Privacy Policy

DRAFT FOR LEGAL REVIEW. Plain-language outline for a lawyer to check and complete. Not legal advice. Do not publish before review.

Last updated: [date] · Version [n]

1. Who we are

FA STUDIOS S.R.L. (company data above) is the controller of the personal data described here. Contact for anything privacy-related: contact@fastudios.co.

2. What we collect

(a) Data you send through the project form: name, email, phone (optional), company, role, project details, budget band, how you heard of us. (b) Data you send by email, WhatsApp or phone. (c) Newsletter sign-ups. (d) Technical and usage data through cookies, only with your consent where required (see the Cookie Policy). (e) Booking data if you schedule a call.

3. Why, and on what legal basis

Replying to your request and preparing a proposal (steps prior to a contract, GDPR art. 6(1)(b)); running a contract (art. 6(1)(b)); keeping accounting and tax records (legal obligation, art. 6(1)(c)); sending newsletters (consent, art. 6(1)(a)); analytics and advertising measurement (consent, art. 6(1)(a)); protecting the site from spam and abuse (legitimate interest, art. 6(1)(f)).

4. Lead scoring

We sort project requests by fit (service, budget band, timing, role) to decide how quickly and how to reply. This doesn’t produce legal or similarly significant effects; every request is reviewed by a person.

5. Who we share data with

Service providers acting on our behalf: website hosting and forms (Webflow), automation (Make), CRM and booking (HubSpot), email (provider [missing]), analytics and ads (Google, Meta, LinkedIn, Microsoft Clarity, only with consent), spam protection (Cloudflare Turnstile), consent management (CMP [missing]). Accountants and authorities where the law requires. We never sell personal data.

6. Transfers outside the EEA

Some providers are based in the US. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses.

7. How long we keep data

Enquiries that don’t become projects: up to 24 months. Client and contract data: for the contract plus the period required by accounting law. Newsletter: until you unsubscribe. Analytics: per the Cookie Policy.

8. Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawing consent at any time: write to contact@fastudios.co. You can complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).

9. Security

Access limited to the people who need it, providers chosen for their security practices, and no sensitive data requested through the forms.

10. Children

The site isn’t aimed at people under 16 and we don’t knowingly collect their data.

11. Changes

We’ll update this page and its date when something changes.