Privacy Policy

Introduction

POSTOLACHE D. ANDREI PERSOANĂ FIZICĂ AUTORIZATĂ (referred to as "we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal data when you visit our website and use our services.

1. Data We Collect

Information You Provide Directly

• Contact Information: Name, email address, phone number when you contact us or fill out forms
• Account Information: Email, password, and profile details when you register for programs or create an account
• Form Submissions: Information from webinar registrations, newsletter signups, CTK community registrations, and contact forms
• Communications: Content of emails, messages, or inquiries you send us

Information Collected Automatically

• Cookies & Authentication: Supabase authentication cookies used to maintain your session and remember your login
• Event Logging: We log user interactions (page views, form submissions, button clicks) with a unique client ID for analytics purposes
• Device Information: Browser type, operating system, IP address, and device identifiers
• Usage Data: Pages visited, time spent on site, referring URL, and navigation patterns

Third-Party Data Collection

• Google reCAPTCHA: Used on registration forms to prevent abuse. Google collects data according to their privacy policy
• Substack: The newsletter embed on our site collects email addresses for newsletter distribution according to their privacy policy

2. How We Use Your Data

• To provide and improve our services and website
• To process your registrations for programs, webinars, and community events
• To send newsletters, updates, and promotional communications (only if you opt-in)
• To respond to your inquiries and provide customer support
• To analyze usage patterns and improve user experience
• To prevent fraud and ensure security
• To comply with legal obligations

3. Data Retention

• Account Data: Retained as long as your account is active; you can request deletion anytime
• Authentication Cookies: Expire after your session ends or when you log out
• Event Logs: Retained for up to 90 days for analytics and security purposes
• Newsletter Data: Retained until you unsubscribe
• Form Data: Retained for business purposes or until you request deletion

4. Cookies & Similar Technologies

We use cookies to enhance your browsing experience and analyze website performance. Cookies are small files stored on your device that help us remember your preferences and maintain your session.

Types of Cookies We Use

• Essential Cookies: Required for authentication and security (Supabase auth cookies)
• Functional Cookies: Remember your preferences and site settings
• Analytics Cookies: Help us understand how you use our site

You can control cookies through your browser settings. However, disabling essential cookies may affect your ability to use certain features.

5. Your Data Rights (GDPR)

If you are in the EU or UK, you have the following rights under GDPR:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Opt-out of marketing communications
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at contact@introspecials.com

6. Third-Party Services

Our website uses the following third-party services that collect data:

• Supabase: Backend authentication and database services
• Google reCAPTCHA: Spam prevention on forms
• Substack: Newsletter distribution
• Vercel: Website hosting and analytics

These services have their own privacy policies. We recommend reviewing them to understand how they process your data.

7. Data Security

We implement industry-standard security measures to protect your personal data, including:

• Encrypted data transmission (HTTPS)
• Secure authentication via Supabase
• Regular security audits and monitoring
• Access controls and role-based permissions

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will delete it immediately.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes via email or by posting the updated policy on our website. Your continued use of our services constitutes acceptance of the updated policy.