Privacy Policy

GRADAX ("we," "us," or "our") operates the website gradax.com and provides web design, hosting, marketing, and related technology services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services. By accessing or using our services, you agree to the terms of this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you fill out a contact form, request a quote, create an account, or communicate with us, you may provide:

• Full name
• Email address
• Phone number
• Company name and job title
• Billing and payment information
• Project requirements and messages

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical data:

• IP address and approximate location
• Browser type and version
• Operating system and device type
• Pages visited, time spent, and navigation paths
• Referring website or search terms
• Cookies and similar tracking technologies (see our Cookie Policy)

2. How We Use Your Information

We use your personal data for the following purposes:

• Service delivery: To provide, maintain, and improve our services, process transactions, and fulfill contractual obligations.
• Communication: To respond to inquiries, send project updates, and provide customer support.
• Marketing: To send newsletters, promotional offers, and service updates (with your consent where required).
• Analytics: To understand how visitors use our website and improve user experience.
• Security: To detect, prevent, and address fraud, abuse, and technical issues.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data in the following limited circumstances:

• Service providers: Trusted third parties who assist us in operating our website, processing payments, hosting data, or delivering services (e.g., payment processors, cloud hosting providers, email delivery services).
• Legal obligations: When required by law, regulation, or legal process, or to protect the rights, property, or safety of GRADAX, our clients, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4. Your Rights Under GDPR (European Economic Area)

As a company based in Romania (EU), GRADAX is subject to the General Data Protection Regulation (GDPR). If you are located in the European Economic Area, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: Request limitation of how we process your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to the processing of your data for direct marketing or other purposes.
• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

5. Your Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: Request that we delete the personal information we have collected from you.
• Right to opt out: Opt out of the sale of your personal information. Note: we do not sell personal information.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email us at [email protected] with the subject line "CCPA Request."

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and personalize content. Cookies are small text files stored on your device. For detailed information about the cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Typically:

• Account data: Retained for the duration of your account plus 2 years after deletion.
• Transaction records: Retained for 7 years for tax and accounting purposes.
• Marketing data: Retained until you unsubscribe or request deletion.
• Analytics data: Retained in anonymized form for up to 26 months.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for data in transit
• AES-256 encryption for data at rest
• Regular security audits and vulnerability assessments
• Access controls and role-based permissions
• Employee training on data protection practices
• Incident response procedures for potential data breaches

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

10. International Data Transfers

GRADAX is headquartered in Bucharest, Romania (European Union). Your data may be transferred to and processed in countries outside the EEA, including the United States, where some of our service providers operate. When we transfer data outside the EEA, we ensure adequate safeguards are in place, including:

• EU Standard Contractual Clauses (SCCs) with data processors
• EU-US Data Privacy Framework certification of recipients
• Adequacy decisions by the European Commission where applicable

11. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law, notify you by email or through a prominent notice on our website.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: