Privacy Policy

Last updated: November 2, 2026

Who we are

DesignFresh Studio is run by Valentin Ciocoiu in Romania (European Union). For this website and our services, Valentin Ciocoiu is the data controller — "we" or "us" in this policy. You can reach us at valentin@designfreshstudio.com.

What we collect

• Emails you send us. Your name, email address and whatever you choose to include — for example your practice name or website address.
• Billing details, if you buy from us. The name and business name, billing address and contact details we need for the invoice, and a record of what you bought and paid.
• Card payments are processed by Stripe. Stripe collects and handles your card details under its own privacy policy; we only receive a confirmation of the payment, never your full card number.
• Technical data. Our hosting provider, Cloudflare, processes technical information such as IP addresses to deliver this website and protect it from attacks. We do not use it to identify or profile visitors.

We do not collect patient health information through this website or the websites we build.

What we don't do

• No cookies, no analytics, no advertising and no tracking scripts on this website.
• No third-party scripts. Our fonts are hosted on our own site.
• We never sell or rent your personal data.

Why we use your data

• To answer your questions and prepare a review or quote — at your request, before any contract (GDPR Art. 6(1)(b)).
• To deliver the services you buy and to invoice you (Art. 6(1)(b)), and to keep the accounting records the law requires (Art. 6(1)(c)).
• To keep this website running and secure (our legitimate interests, Art. 6(1)(f)).

Who we share it with

Only the service providers we need, and only for the purposes above:

• Stripe — payment processing;
• Cloudflare — website hosting and security;
• our email provider — to send and receive email;
• an accountant and public authorities — when the law requires it.

Some of these providers may process data outside the European Union, for example in the United States. When they do, the transfer is protected by safeguards recognized under the GDPR, such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep emails for as long as we need them to answer you and handle any follow-up, and then delete them. Invoices and payment records are kept for as long as Romanian accounting and tax law requires.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy of it;
• have it corrected if it is wrong;
• have it deleted, unless we must keep it by law (for example, invoices);
• restrict or object to how we use it;
• receive it in a portable format.

To make a request, email valentin@designfreshstudio.com. We will reply within one month at the latest.

You also have the right to complain to the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), at www.dataprotection.ro, or to the data protection authority where you live.

Changes

If we change this policy, we will update the date at the top of this page.