Privacy Policy

1. Controller identity

The data controller responsible for processing your personal data is:

2. What data we collect

When you submit the contact form on our website, we collect the following personal data you voluntarily provide:

• Full name
• Email address
• Company or project name (optional)
• Project details / message content

We do not collect any data automatically beyond standard server logs (IP address, browser type, referring URL) retained for security and operational purposes.

3. Purpose and legal basis

We process your data solely to respond to your enquiry and, where applicable, to take pre-contractual steps at your request.

The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and, where you have given explicit consent, Article 6(1)(a) GDPR.

4. How we use your data

Your data is used exclusively to:

• Reply to your enquiry via email
• Discuss a potential working relationship

We do not use your data for marketing, profiling, or automated decision-making, and we do not sell or share your data with third parties except as described in Section 5.

5. Data sharing and transfers

Your contact form submission is transmitted via a secure HTTPS POST request to a Google Apps Script endpoint and stored in a Google Sheets spreadsheet owned by business2point. Google acts as a data processor under our control. We do not transmit your data to any third-party analytics or CRM platforms at the point of form submission.

Google LLC is headquartered in the United States. Data stored in Google Workspace may be processed outside the European Economic Area (EEA). Google maintains Standard Contractual Clauses (SCCs) under GDPR Chapter V as adequate safeguards for such transfers. For details, see Google's Privacy Policy.

6. Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected — typically the duration of our correspondence and any resulting engagement, plus a reasonable period thereafter for archival purposes, not exceeding 3 years from the last interaction.

7. Your rights under GDPR

As a data subject you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Data portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing

To exercise any of these rights, email us at info@business2point.com. We will respond within 30 days.

8. Complaints

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Romanian supervisory authority:

9. Cookies

This website does not currently use cookies for tracking or analytics. If this changes, this policy will be updated and a cookie notice will be presented.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be indicated by an updated "Last updated" date at the top of this page. We encourage you to review it periodically.