Privacy Policy

Last updated: 7th April 2026

This Privacy Policy explains how Redactum Consulting SRL ("Redactum", "we", "our", or "us") collects, uses, discloses, and protects personal data when you access our website, purchase or use our services or digital products, submit materials through our intake forms, or otherwise interact with us.

This Privacy Policy applies to all users and clients, regardless of their country of residence, and is governed by the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Romanian data protection laws.

Together with our Terms of Service, this Privacy Policy constitutes a legally binding agreement between Redactum Consulting SRL and its clients (individuals or legal entities), unless a separate written contract expressly provides otherwise.

________________________________________

1. About Us (Data Controller)

Company name: Redactum Consulting SRL

Registered office: Oradea, Romania

Role: Data Controller under GDPR

Jurisdiction: Romania, European Union

For privacy-related matters, you may contact us using the contact information available on our website.

________________________________________

2. Nature of Our Services

Redactum Consulting SRL provides digital analytical, editorial, formatting, and research-support services, as well as digital products (e.g., downloadable templates).

Our services involve, but are not limited to:

·      Research Synthesis & Strategic Frameworks (secondary research synthesis);

·       Academic Paper Review & Audit (technical and structural evaluation);

·      Document structuring and formatting support;

·      Digital presentation templates delivered electronically.

 

 

3. Legal Framework for Processing

All personal data is processed under EU GDPR standards, regardless of where a client is located.

By engaging our services, clients acknowledge that their data will be handled according to EU data protection law.

________________________________________

4. Personal Data We Collect

4.1 Data You Provide Directly

We may collect:

·      Name, email address, phone number;

·      Billing details (address, company name, VAT number);

·      Information submitted through intake forms (including Shopify Forms);

·      Communications and correspondence with us.

·       Files and documents uploaded for service delivery (including via third-party form systems such as Hulk Form Builder);

Clients are strictly prohibited from submitting sensitive personal data (as defined by GDPR), including but not limited to health information, official identification numbers (e.g., CNP, SSN), or sensitive political/religious data. Redactum Consulting SRL and its third-party processors assume no liability for unauthorized sensitive data provided by the Client.

4.2 Data Collected Automatically

When you visit our website (hosted on Shopify), technical data may be collected automatically by Shopify or third-party applications, such as:

·      IP address;

·      Device/browser type;

·      Pages visited and usage data;

·      Cookies and session information.

·       Currency and geolocation data collected by BUCKS Currency Converter PRO++ (developed by Helixo) to automatically detect your country via IP address and display prices in your local currency; a cookie may also be stored to remember your selected currency.

·     Device identifiers (e.g., device type and operating system), and interaction data (e.g., clicks, time spent on forms, and referring URLs).

·      Data collected via Meta Pixel (Facebook & Instagram Ads) when you visit our website and have provided consent, including: IP address; browser type, version, and user agent; operating system and device type; pages visited and referral URL; timestamp of visit; scroll depth and time spent on pages; button click events and button labels; form field identifiers present on the page; conversion events (e.g., product views, add-to-cart, purchase completion, order value); and, where Automatic Advanced Matching is active, hashed versions of personal data entered in forms (such as name, email address, phone number, and billing address). This data is transmitted to Meta Platforms Ireland Ltd. for advertising measurement and audience targeting purposes

________________________________________

5. Intake Forms (Shopify Forms, Hulk Contact Form Builder & Third-Party Form Tools)

We use form collection tools integrated into our Shopify store, including Shopify Forms and third-party applications such as Hulk Contact Form Builder, to collect client information and manage service requests.

Shopify Forms are primarily used for newsletter subscriptions, delivery of digital resources (such as downloadable free templates), and basic contact data collection.

Hulk Contact Form Builder is used for more complex service intake processes, including the submission of detailed project information and file uploads (such as academic documents).

