Privacy Policy
1. Data controller
I-RENT ENTERPRISES S.R.L., company ID 51276958, Bucharest, Romania, trading as i-vory Studio, is the controller of the personal data collected through this site.
Data protection contact: [email protected]
2. What we collect
We collect the following categories of data:
- Contact data: name, email, phone, as you give them to us in a form or on WhatsApp
- Business data: company name, Instagram or TikTok handle, notes on what you need
- Technical data: IP address, browser, the pages you open, the site you arrived from
- Page interaction: mouse movement, scrolling and clicks, recorded by Contentsquare for heatmaps and session replay
We collect technical and interaction data only after you accept cookies in the banner. None of it is anonymous: every visitor is given a random ID that lives in a cookie. The exact names and lifetimes are on the cookies page.
3. Why we process it
- Answering you when you write to us
- Running the social media work you hired us for
- Invoicing and bookkeeping
- Improving the site: we see which pages work and where visitors get stuck
- Measuring Google Ads campaigns, so we know which ad brings real enquiries
4. Legal basis
We process your data on the basis of:
- Your explicit consent, given in the contact and booking forms, and for the analytics, advertising and session-recording cookies, under Romanian Law 506/2004, art. 4 (5)
- Performance of our services contract
- Legal obligations (invoicing, accounting)
- Our legitimate interest, limited to site security and abuse prevention
You can withdraw cookie consent whenever you like, as easily as you gave it, with the button on the cookies page. Collection stops from that moment.
5. How long we keep it
We keep contact data for as long as we work together, plus 3 years. Invoicing data we keep for 10 years, because tax law says so.
Cookies have their own lifetimes, from 30 minutes to 400 days, all listed on the cookies page.
6. Your rights (GDPR)
Under Regulation (EU) 2016/679 you have the following rights:
- The right to information and access
- The right to rectification
- The right to erasure ("the right to be forgotten")
- The right to restrict processing
- The right to data portability
- The right to object
- The right to withdraw your consent at any time
- The right to lodge a complaint with ANSPDCP, the Romanian data protection authority (www.dataprotection.ro)
To exercise any of these rights, write to us at [email protected].
7. Sharing with third parties
We do not sell your data. We share it only with:
- Our accountant (for invoicing)
- Public authorities, when the law requires it
- Google: Analytics 4, property G-256CM7TGEG, and Google Ads, loaded through the Google Tag Manager container GTM-ND5ZF7NB
- Contentsquare: heatmaps and session replay
- Cloudflare: site delivery and security
- Web3Forms: receiving the messages sent through the contact forms
- Resend: emailing the reports requested on the audit platform
We have GDPR-compliant data processing agreements with our technical providers. Google and Contentsquare receive data only after you accept cookies. Cloudflare serves and protects the site from the very first request, so its cookies are strictly necessary.
8. Security
We use technical and organisational measures to keep your data safe: HTTPS, restricted access, encrypted backups.
9. International transfers
Google and Cloudflare are US companies, so some of the technical data leaves the European Union. Those transfers run on the European Commission's standard contractual clauses and the other safeguards the GDPR allows.
10. Contact
Any question about how we handle your data: [email protected]