Privacy policy.

This Privacy Policy explains how Interaktory (“Interaktory”, “we”, “us”, or “our”) collects, uses, and protects personal data when you visit our website or interact with our services.

By using the website, you acknowledge that you have read and understood this Privacy Policy.

1. Who we are

Interaktory is a trading name of Interakt Design & Tech SRL, a limited liability company registered with the Trade Register (Oficiul Registrului Comerțului) under number J05/1104/2023, tax identification number (CUI) RO48051513, with its registered office at Str. Samuil Micu-Klein 1 A, Oradea, Bihor county, Romania.

For the purposes of data protection law, Interakt Design & Tech SRL is the data controller.

If you have any questions about this Privacy Policy or your personal data, you can contact us at design@interaktory.com.

2. What personal data we collect

We may collect and process the following types of personal data.

Information you provide directly:

• Name
• Email address
• Company name
• Job title
• Any information you submit via contact forms, emails, or enquiries

Automatically collected information. When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device and operating system
• Pages visited and interactions
• Referring website or source

This data is collected through standard analytics and logging tools.

3. How we use your data

• To respond to enquiries and communicate with you
• To provide and improve our services
• To understand how the website is used and improve performance
• To maintain security and prevent misuse
• To comply with legal and regulatory obligations

We do not sell personal data or use it for unsolicited marketing.

4. Legal basis for processing (GDPR)

We process personal data under one or more of the following legal bases:

• Consent, where you have explicitly provided it (for example, by submitting a form)
• Legitimate interest, to operate, improve, and secure our business and website
• Contractual necessity, where processing is required to provide services
• Legal obligation, where required by law

5. Cookies and analytics

Our website may use cookies or similar technologies to ensure basic website functionality, analyse traffic and usage patterns, and improve user experience.

You can control or disable cookies through your browser settings. Disabling cookies may affect website functionality.

After you send the contact form, your browser keeps a note of the time it was sent, in its own local storage, so the form can ask you to wait a minute before sending another. It never leaves your device and is not used to track you.

If we use third-party analytics tools, personal data may be processed in accordance with the privacy policies of those providers.

6. Data sharing and third parties

We may share personal data with trusted third-party service providers only where necessary, such as hosting providers, analytics and performance tools, and email or communication services.

To keep spam out, the contact and application forms use Cloudflare Turnstile, which checks that a person, not an automated script, is sending them. For that check only, Cloudflare processes technical information about your browser and connection; it does not use cookies to track you. Cloudflare’s own privacy policy applies to that processing.

Messages you send through the contact form on our website are delivered to us by Resend, an email delivery service that processes them on our behalf and only to deliver them. The website is hosted by Vercel.

To stop the contact form being misused, we limit how often it can be sent from one email address and one network (IP) address. For this we keep a one-way hash of both, a scrambled code that can’t be turned back into the address, for up to two days. Where this protection is enabled, the hashes are held by Upstash, a database service that stores them on our behalf, and are deleted automatically.

All third parties are required to handle data securely and in compliance with applicable data protection laws.

We do not transfer personal data outside the EU/EEA unless appropriate safeguards are in place.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law.

When data is no longer needed, it is securely deleted or anonymised.

If you apply to join the team through our website, we use what you send (your name, email address, the role, the links you share, your CV and your message) only to consider your application. We keep it for up to 12 months, so we can come back to you if a suitable role opens, and then delete it. You can ask us to delete it sooner at any time.

8. Your rights

Under the GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at design@interaktory.com.

9. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.

We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to this privacy policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, with the “Last updated” date revised accordingly. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

12. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: design@interaktory.com