Depending on the form used, your data may be processed and stored by Shopify and/or third-party providers (such as Hulk Contact Form Builder by Shop Circle BH d.o.o., also known as HulkApps), acting as data processors. These providers process data only to enable our services and operate under their own privacy policies.

Active vs Passive Data Collection:

• Active Collection: Personal data such as name, email, and uploaded files are collected only when you manually submit a form. This is the primary data collection point, and you control what information is provided.

• Passive/Technical Collection: Even if you do not submit a form, some technical data may be collected automatically for functional or analytical purposes (e.g., the form viewed, browser type, anonymized session data). HulkApps treats these visitors as largely anonymous and does not link this data to you personally.

For more information, view HulkApps Privacy Policy and Terms and Conditions

5.1 Advertising and Tracking Technologies (Meta Pixel — Facebook & Instagram Ads)

Our website uses Meta Pixel, a tracking technology operated by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland) and its affiliate Meta Platforms, Inc. (1 Hacker Way, Menlo Park, CA 94025, USA).

Meta Pixel may collect the following categories of data when you visit our website:

(a) Technical/HTTP data: IP address, browser type and version, operating system, device type and screen dimensions, page URL, referral URL, and user agent string.

(b) Behavioral data: pages visited, time spent on pages, scroll depth, button clicks and labels, form field identifiers present on pages, date and timestamp of interactions.

(c) Conversion data: purchase events, order value and currency, product identifiers, checkout initiation, and attribution data linking actions to Meta advertising campaigns.

(d) Advanced Matching data: where Automatic Advanced Matching is enabled, the pixel may automatically identify and hash personal data entered into forms on our website (including name, email address, phone number, and address). This data is hashed prior to transmission but is collected on our website first. Meta uses this hashed data to match website events to Facebook/Instagram user profiles.

Redactum Consulting SRL and Meta Platforms Ireland Ltd. act as joint controllers in respect of the initial data collection event, pursuant to Article 26 GDPR and the CJEU judgment in Case C-40/17 (Fashion ID). Meta acts as an independent controller for its subsequent processing of this data.

The legal basis for all of the above processing is your explicit consent (Article 6(1)(a) GDPR), provided via our cookie consent banner. You may withdraw consent at any time by updating your preferences through the Cookie Settings link on our website.

For full details of how Meta processes this data, please see Meta's Data Policy and the Joint Controller Addendum.

6. General Contact Form (Shopify Template)

Our Contact page uses Shopify’s standard contact form, styled with a custom layout. Submitted messages are processed via Shopify’s backend and delivered to our administrative email. No additional tracking or third-party processing occurs beyond Shopify’s standard handling.

What we collect:

• Name, phone, email, subject and your message

Processing:

• Submitted information is sent to us via Shopify, which may process your data as part of their platform operations.

• Data is used only to respond to your inquiry and will not be shared with third parties except as required by law.

Optional Tracking:

• Like other Shopify features, the contact form may collect technical data (browser type, session info) for functionality and analytics, but you remain mostly anonymous unless you submit the form.

________________________________________

7. E-Commerce Infrastructure (Shopify)

Our online store is hosted on Shopify, which provides:

·      website hosting,

·      checkout functionality,

·      payment processing integrations,

·      digital file delivery (e.g., via Digital Downloads),

·      platform security and fraud prevention.

·      communication and interaction tools (e.g., Shopify Messaging, Shopify Forms) to manage direct inquiries, support requests, and structured data collection;

·       workflow and process automation (e.g., Shopify Flow) to ensure efficient service delivery and internal task management;

Shopify’s processing of personal data is also governed by Shopify’s own Privacy Policy for merchants and Shopify’s Terms of Service . Customers may also review Shopify’s privacy controls.

7.1. Operational & Invoicing Applications: 

To provide our services and comply with fiscal obligations, we use third-party applications integrated with Shopify, including Order Printer Pro. These applications may access:

Customer & Billing Data: Name, email, phone number, physical address, and precise geolocation to generate legal invoices.

