Privacy and your data
In short
This site collects only what you type into one of its two forms. There is no analytics, no advertising pixel, no session recording and no third-party tracking script anywhere on it. Form data is used to answer you and to run the thing you asked for, and for nothing else — no mailing list, no automated sequence, nothing passed to third parties. Enquiries that go nowhere are deleted within 12 months. You can ask at any time what is held, have it corrected or deleted, or object to processing, and direct-marketing objections are absolute.
This is a plain-language notice, written to be read rather than to be technically complete. It has not been reviewed by a lawyer. If you need a formal record of how your data is handled before you contact me, email me and ask — I will answer in writing.
What data is collected, and when?
Only what you type into one of the two forms on this site. There is no analytics, no advertising pixel, no session recording and no third-party tracking script anywhere on this website — you can confirm that by viewing the page source. Nothing is collected from you by simply reading a page.
| Form | Collected | Why |
|---|---|---|
| Free AI visibility check | First name, work email, company website, a short description of what you sell, and a phone number only if you choose to give one | The website and the description are what the buyer questions are built from — the check cannot be run without them. The email is how the result reaches you |
| Call booking | First name, work email, phone number, company website, and which of the three services you want to discuss | To arrange and hold the call, and to know what it is about before it starts |
Both forms are submitted through Shopify, which hosts this website. Shopify processes the submission on my behalf and its own privacy terms apply to that step.
What is the lawful basis?
For anything you send through a form: your request. You asked for something, and the data is used to provide it. Under the GDPR this sits under Article 6(1)(b) — steps taken at your request before entering into a contract — or Article 6(1)(f), legitimate interests, where no contract follows.
I also contact companies directly by email who have not filled in a form. Where I do, the basis relied on is legitimate interest in offering a relevant business service to a business contact, and every message says who I am, why I am writing and how to stop hearing from me. If you tell me to stop, I stop, and your address goes on a suppression list so it is not contacted again.
What is it used for, and what is it never used for?
It is used to answer you, run the thing you asked for, and continue the conversation if you want one.
It is not added to a mailing list. There is no newsletter and no automated sequence on this site. It is not sold, rented, shared or passed to any third party for their own purposes. It is not used to build a profile of you or your company beyond what is needed to answer your question.
How long is it kept?
- Enquiries that go nowhere: deleted within 12 months.
- Enquiries that become a conversation: kept while the conversation is live, then for 12 months after the last contact.
- Client records: kept for as long as the engagement runs, and afterwards only where Romanian accounting or tax law requires it.
- Suppression list: if you ask not to be contacted, your address is kept indefinitely for that purpose alone — because deleting it would mean I could contact you again by mistake.
What rights do you have?
Under the GDPR you can ask me to: tell you what I hold about you, correct it, delete it, restrict what I do with it, give you a copy in a portable format, or object to my processing it. You can also object specifically to direct marketing, and that objection is absolute — I have to stop.
Email me and say what you want. No form, no verification hoops beyond checking you are who you say you are. I will respond within 30 days and normally much faster, because the volume here is small.
If you are not satisfied with how I have handled it, you can complain to your national data protection authority. In Romania that is the ANSPDCP.
Who is the controller?
SAEOGO, operating from Sibiu, Romania. The contact address is in the footer of every page. Once the business has a registered entity name and address, they will be stated here — that is a gap and it is named as one rather than glossed over.
Cookies
This site sets no cookies of its own, and there is no analytics or advertising cookie anywhere on it. Shopify, as the hosting platform, may set strictly necessary cookies required to serve and secure the pages. If analytics is ever added, this page and a consent banner will be added at the same time, and this sentence will be replaced.