Privacy policy
Bjornflow ("we", "our", or "us") is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).
What data do we collect?
We may collect your name, email address, company name, role, website URL, and any project-related information you choose to share with us, primarily through our contact form, audit booking form, or website quiz. If you opt in, we also collect your email address for our newsletter.
How do we collect your data?
We collect data when you fill out a contact or audit form, complete the website quiz, send us an email, subscribe to our newsletter, or browse our website.
We use Fathom Analytics for website analytics, a privacy-focused tool that does not use cookies or collect personally identifiable information. Our site infrastructure is provided by Cloudflare, which may set a technical session cookie (_cfuvid) for network performance purposes. This cookie is not used for tracking or advertising.
How do we use your data?
We use your data to respond to your inquiry, understand your project needs, deliver audit services you have purchased, and send marketing emails if you have opted in. You can unsubscribe from marketing emails at any time via the link in any email we send.
We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.
Payment processing
Audit bookings are processed through a third-party payment provider (Stripe or Wise). We do not store your payment details. Their respective privacy policies govern how payment data is handled.
Legal basis for processing
We process your data on the basis of legitimate interest to respond to inquiries and conduct business discussions, contract performance where a service has been purchased, and consent where you have opted in to marketing communications.
How do we store your data?
Form submissions and email correspondence are stored securely via Gmail (Google Workspace). Google acts as a data processor and is subject to appropriate data processing terms. We retain inquiry data for up to two years, after which it is deleted unless an ongoing client relationship requires otherwise. You may request deletion at any time.
Your rights
Under GDPR, you have the right to access, correct, or erase your personal data, restrict or object to processing, and request data portability. You also have the right to lodge a complaint with Romania's data protection authority, ANSPDCP (www.dataprotection.ro). We will respond to all valid requests within 30 days.
Cookies
We do not use first-party tracking or marketing cookies. The only cookie present on this site is _cfuvid, set by Cloudflare for session consistency and network performance. It does not track you across sites or collect personal information.
Changes to this policy
This policy will be updated if new tools or services are introduced that affect how we handle personal data.
Contact