Technical Data: IP address, browser type, operating system, and device identifiers for fraud prevention and tax localization.

Order & Inventory Data: Full order details (including purchase history, pricing, and tax information) to accurately reflect services on fiscal documents.

Store Integration: Script tags used to provide direct invoice download links in the checkout area."

 

Shopify and third-party applications such as Order Printer Pro may process certain personal and technical data as part of operating this infrastructure, in accordance with its own legal obligations and privacy policies.
View Order Printer Pro (Shop Circle Ltd.) Privacy Policy

7.2. Currency Conversion (BUCKS Currency Converter PRO++)
Our store uses BUCKS Currency Converter PRO++, developed by Helixo, to automatically display product prices in your local currency. To determine your geographic location, BUCKS may collect your IP address and apply geolocation logic. It may also set a functional cookie to retain your currency preference across sessions. Helixo acts as a data processor in this context.
View Helixo's Privacy Policy
________________________________________

8. Use of Software Tools and AI-Assisted Applications

To deliver services efficiently, we use professional software tools, which may include:

·      document editing and formatting applications;

·      secure storage and file-transfer systems;

·      quality, grammar, and consistency tools;

·      AI-assisted applications and AI-assisted language-processing tools used to support editing, structuring, refinement, or generation of evaluative outputs (including audit reports), which may process submitted client documents;

·      workflow and communication platforms.

These tools are used strictly as operational instruments to perform requested services.

Such providers operate under their own terms, privacy policies, and data-processing practices, which are independent from Redactum Consulting SRL.

Redactum Consulting SRL does not control and is not responsible for the internal data-handling practices of these providers beyond the configuration and use necessary to deliver our services.

Where such providers qualify as independent data controllers for certain technical operations (such as infrastructure reliability, security, or legal compliance), their processing is governed exclusively by their own policies.

________________________________________

9. How We Use Personal Data

We process personal data only where necessary and on an appropriate legal basis, including:

·      to perform contracted services;

·      to communicate with clients regarding projects, orders, or inquiries;

·      to deliver digital products and project outputs;

·      to issue invoices and maintain accounting and legal records;

·      to maintain operational security and prevent misuse;

·      to comply with legal obligations.

 

9.1. Marketing Communications (Only With Consent)

Where you have explicitly opted in (for example, by subscribing to our newsletter, requesting updates, or ticking a consent box on a form), we may use your contact details-such as your email address-to send:

·      service updates;

·      educational or informational materials;

·      newsletters;

·      announcements about new services, products, or resources;

·      occasional marketing communications related to Redactum Consulting SRL.

Exception — Free Templates: By downloading free templates, you consent to being added to our marketing mailing list, as disclosed at the point of download. You may unsubscribe at any time via the "Unsubscribe" link in any email.

Such communications are sent only on the basis of your consent under Article 6(1)(a) GDPR.

You may withdraw your consent at any time by:

·      clicking the "unsubscribe" link in any email, or

·      contacting us directly.

________________________________________

10. Legal Bases for Processing

We rely on the following GDPR legal bases:

·      Performance of a contract (Art. 6(1)(b));

·      Legal obligation (Art. 6(1)(c));

·      Legitimate interest in secure and efficient service delivery (Art. 6(1)(f));

·      Consent for marketing communications and cookies, where applicable (Art. 6(1)(a)).

________________________________________

11. Data Sharing

We do not sell or rent personal data.

Data may be shared only when necessary with:

·      Shopify and its integrated applications (for store infrastructure, communication, automation, mailing, form, and digital delivery);

·      Payment processors;

·      Secure software providers required for service execution;

·      Software Tools and AI-Assisted Applications needed to provide the requested service;

·      Third-party form processing providers (e.g., Hulk Contact Form Builder);

·      Authorities where required by law.

