Legal
Privacy notice
Last updated: 19 July 2026
This notice explains how PLURIEL, the founder-led strategy, brand and digital consultancy led by Alexandru Filip, handles personal data when you visit pluriel.ro or contact us.
The website is designed to collect as little personal data as possible: there is no advertising or account system, and Google Analytics is activated only after consent. The contact form collects only the information needed to deliver your enquiry, perform an anti-spam check and answer you.
Who is responsible for your data
For this website, the data controller is PLURIEL, represented by Alexandru Filip in Bucharest, Romania.
You can contact the controller about privacy at alex@pluriel.ro.
Personal data that may be processed
When you visit the site, Vercel, our hosting, content-delivery and abuse-protection provider, may process technical request information needed to deliver and protect the website. This can include an IP address, browser and device details, requested page, date and time, and security or diagnostic logs. PLURIEL does not use this information for visitor analytics or marketing profiling.
When you submit the contact form, Vercel BotID performs an invisible anti-bot check. It uses a browser challenge and technical session signals to determine whether the request comes from a real browser. The result is used only to secure the form; Vercel states that BotID does not store user behaviour or personally identifiable information.
If you accept analytics cookies, Google Analytics may process an online identifier, pages viewed and site interactions, page and referrer addresses, and technical information such as browser, device, language and approximate location. PLURIEL does not send your name, email address or contact-form content to Google Analytics.
If you use the contact form, we receive your name, email address, message and, if you provide it, your company or website. The submission is processed by the website and delivered to PLURIEL through Resend, our email delivery provider.
If you use the direct email fallback, we receive the information you choose to send, including your sender address, message and any attachments.
If you choose to contact us through WhatsApp, the WhatsApp platform processes your phone number and conversation content under its own terms and policies, and PLURIEL receives the information you choose to send.
Why we process it and our legal bases
Technical request data and the BotID check are processed where necessary for our legitimate interest in providing a secure, reliable and functional website and preventing contact-form spam and abuse.
Google Analytics data is processed only on the basis of your consent. You can refuse without losing access to the site and withdraw consent at any time through ‘Cookie settings’ in the footer.
Email or WhatsApp correspondence is processed to respond to your enquiry, discuss a possible engagement and manage any resulting professional relationship. The legal basis is our legitimate interest in responding to relevant business enquiries and, where applicable, taking steps at your request before entering into a contract.
We may also process limited information where necessary to meet a legal obligation or establish, exercise or defend legal claims.
Service providers, sharing and international transfers
We do not sell personal data and do not share it with advertising or data-brokerage services.
Information may be processed by Vercel for website hosting, security, BotID protection and content delivery; by Google for Google Analytics, only after consent; by Resend to deliver contact-form messages; by the email providers used by you and PLURIEL to transmit correspondence; by WhatsApp if you choose that channel; and by professional advisers where reasonably necessary for legal, accounting or administrative purposes.
Some providers may process information outside the European Economic Area. Where required, those transfers are covered by a recognised legal mechanism, such as an adequacy decision or standard contractual clauses, as described in the provider’s terms.
How long we keep information
Hosting and security logs are retained according to the hosting provider’s operational settings and policies.
Your analytics choice is kept in the browser for no more than 6 months. Google Analytics cookies are configured to expire after no more than approximately 13 months from consent, without automatically extending the term on every visit. Data retention in the Google Analytics property is controlled separately in the service settings.
Enquiry correspondence is kept only for as long as reasonably necessary to answer you, assess or manage a professional relationship, comply with legal obligations, or resolve a dispute. The relevant purpose, the status of the enquiry and any legal retention requirement determine the period.
Your rights
Subject to the conditions and limits in applicable data-protection law, you may ask us to exercise the following rights. We normally respond within one month; the law permits an extension in certain complex cases.
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion or restriction of processing.
- Object to processing based on legitimate interests.
- Receive or transfer data where the right to portability applies.
- Withdraw consent at any time where processing relies on consent.
- Lodge a complaint with the Romanian data-protection authority, ANSPDCP, or another competent supervisory authority.
Cookies, analytics and automated decisions
Google Analytics and its optional cookies are blocked by default and load only if you select ‘Accept’ in the banner. Refusal is equally available, and the choice can be changed later from the footer. The preference is stored locally so the site does not request the same choice on every visit.
The BotID form check may use technical signals and elements strictly necessary to secure the request, not for analytics or advertising. Submitting the form through Resend does not add analytics or advertising cookies. Fonts are self-hosted. We do not use automated decision-making that produces legal or similarly significant effects.
Security and external websites
We use proportionate technical and organisational measures intended to protect personal data. No internet transmission or storage method can be guaranteed completely secure.
Links to selected work and WhatsApp open independent services. Their operators are responsible for their own content and privacy practices.
Changes to this notice
We may update this notice if the website, our services or applicable requirements change. The date above identifies the current version.