Privacy Policy

This Privacy Policy explains how Reframe Agency collects, uses, shares, and protects personal data through this website, and the rights you have under the General Data Protection Regulation (EU) 2016/679 (GDPR). It applies to everyone who contacts us, subscribes to our newsletter, or joins a Drop waitlist.

Who Is Responsible for Your Data

Reframe Agency SRL, a company registered in Romania, is the data controller for the personal data described here. Company identification: sole registration code (CUI) 54099184, trade register number J2026012999004, registered office at Str. Traian Vuia, nr. 2, et. 2, ap. 15, Cluj-Napoca, jud. Cluj, Romania. You can reach us about any privacy matter at hello@reframeagency.com.

What We Collect and Why

We collect only what we need for the thing you asked us to do. We do not buy personal data, we do not sell it, and we do not build advertising profiles.

Project Inquiries

When you submit the contact form, we receive your name, email address, and the message you write, including any business details you choose to share. We use this to reply, assess whether we are a good fit, discuss scope, and prepare a proposal. The legal basis is our legitimate interest in responding to business enquiries and, where the exchange moves towards an engagement, taking steps at your request before entering into a contract.

Newsletter

When you subscribe to our newsletter, we collect your email address and a record of which page you subscribed from. We use this to send field notes and occasional announcements. The legal basis is your consent, which you can withdraw at any time using the unsubscribe link in any email or by contacting us. Withdrawing consent does not affect the lawfulness of anything sent beforehand.

Drop Waitlists

When you ask for first notice on a Drop item, we collect your email address and a tag identifying which item you asked about. We use that tag to tell you when the item becomes available, and to understand how many people want it before we decide to make it. The legal basis is your consent, withdrawable in the same way as the newsletter.

Server Logs and Security

Our hosting provider processes technical data such as IP address, browser type, and time of request in order to serve the website, protect it against abuse, and keep it available. The legal basis is our legitimate interest in operating a secure and functioning website.

Who Processes Data on Our Behalf

We use a small number of service providers who process personal data on our instructions, under contract, and only for the purposes described here: an email delivery provider for contact form messages, a newsletter platform for subscriptions and Drop waitlists, a content management system for website content, and a hosting provider for serving the website. Some are established outside the European Economic Area. Where that is the case, transfers are made under an adequacy decision or Standard Contractual Clauses approved by the European Commission, with appropriate safeguards. We can tell you which providers we use, and where they are located, on request.

Third-Party Services You Choose to Use

Some pages link to services operated by others, such as social platforms or, in future, hosted checkout pages. Those services act as independent controllers under their own privacy policies, and this policy does not cover them.

How Long We Keep Data

Inquiry correspondence is kept for as long as needed to handle the enquiry and, where a project follows, for as long as required by the engagement and by Romanian accounting and tax law. Newsletter and waitlist data is kept until you unsubscribe or withdraw consent, after which your address is removed or suppressed so we do not contact you again by mistake. Server logs are kept for a short period for security purposes.

Automated Decisions

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

Your Rights

Under the GDPR you have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, write to hello@reframeagency.com. We will respond within the timeframes set by the GDPR.

Complaints

If you believe we have handled your personal data improperly, we would like the chance to put it right, so please contact us first. You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at dataprotection.ro, or with the supervisory authority where you live.

Security

The website is served over an encrypted connection, form submissions are protected against automated abuse, and access to personal data is limited to the people who need it. No system is perfectly secure, but we take technical and organisational measures appropriate to the data we hold.

Cookies

Our use of cookies and similar technologies is described separately in our Cookie Policy.

Changes

We may update this Privacy Policy when the website, our services, our providers, or legal requirements change. The updated version will be posted on this page with a new date at the top.

Contact

For any question about this policy or about how we handle personal data, contact Reframe at hello@reframeagency.com.