·      Invoicing and accounting software providers (third-party apps integrated with our store to generate fiscal documents and maintain legal records, e.g. Order Printer Pro)

 ·   Meta Platforms Ireland Ltd. (Facebook/Instagram), acting as a joint data controller for the initial collection of website behavioral and conversion data for advertising measurement and audience retargeting purposes — only where you have provided explicit consent;

·   Meta Platforms, Inc. (United States), as a recipient of data transferred from the EU in connection with Meta Pixel operations, under the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses;

·   Helixo (BUCKS Currency Converter PRO++), acting as a data processor, for the purpose of currency localization and geolocation-based price display;

________________________________________

12. International Data Transfers

Some providers may process data outside the EEA.

Where this occurs, transfers rely on GDPR safeguards such as:

·      Standard Contractual Clauses;

·      Adequacy decisions;

·      Technical security protections.

Where AI-assisted applications are used (including large language model providers accessed via API), data may be processed on servers located outside the EEA, including in the United States. Such transfers rely on appropriate GDPR safeguards, including Standard Contractual Clauses where applicable.

Data collected via Meta Pixel is transferred to Meta Platforms, Inc., located in the United States. This transfer relies on the EU-U.S. Data Privacy Framework (where applicable) and/or Standard Contractual Clauses. We note that the Data Privacy Framework continues to face legal scrutiny; we monitor regulatory developments and apply additional safeguards where required. Meta Platforms Ireland Ltd. acts as the EU-based entity responsible for Meta's data processing in the EEA prior to any such transfer.

________________________________________

13. Data Retention

We retain personal data only as long as necessary to:

·      fulfill contractual services;

·      comply with accounting/legal requirements;

·      resolve disputes.

Project files are typically deleted or anonymized after completion unless retention is legally required.

Uploaded documents are treated as confidential and are not reused, shared, or distributed outside the scope of service delivery.

________________________________________

14. Cookies

Our website uses the following categories of cookies and tracking technologies:

Essential cookies
Required for basic website functionality, security, fraud prevention, and session management. These do not require consent and cannot be disabled without affecting core site functionality.

Functional cookies
BUCKS Currency Converter PRO++ may set a cookie to remember your selected or automatically detected currency. This does not require consent under GDPR as it is strictly functional, but is disclosed here for transparency.

Analytics cookies
Used for limited traffic analysis and understanding how visitors interact with our website. Activated only with your explicit consent.

Advertising and tracking cookies
We use Meta Pixel (Facebook & Instagram Ads), a tracking technology provided by Meta Platforms Ireland Ltd., to measure the effectiveness of our advertising campaigns, track conversion events, and build retargeted and custom audiences on Facebook and Instagram.

These are non-essential cookies. Meta Pixel and all associated tracking are activated onlyafter you provide explicit opt-in consent via our cookie consent banner. Prior to consent, no advertising tracking data is collected or transmitted.

You may manage, change, or withdraw your cookie preferences at any time by clicking the [Cookie Settings] link in the footer of our website. Withdrawing consent does not affect the lawfulness of any processing based on consent prior to withdrawal.

For more information about how Meta uses the data collected through Meta Pixel, please see Meta's Data Policy

________________________________________

15. Children's Data

Our services are intended for individuals aged 18 or older.

We do not knowingly collect personal data from minors.

________________________________________

16. Your Rights Under GDPR

You have the right to:

·      access your data;

·      correct inaccuracies;

·      request deletion;

·      restrict or object to processing;

·      data portability;

·      withdraw consent.

You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP).

________________________________________

17. Security Measures

We implement appropriate technical and organizational safeguards, including controlled access, secure file handling, and data minimization practices. However, no system can guarantee absolute security.

________________________________________

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

19. Acceptance and Contact

By purchasing our services or using our website, you confirm you have read, understood, and agree to the Privacy Policy and Terms of Service. If you purchase on behalf of an entity, you represent you have authority to bind that entity.

________________________________________

20. Contact

Redactum Consulting SRL

Email: contact@redactum.net