Privacy policy

01Who we are

The data controller is the team running the Nextsite website (“we”). For any data question contact us at office@sitezone.online, support@sitezone.online or by phone 0749 023 594 / 0771 343 289.

The legal entity details (name, tax ID, registered office) are available on request and will be published on this page once the business is registered.

02What we collect

We only collect what you send us, plus the technical minimum needed for the site to work:

• Contact form: name, phone and/or email, chosen package, your message.
• Proof of consent: date and time of submission, the version of this policy and the IP address the request came from.
• Email, phone and WhatsApp: the details you use when you write or call us.
• Chat assistant: the text of your questions. Please do not type personal data there.
• Technical data: IP address and browser information, used briefly by the hosting provider for security and abuse prevention.

03Why we use it and on what legal basis

We use data only to:

• reply and send you a quote — based on your consent (Art. 6(1)(a) GDPR) and steps prior to a contract (b);
• conclude and perform the contract if you become a client (b);
• meet legal obligations such as invoicing and accounting (Art. 6(1) letter c);
• keep the site secure, prevent spam and defend legal claims in case of a dispute (legitimate interest, f).

04What we don’t do

We don’t sell, rent or share your data with other companies for advertising. We don’t send newsletters without your separate consent. We make no automated decisions with legal effect on you and do not profile you.

05Who we work with

To operate, the site uses providers that process data only on our behalf and under our instructions:

• Vercel — website hosting;
• the database provider where requests are stored;
• the email provider — sending confirmations;
• WhatsApp (Meta) — only if you choose to write to us there;
• a language model provider (xAI) — only for text sent to the chat assistant.

06Transfers outside the EU

Some providers may store or access data outside the European Economic Area (e.g. in the US). Such transfers rely on European Commission adequacy decisions (including the EU–US Data Privacy Framework) or standard contractual clauses.

07How long we keep data

• Requests that don’t become a contract: up to 12 months after the last message, then deleted.
• Proof of consent: as long as the request is kept plus 3 years, the general limitation period, so we can demonstrate it.
• Client data and invoicing records: as long as accounting law requires (currently 5 years).
• Hosting technical logs: a few days, per the provider’s policy.

08Your rights

Under the GDPR (EU Regulation 2016/679) you have the right to:

• know what data we hold about you and get a copy;
• have it corrected or erased;
• restrict or object to processing;
• data portability;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
• lodge a complaint with the Romanian authority ANSPDCP (www.dataprotection.ro) or your local supervisory authority.

09How to exercise your rights

Write to office@sitezone.online. We reply within 30 days, free of charge. We may ask for extra information only to confirm the request comes from you.

10Cookies and local storage

We use no advertising or analytics cookies and we do not store IP addresses. We count visits on our own server: the page, the day, the referring site and the country code. Your chosen language stays in the browser, and the admin area uses a strictly necessary authentication cookie.

11Security

We use encrypted connections (HTTPS), restricted data access, anti-spam protection and rate limiting. No system is perfectly secure; if a breach occurs that may affect you, we will inform you and notify the authority as required by law.

12Children

Our services are intended for people over 16. We do not knowingly collect data from children; if you learn a child has sent us data, contact us and we will delete it.

13External links

The site may link to other sites or apps (e.g. WhatsApp). We are not responsible for their privacy practices; please read their policies.

14Changes to this policy

We may update this policy when the law or our services change. The version and date are shown above, and each form request stores the version accepted at the time it was sent.