Privacy policy

1. Who we are

The controller of personal data collected through this site is Homebly (the legal name, registration number, and address are being finalized and will be published on the “About us” page before the site launches).

2. What data we collect

Through the site's request forms we collect: your name, phone number, email (optional), message text (optional), the interface language you selected, and the source of the request (the page the form was submitted from).

3. Purpose of processing

Data is used solely to: contact you about your request, prepare a consultation, calculate design and construction costs, and for internal site-effectiveness analysis — it is not passed to third parties for marketing purposes.

4. Legal basis

Processing is based on your consent (submitting the form) and on the necessity of entering into and performing a contract, under art. 6 of Regulation (EU) 2016/679 (GDPR).

5. Retention period

Request data is kept only as long as needed to process the request and, where a contract is signed, for the period required by law for accounting and contractual records.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, and restrict processing of your data, to data portability, and to object to processing, as well as the right to lodge a complaint with a supervisory authority (in Romania — ANSPDCP).

7. Data transfers

We do not sell or pass your data to third parties for marketing. To answer your request, the form data reaches the following processors: Vercel Inc. (site hosting and form processing), our own CRM system, hosted on a server in the European Union (where the request is recorded), Telegram (the internal notification to our sales team about a new request), Resend (the automatic confirmation e-mail) and WhatsApp Business (if you choose to message us on WhatsApp). Each provider processes the data only for the stated purpose under a data processing agreement.

8. Cookies

The site uses strictly necessary cookies for the form and language switcher to work. Analytics cookies are set only after your explicit consent, given via the cookie banner on the site. We use two analytics providers: Google Analytics 4 (Google Ireland Ltd.) — for traffic and user-behavior statistics, and Yandex Metrica — for aggregate traffic statistics (no session recording: its Webvisor feature is disabled). Independently of consent, Vercel Analytics collects cookieless visit statistics that do not identify you. You can change your choice at any time via the “Cookie settings” link in the site footer.

Additionally, on your first visit we keep three things in your browser’s local storage (localStorage, key “homebly-utm”) for up to 30 days: the “utm” parameters from the address, if you arrived through a promotional link; the name of the site you came from (for example “google.com”), without the page address; and the path of the first page you opened here, without any address parameters. We use this solely to know where your request came from; it contains no personal data, is not shared with third parties, and is deleted automatically when it expires (or at any time by clearing your browsing data).

9. Contact about your data

For questions about your personal data, use the “Contact” page.