Legal

Privacy Policy

Last updated: 28 October 2026

This Privacy Policy explains how Alkeme Design SRL ("Alkeme Design", "we", "us") collects, uses and protects your personal data when you visit our website or contact us, and describes your rights under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Romanian data protection law (Legea nr. 190/2018).

1. Who we are (data controller)

Alkeme Design SRL, a company registered in Romania, with its registered office at Str. Octav Doicescu nr. 2, ap. 6, Cisnădie, Sibiu County, Romania, Romanian Trade Register no. J2026049675005, sole registration code (CUI) 55425963. Contact: [email protected]. We are the data controller for the personal data described here.

2. What data we collect

• Data you give us: your name, email address, brand or company name (optional) and any message content when you contact us or request a brand audit.
• Data collected automatically: technical information such as IP address, browser and device type, and pages visited, collected through cookies and similar technologies (see our Cookie Policy). Non-essential analytics load only after you accept cookies.
• When you send the contact form: the approximate location of your connection (country, region, city, time zone and network operator), which our host Cloudflare derives from the connection, is added to your message so we can place your request. It is not stored on the website.
• Anonymous action counting: only after you accept cookies, the site counts actions such as a submitted form or how far a page is scrolled, and the type of source of the visit, without cookies and without an identifier. A setting in your browser's local storage (alk_fara_analytics) only exists on devices we exclude from these statistics.
• Settings stored in your browser: your cookie choice (localStorage key alk-cookie-consent) and, for the current visit only, whether you already passed the homepage intro (sessionStorage key alk-intrat). They contain no personal data and are not sent to us.

3. Why we use your data and our legal basis

• To respond to requests and provide our services (legal basis: performance of a contract or steps prior to a contract, GDPR art. 6(1)(b)).
• To operate, secure and improve our website (legal basis: our legitimate interests, art. 6(1)(f)).
• For analytics and any marketing information you request (legal basis: your consent, art. 6(1)(a), which you can withdraw at any time).
• To comply with legal obligations (legal basis: legal obligation, art. 6(1)(c)).

4. Who we share it with

We do not sell your personal data. We share it only with trusted service providers (processors) who process it on our instructions to run the website and our business:

• Cloudflare: website hosting, content delivery and security.
• Web3Forms: delivery of contact-form messages to us, operated by Web3Creative, based in India. Web3Forms uses sub-processors including Amazon Web Services, Cloudflare and Hetzner (Germany, Finland), and CleanTalk and Akismet (USA) for spam protection, which receive the IP address and email address for that purpose. Web3Forms keeps messages for at most three years.
• Google Analytics 4 (stream G-YHBDX1NXX1): website analytics, loads only with your cookie consent.
• Cloudflare Web Analytics: visit statistics without cookies, loads only with your cookie consent.
• Google (Gmail): the mailbox where messages sent to [email protected] and through the contact form arrive, forwarded by Cloudflare Email Routing.
• Brevo: sending our replies from [email protected].
• WhatsApp (Meta): only if you choose to contact us through the WhatsApp link; WhatsApp's own privacy policy applies to that conversation.

We may also disclose data where required by law or to protect our legal rights.

5. International transfers

Some of our providers are based outside the European Economic Area (for example in the United States). Where personal data is transferred outside the EEA, we rely on appropriate safeguards, principally the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914) and, where applicable, the EU-U.S. Data Privacy Framework, together with supplementary measures.

6. How long we keep it

We keep personal data only as long as necessary for the purposes above, or as required by law. Request and contact data is kept for as long as needed to handle your request and a reasonable period afterward; analytics data is retained for a shorter period.

7. Your rights under the GDPR

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro). To exercise any of these rights, contact us at [email protected]. See our dedicated GDPR page for more detail.

8. Cookies

We use essential cookies to run the website, and non-essential cookies (analytics) only with your prior consent, in line with Legea nr. 506/2004. You can manage your choices at any time. See our Cookie Policy.

Anonymous action counting (no cookies). Only after you accept cookies, and separately from the analytics above, the site counts what visitors do on it (for example a submitted form, how far a page is scrolled) and what kind of source the visit came from (a search engine, an AI assistant, a social network). It sets no cookie, stores nothing on your device and uses no identifier: the browser sends the action to our own measurement service, which keeps only daily totals per page, for example "12 clicks on the email address today". Your IP address is not stored and the content of forms is never sent.

9. Security

We apply reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, but we work to keep your information safe.

10. Children

Our website and services are not directed at children under 16, and we do not knowingly collect their data. This reflects the digital-consent age set under GDPR art. 8 and Romanian law.

11. Changes

We may update this policy from time to time. The "last updated" date above shows when it last changed.