Privacy policy

This policy explains how we process personal data on expand-wise.com under Regulation (EU) 2016/679 (“GDPR”) and Romanian Law no. 190/2018. Effective from 15.11.2026.

1. Data controller

The controller is Expand Wise S.R.L., registered office: Aleea Platanului nr. 4, bl. A46, sc. 2, et. 3, ap. 28, Bucharest, Romania, tax code (CUI) 53085466, Trade Register no. J2025096020000. For any question about your data, write to hello@expand-wise.com. We have not appointed a data protection officer, as our activities do not require one.

2. What data we process

  • Data sent through the contact form: full name, company, email address, expansion direction, product category, channels you are interested in and your message.
  • Data from email correspondence you start with us.
  • Only if you consent in the cookie banner: visit statistics collected by Google Analytics 4 (device and browser type, approximate location, pages visited). Google Analytics 4 does not store IP addresses.
  • Technical data logged automatically by the hosting server (e.g. IP address and time of access), needed for the security and operation of the site.

3. Purposes and legal bases

  • Replying to your message and one-to-one communication with you: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or, for enquiries not related to a future contract, our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR).
  • Visit statistics: your consent (Art. 6(1)(a) GDPR and Art. 4(5) of Romanian Law no. 506/2004). You can withdraw it at any time with the “Cookie settings” button in the footer, without affecting processing carried out before.
  • Site security and abuse prevention: our legitimate interest (Art. 6(1)(f) GDPR).

We use form data only to reply to you and to communicate with you directly. We do not use it for marketing, do not sell it, and do not carry out profiling or automated decision-making.

4. Recipients

  • Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA, our web hosting and email provider, acting as processor. The servers hosting the website and the mailbox are in the Phoenix, Arizona (USA) datacenter.
  • Google Ireland Limited (Google Analytics 4), only with your consent.
  • Independent specialists we work with (e.g. lawyers, accountants, logistics partners) receive your data only if you ask or agree beforehand that we put you in touch with them.
  • Public authorities, only where the law requires it.

5. Transfers outside the European Economic Area

Data hosted by Namecheap is stored in the USA. The transfer relies on the standard contractual clauses adopted by Commission Implementing Decision (EU) 2021/914 (Module Two, controller to processor), included in Namecheap’s Data Processing Addendum (Art. 46 GDPR). For Google Analytics, data may be transferred to Google LLC (USA), certified under the EU-U.S. Data Privacy Framework, on the basis of adequacy decision (EU) 2023/1795 (Art. 45 GDPR). On request we can give you more information about these safeguards.

6. How long we keep data

  • Form messages and correspondence: for as long as we are in contact; if no cooperation starts, we delete them no later than 12 months after the last message. If we sign a contract, the data is kept for its duration and then for the periods required by law (e.g. accounting records).
  • Google Analytics 4 data: 2 months (the retention period set in the Google Analytics account).
  • Technical server logs: for a limited period, under the hosting provider’s policies.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. To exercise your rights, write to hello@expand-wise.com; we reply within one month.

You may lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, www.dataprotection.ro, email anspdcp@dataprotection.ro, or with the supervisory authority in your country of residence.

8. Providing data

Providing data is voluntary, but without your name, email address and message we cannot reply to an enquiry sent through the form.

9. Changes and language versions

We may update this policy; the current version is always on this page. It is available in Romanian, Polish and English; in case of any discrepancy the Romanian version prevails. Last updated: 15.11.2026.