1. Data controller
The controller is FiraCode SRL, Romanian tax ID 39227638, Trade Register no. J23/1758/2018, with its registered office at Str. Smaraldului nr. 4, bl. 2, et. 2, ap. 15, Bragadiru, județul Ilfov, România. For questions or to exercise your rights, email contact@firacode.ro.
2. Data we process
The general form requests your name, email address, phone number and project description. Company and current website are optional. In the Care form, the phone is optional while the URL and preferred plan are required. Ads and Custom forms request qualification information such as the service, geographic area, a media-budget range, account status, objective or project type. We also retain the source route, enquiry timestamp, version of this notice and a technical request identifier.
To limit abuse, the network address and user agent are transformed server-side into an HMAC. We do not store the plain IP address in the lead database.
If you separately accepted the Marketing category, the enquiry may include UTM parameters and Google click identifiers available in the URL. They are used for campaign attribution, do not contain the form data and are cleared from browser storage when the choice is withdrawn.
These forms do not request passwords, tokens, payment-card data, 2FA codes or other secrets. Access is granted later through delegated invitations.
3. Purposes and legal bases
- assessing the enquiry and communicating before a potential contract;
- preparing a scope recommendation, proposal or onboarding steps;
- preventing spam, duplicates and infrastructure abuse;
- demonstrating system operation and conducting limited technical incident investigations;
- campaign attribution, only when the Marketing category was accepted.
The checkbox confirms that this notice has been read; it does not constitute consent to marketing. We do not automatically add the enquirer to a marketing list.
4. Providers and data flow
The website is hosted on Vercel. The documented durable flow uses Supabase for controlled enquiry storage and Resend for email notifications. Providers may process data only within their technical role and the applicable contractual configuration.
5. Retention and access
The initial operational recommendation is to retain enquiries for no more than 12 months after the last relevant interaction, except where a contract, legal obligation or dispute justifies a different period. Access is limited to people managing sales and delivery.
6. Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability or object to processing, and you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing. We will verify the requester’s identity before disclosing or changing data.
7. Changes
We update this page when the form, providers, purposes or retention periods change. The applicable version is identified in the form and by the date published here.