This policy explains what personal data is collected on petruamortoae.com and around the Client Ops Kit, why, and what your rights are. Written to be read, not to protect anyone from reading it.

01Controller

Amortoae Petru PFA, CUI 52361814, Reg. Com. F20/2503/0447007, Sibiu, Romania, is the data controller. Contact for anything privacy-related: info@petruamortoae.com.

02What is collected, and why

Situation	Data	Purpose and legal basis
You email or use the contact form	Name, email, your message	Answering you. Basis: steps prior to a contract (art. 6(1)(b) GDPR) or legitimate interest in correspondence (6(1)(f)).
You buy the Product	Name, email, order details, country. Payment card data is processed by Lemon Squeezy and never reaches us.	Delivering the Product, license management, support, mandatory invoicing. Basis: contract (6(1)(b)) and legal obligation (6(1)(c)).
Product update emails	Email, purchase record	Notifying buyers of included updates. Basis: contract performance and legitimate interest (6(1)(f)); every email has an unsubscribe link.
Marketing newsletter	Email	Only if you opt in. Basis: consent (6(1)(a)), withdrawable anytime via the unsubscribe link.
Visiting the Site	Server logs: IP address, timestamps, requested pages	Security and keeping the Site running. Basis: legitimate interest (6(1)(f)). Logs are kept briefly by the hosting provider.
Analytics	See the Cookie Policy	Only with your consent via the cookie banner. Basis: consent (6(1)(a)).

03Who receives data

Data is shared only with the service providers needed to run this business: Lemon Squeezy (checkout, payments, invoicing, order storage, acting as merchant of record and as an independent controller for the payment transaction), our website hosting provider, and our email service provider for sending transactional and, with consent, newsletter emails. No personal data is sold, rented, or shared for third-party advertising. No automated decision-making or profiling with legal effects takes place.

04International transfers

Lemon Squeezy operates from the United States. Transfers outside the EEA rely on appropriate safeguards such as the EU Standard Contractual Clauses or an applicable adequacy framework. Details are available in Lemon Squeezy's privacy documentation or from us on request.

05How long data is kept

Order and invoicing records: as long as Romanian accounting and tax law requires. Support and general correspondence: up to 3 years after the last exchange, then deleted. Newsletter data: until you unsubscribe. Server logs: the hosting provider's short rotation period.

06Your rights

Under the GDPR you can request access, rectification, erasure, restriction, and portability of your data, object to processing based on legitimate interest, and withdraw consent at any time without affecting prior processing. One email to info@petruamortoae.com does it; expect an answer within 30 days. You can also complain to the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or the authority of your own EU country.

07Security and children

Data is protected with standard technical and organizational measures: encrypted connections (HTTPS), access limited to the people and processors named above, and reputable providers. The Site and the Product are aimed at business users and not directed to children under 16; no data is knowingly collected from them.

08Changes

If this policy changes, the date at the top changes with it, and material changes affecting buyers will be announced by email. The current version is always at this address.