Privacy Policy

Dan Consultancy SRL ("we", "us", "our") operates the website dan-consultancy.com, which presents our software testing, QA automation, web development, and consultancy services.

We are the controller of the personal data described in this policy. For any privacy matter, contact us at office@dan-consultancy.com.

We collect only what the website's features need:

• Contact form ("Get in Touch"): the name, email address, subject, and message you submit, together with the submission time and an internal handling status we use to track replies.
• Newsletter sign-up: your email address, your subscription status, and your consent details (the wording you agreed to and when).
• Administration: site administrators sign in with an email and password; authentication and session data apply only to them, not to ordinary visitors.
• Technical operation: our hosting, database, and email providers may process standard technical data (such as connection information and server logs) to keep the site available, secure, and maintainable.

You can browse the website, read the blog, and use the search without creating an account, and we do not build profiles of our visitors.

• To respond to your enquiries and discuss potential projects or services — steps taken at your request before any contract.
• To send you newsletter updates and insights, only if you subscribe. This is based on your consent, and you can unsubscribe at any time using the link included in every newsletter email or by contacting us.
• To operate, maintain, and secure the website (our legitimate interest in running it properly).
• To comply with legal obligations that apply to us.

We do not sell personal data. We share it only with the service providers needed to run the website, who process it on our behalf:

• Supabase — our database, storage, and authentication provider. It stores contact messages, newsletter subscriptions, and site content, and handles administrator sign-in.
• Resend — our email service provider. It delivers our internal notifications about new enquiries and sign-ups, maintains our newsletter contact list, and sends our newsletter emails, each of which includes an unsubscribe link.
• Hosting and infrastructure providers that serve and operate the website.

Links to our social media profiles (LinkedIn, Instagram, Facebook) are ordinary outbound links; when you follow them, the relevant platform's own privacy terms apply.

• Contact messages: for as long as needed to handle and follow up on your enquiry, after which they are reviewed and deleted.
• Newsletter data: until you unsubscribe or ask us to remove you.
• Records we are legally required to keep: for the period required by law.

Subject to applicable law, you can ask us to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data;
• restrict or object to certain processing;
• provide your data in a portable format.

You can also withdraw consent at any time, without affecting processing already carried out. To exercise any of these rights, contact us at office@dan-consultancy.com. You are also entitled to lodge a complaint with your data protection authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP).

We apply appropriate technical and organisational measures to protect personal data, including restricted administrator access and reputable, security-focused service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Some of our providers may process data on servers located outside the European Economic Area. Where that happens, appropriate safeguards — such as the European Commission's standard contractual clauses — apply, depending on the provider's setup.

The website uses only strictly necessary cookies and local storage. Details, and a summary of each category, are on our Cookie Settings page.

We may update this policy from time to time. The "Last updated" date above always reflects the current version.