Privacy policy

The controller of personal data processed through this website is VELTIX DIGITAL SRL, a company registered in Romania (CUI 53636557, Trade Register J2026006290001, EUID ROONRC.J2026006290001), which trades as SORTD.

Registered office: [To confirm: registered-office address]

Privacy contact: contact@sortdagency.com [To confirm: that this mailbox is live and monitored]. We have not appointed a Data Protection Officer [To confirm: whether one is required].

We are established in Romania, so the EU General Data Protection Regulation (GDPR) applies to everything we do, together with Romanian law, including Law 506/2004 on electronic communications for cookies and similar technologies.

Because the site is aimed at businesses in the United Kingdom, the UK GDPR and the Privacy and Electronic Communications Regulations (PECR) may also apply to how we handle data about people in the UK. [To confirm: whether UK GDPR applies, and whether a UK representative under Article 27 UK GDPR is needed]

Visiting the website. Our hosting provider processes technical data needed to deliver pages and keep the service secure, such as IP address, browser type, requested page and time of request. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR). [To confirm: hosting provider log retention period]

Analytics, only if you agree. If you accept analytics cookies, Google Analytics 4 measures which pages are visited and how: pseudonymous identifiers, pages viewed, approximate location derived from IP address, device and browser. Legal basis: your consent (Article 6(1)(a) GDPR, and the consent required for cookies). Without your consent, no analytics code is loaded. Analytics is currently not active on this site. [To confirm: GA4 data retention setting]

Contacting us. If you send an enquiry, we process your name, work email, company, the topic you choose and your message, to reply and to discuss a possible engagement. Legal basis: steps you ask us to take before a contract (Article 6(1)(b)) and our legitimate interest in responding to business enquiries (Article 6(1)(f)). Please don't send customer documents, purchase orders or other confidential records through the form. The contact form is not yet connected. [To confirm: form provider and retention period]

Booking a call. If you book a call, the scheduling provider processes your name, email, chosen time and any answers you give. Booking is not yet available. [To confirm: booking provider, legal basis and retention]

Business communications. If we contact a business about our services, we may use work contact details from public sources, on the basis of our legitimate interest in B2B communication. Every message says who we are and how to opt out, and we respect objections. [To confirm: outreach practice, sources and the information notice required by Article 14]

Stored only in your browser. Your cookie choices, and your sound setting if you turn sound on, are saved in your browser's local storage. They are never sent to us. See the cookie policy.

We do not sell personal data, use it for advertising or make decisions about you by automated means alone.

We share personal data only with service providers who process it on our behalf, under contract:

• Website hosting. [To confirm: production hosting provider (Hostinger planned; Vercel used for previews), its legal entity, data processing terms and transfer safeguards]
• Analytics, only with consent and once enabled: Google Ireland Limited (Google Analytics 4).
• Contact form and booking providers, once selected. [To confirm: providers and their sub-processors]
• Professional advisers, and authorities where the law requires it.

Some providers may process data outside the European Economic Area, including in the United States. Where they do, we rely on an adequacy decision (such as the EU–US Data Privacy Framework, for certified companies) or standard contractual clauses. [To confirm: the mechanism used by each provider, and the UK equivalents for UK data]

We keep personal data only as long as the purpose requires: enquiries for as long as the conversation is active and a reasonable period afterwards, and analytics data for the retention period set in Google Analytics. [To confirm: specific retention periods or criteria for each category]

The site is served over HTTPS, and access to the accounts that hold personal data is limited to the people who need it, protected by strong authentication. No method of transmission or storage is completely secure, but we take reasonable steps appropriate to the data involved.

You can ask for access to your personal data, and for it to be corrected, deleted or restricted. You can object to processing based on legitimate interests, ask for a portable copy of data you gave us, and withdraw consent at any time, which doesn't affect processing before withdrawal. You can change analytics consent at any time through Cookie settings in the footer.

To exercise a right, write to contact@sortdagency.com [To confirm: working privacy contact address]. We will reply within one month, and may need to confirm your identity first.

You can complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), or to the authority in the EU country where you live or work. If UK law applies to you, you can complain to the Information Commissioner's Office (ICO). We'd appreciate the chance to resolve your concern first.

We will update this policy when our services or providers change, and show the date of the latest version here. Effective date: [To confirm: date of publication after legal review]