← Back to the home page

Privacy Policy

Last updated: 16 October 2026

1. Data controller

The controller of your personal data is ASPIRE ENTERPRISE S.R.L.. For any question about your data, write to calinracolta@loyalyou.ro.

This policy explains what data we process through loyalyou.ro, in line with Regulation (EU) 2016/679 (the “GDPR”) and Romanian Law no. 190/2018.

2. What we process, why, and on what basis

  • Demo / quote requests: your name, phone, e-mail and message. The Site does not store this data or send it to our servers — the button opens WhatsApp with a pre-filled message, which you choose whether to send. We use it to contact you and present the service. Legal basis: art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and art. 6(1)(f) (our legitimate interest in answering enquiries).
  • Phone calls and messages: your phone number and the content of the conversation, for the same purpose and on the same basis.
  • Technical data: IP address, browser type and time of access are processed automatically by our hosting provider to deliver pages and protect against attacks. Legal basis: art. 6(1)(f) GDPR (security and operation of the Site).
  • Local browser storage: see the Cookie Policy.

We use no analytics, advertising or profiling tools and make no automated decisions with legal effects on you.

3. Who receives your data

  • Cloudflare, Inc. — website hosting and content delivery network (processor).
  • WhatsApp Ireland Limited (Meta) — only if you choose to message us on WhatsApp; WhatsApp also processes the data under its own policy: https://www.whatsapp.com/legal/privacy-policy-eea.
  • Accountants, advisers and public authorities — only if you become a client or where the law requires it.

We do not sell or rent your data.

4. Transfers outside the European Economic Area

Cloudflare and Meta may process data in the United States. These transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework and/or the Commission’s standard contractual clauses.

5. How long we keep data

  • Contact requests: at most 12 months from the last interaction, if you do not become a client.
  • If you become a client: for the duration of the contract and then as long as the law requires (e.g. 10 years for accounting records under Romanian Law no. 82/1991).
  • Hosting provider technical logs: for short periods set by the provider for security purposes.

6. Your rights

Under the GDPR (art. 15–22) you have the right:

  • to access your data;
  • to have inaccurate data corrected;
  • to have your data erased (“right to be forgotten”);
  • to restrict processing;
  • to data portability;
  • to object to processing based on legitimate interest;
  • to withdraw consent at any time, without affecting earlier processing.

To exercise your rights, write to calinracolta@loyalyou.ro. We reply within one month of receiving your request.

7. Complaints

You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, https://www.dataprotection.ro.

8. Data of customers using LoyalYou cards

This policy covers loyalyou.ro. When a business uses the LoyalYou service for its own customers’ loyalty cards, that business is the controller of those customers’ data and ASPIRE ENTERPRISE S.R.L. acts as its processor under a data processing agreement (art. 28 GDPR). For that data, contact the business whose card you hold.

9. Children

The Site is aimed at businesses. We do not knowingly collect data from anyone under 16.

10. Security

The Site is served over HTTPS only, and access to the data we receive is limited to the people who need it to reply to you.

11. Changes

We may update this policy. The version in force is the one published on this page, with the last-updated date shown above.