Privacy Policy

1. Data Controller

The data controller is Beardly Brands, a trade name of LĂPUȘCĂ A. VALENTIN PERSOANĂ FIZICĂ AUTORIZATĂ (Tax ID 50475200, registered with the Romanian Trade Register under no. F2024007265008), with professional headquarters in Oradea, Bihor County, Romania. Contact: [email protected] · +40775625224.

2. What data we collect and why

Contact form (Art. 6(1)(a) GDPR — consent): name, email, phone (optional), subject and message. Used solely to respond to your enquiry and, with your separate consent, to follow up with relevant offers.

Technical server logs (Art. 6(1)(f) GDPR — legitimate interest): IP address and browser agent are automatically recorded by the web server for security and technical diagnostics, for up to 14 days.

3. How long we keep data

• Contact form data: max. 24 months from submission date.
• Technical logs: max. 14 days.

After these periods data is deleted automatically or upon your request.

4. Who we share data with

We do not sell or rent your data. We may share it only with:

• Our hosting provider (the server running this site), for strictly technical purposes;
• SMTP service used to send emails (Mailgun / Postmark / similar provider), for message delivery;
• Google LLC — for traffic analytics (Google Analytics 4) and conversion measurement / remarketing (Google Ads), only if you have given consent in the cookie banner;
• Competent authorities, when required by law.

5. International transfers

If the SMTP or hosting provider has servers outside the EEA, transfer occurs under Standard Contractual Clauses approved by the European Commission. Google Analytics and Google Ads data may be processed on Google servers in the United States, relying on the EU-US Data Privacy Framework to which Google is certified.

6. Your rights

You have the right to access, rectify, erase, port, restrict and object to processing of your data. You may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, email us at [email protected]. We respond within 30 days.

You may lodge a complaint with the Romanian National Supervisory Authority (ANSPDCP) — www.dataprotection.ro.

7. Cookies and tracking

The site uses essential cookies (for the site to function) and, only with your consent, analytics cookies (Google Analytics 4) and marketing cookies (Google Ads — for conversion measurement and remarketing). We use Google Consent Mode v2: until you give consent, no tracking cookies are set and Google receives only aggregated, anonymous signals. Full details about each cookie, retention and provider in our Cookie Policy.

8. Changes

This policy may be updated to reflect legislative changes or changes to our services. The last update date is shown at the top of this page.