Start a project

Privacy notice

Last updated:

This notice explains what personal data we collect through stoilabs.com, why, who else handles it and what your rights are. We collect as little as we can: there are no accounts, no analytics and no tracking.

Who we are

Stoi Labs is run by Samarticom SRL, the controller of your personal data.

Company
Samarticom SRL
Studio
Stoi Labs
Registered office
Str. Barboși nr. 35, bl. K3, ap. 56, Galați, jud. Galați, 800401
Trade Register no.
J1998000978173
Fiscal code (CUI)
11163755
Email
contact@stoilabs.com

For anything about your data, write to contact@stoilabs.com.

What we collect

When you send the “Start a project” form

  • What you'd like us to build, your budget range and your timing.
  • Your name and email address.
  • Anything you write in the optional note.

The form also sends a random reference number, so that a retry doesn't send your request twice, and how long the form took to fill in, which helps us filter out spam bots. Neither identifies you.

When you visit any page

Like every website, our hosting provider receives technical data with each request: your IP address, browser type, the page requested and the time. We use it to deliver the site and to protect it, for example by limiting how many requests one address can send through the form.

We don't use analytics, advertising, tracking pixels, social media plugins or third-party scripts. Fonts are served from our own domain.

Why we use it, and on what legal basis

  • To read and answer your enquiry, and to prepare a proposal if you ask for one: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
  • To keep the site and the form secure and free of abuse: our legitimate interest in protecting our service (GDPR Article 6(1)(f)).

You don't have to give us your details, but without a name and email address we can't reply. We don't make automated decisions about you or build profiles.

Who else handles your data

We use three service providers. Each one processes data only on our instructions, under a data processing agreement. Each name opens that provider's own privacy policy in a new tab.

We don't sell your data or share it with anyone else, unless the law requires us to.

Transfers outside the EU

Vercel and Resend are US companies, so your data may be processed in the United States. These transfers are covered by the EU Standard Contractual Clauses in each provider's data processing agreement; both providers are also certified under the EU-U.S. Data Privacy Framework. Switzerland, where Proton keeps our mailbox, has an EU adequacy decision. You can ask us for a copy of the safeguards.

How long we keep it

  • Enquiries that don't lead to work: deleted from our mailbox after 12 months.
  • Enquiries that lead to work: kept with the client records for as long as Romanian law requires us to keep commercial records.
  • Resend's copy of the email: 30 days.
  • Hosting logs with IP addresses: 1 day.

Cookies

We don't use cookies or similar technologies, and we don't store anything in your browser. If the site is under attack, Vercel may briefly show a security check that sets a cookie. That cookie is strictly necessary to keep the site available, so it doesn't need your consent.

Your rights

You can ask us to:

  • show you the data we hold about you and give you a copy;
  • correct it;
  • delete it;
  • restrict how we use it;
  • stop using it where we rely on our legitimate interests (your right to object);
  • give it to you in a portable format.

Write to contact@stoilabs.com. We'll answer within one month, free of charge. We may first ask you to confirm your identity.

Complaints

If you think we've handled your data wrongly, please tell us first so we can put it right. You can also complain to Romania's data protection authority, ANSPDCP (dataprotection.ro (opens in a new tab)), or to the authority where you live or work. In the UK, that's the Information Commissioner's Office (ico.org.uk (opens in a new tab)).

Visitors outside the EU

We handle everyone's data the same way, wherever you are. If you're in the UK, you have the same rights under the UK GDPR.

Changes to this notice

If we change how we handle data, we'll update this page and the date at the top.