non-essential cookies/marketing, where required)

GDPR requires we provide specific transparency info at the time of collection (including purposes, legal basis, retention, and your rights).

5. How We Share Your Data

We may share personal data only as needed with:

A. Service providers (processors)

Hosting/infrastructure providers, email/communication tools, security services, and other vendors we use to operate SiteIn72. They are permitted to process data only to provide services to us.

B. Payment processing

Payments are processed by PayPal. Your personal data may be shared with payment networks and processors to complete transactions.

C. Legal and compliance

If required by law, subpoena, court order, or to protect rights/safety.

We do not sell your personal information.

6. International Data Transfers

We are based in Romania and may use service providers in other countries (including the United States). When personal data is transferred internationally, we take steps designed to ensure an appropriate level of protection (for example, contractual safeguards where applicable).

7. Data Retention

We keep personal data only as long as necessary for the purposes described above, then delete or anonymize it.

Typical retention:

• Client/project communications & project files: for the duration of the subscription + up to 24 months after last interaction (for support, backups, disputes)
• Billing and accounting records: for the period required by applicable law (often multiple years)
• Website logs/security events: typically 30–180 days unless needed longer for security investigations

Under California privacy rules, businesses should disclose how long they intend to retain each category of personal information (or the criteria used).

8. Cookies and Analytics

We may use:

• Essential cookies (site functionality, security)
• Preference cookies (remember choices)
• Analytics cookies (understand traffic and usage)

Where required, we will request consent for non-essential cookies. You can control cookies via your browser settings.

9. Security

We use reasonable administrative, technical, and organizational measures to protect personal data. However, no method of transmission or storage is 100% secure.

10. Your Privacy Rights

Depending on your location, you may have rights such as:

• Access to your personal data
• Correction of inaccurate data
• Deletion (where applicable)
• Objection or restriction of processing
• Data portability
• Withdraw consent (where consent is the legal basis)

To exercise rights, email info@sitein72.com. We may need to verify your identity before acting on a request.

11. California Privacy Notice (CCPA/CPRA)

If you are a California resident, and if our business is subject to the CCPA/CPRA, you may have additional rights (such as knowing what we collect, deleting, correcting, and opting out of "sale"/"sharing" in certain cases). California requires a "Notice at Collection" that lists categories collected, purposes, whether data is sold/shared, and retention.

• What we collect (categories): identifiers (name/email), customer records (business contact info), internet/network activity (usage data), and commercial information (invoices/payment status).
• Purposes: providing services, customer support, payments/accounting, security, and improving our site.
• Sold/Shared: We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising.
• Retention: See Section 7.

To submit a request: email info@sitein72.com with subject "California Privacy Request".

12. Children's Privacy

Our services are not directed to children under 13 (or under 16 where applicable), and we do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date will change, and the updated version will apply once posted.

14. Contact

For privacy questions or requests: info@sitein72.com