PRIVACY POLICY

1. Who we are (the Data Controller)

Data is collected and processed by:

• Company Name: UIFLOW S.R.L.
• Unique Registration Code (CUI): 51391256
• Trade Registry No.: J2025015511006
• Registered Office: Satu Mare County, Bixad Village, Bixad Commune, BIXAD, No. 657A, Romania
• Contact email for personal data: contact@uiflowagency.com

2. What data we collect

We only collect the data you voluntarily provide through the booking form on the website:

• First and last name
• Email address
• Phone number
• Company details: the company name, number of employees, industry, the software currently used and a short description of the problems you face
• Optionally, how you heard about us

We do not collect sensitive data (e.g. racial origin, political opinions, medical data) and we do not use automated identity profiling.

3. Purpose of collection and Legal Basis

We process this data for the following purposes:

• Communication: To organise the call you booked and to respond to your requests or questions.
• Offers: To send you commercial offers you have explicitly requested.

The legal basis for processing is your Consent (art. 6 par. 1 lit. a of the GDPR), expressed by ticking the acceptance box before submitting the booking, or our Legitimate Interest in responding to a potential contractual relationship.

4. Where the data is stored (Recipients)

To operate this website, we use third-party services that may have secure access to your data:

• Hosting Services: The website is hosted on the infrastructure of Cloudflare, Inc., which complies with the GDPR through standard contractual clauses.
• Email Services: Emails you send us arrive on our email servers.
• CRM and bookings: Bookings reach our Odoo account (Odoo S.A.), where we manage them as sales enquiries. For each booking, Odoo creates the meeting in our Google calendar (Google Ireland Limited), which generates the Google Meet link, and emails you the confirmation and reminders.
• Traffic analytics: Only if you accept cookies, we use PostHog, with data stored in the European Union, to understand how the website is used: the pages visited, clicks, how far you scroll and session recordings in which everything you type into forms is hidden. We do not identify you by name or email. If you decline cookies, PostHog is not loaded.
• Company identification: Only if you accept cookies, we use Apollo.io, which can identify the company the website is visited from, based on the IP address.
• Authorities: We may disclose data to public authorities if required by law.

We do not sell or rent your data to third parties for marketing.

5. How long we keep the data

We will keep your data only as long as necessary to respond to your request or to maintain a business communication, but no longer than 3 years from the last interaction, after which it will be deleted or anonymized, unless there is a legal obligation to keep it (e.g. invoicing).

6. Data Security

Our website uses SSL (HTTPS) encryption to ensure the secure transfer of data between your browser and our servers. Access to databases is restricted to authorized personnel only.

7. Your Rights

Under the GDPR, you have the following rights:

• The right of access: To request a copy of the data we hold about you.
• The right to rectification: To request the correction of incorrect data.
• The right to erasure ("The right to be forgotten"): To request the deletion of data, if it is no longer necessary.
• The right to withdraw your consent: At any time, with a simple email.
• The right to lodge a complaint: With the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP - www.dataprotection.ro).

To exercise any of these rights, you can contact us at the email address: contact@uiflowagency.com.