Privacy Policy

1. Who this applies to

This Privacy Policy explains how NABRU MEDIA ("we," "us," "our") collects, uses, and protects information when you visit nabrumedia.com, submit our contact form, or place an order.

2. What we collect

We collect the following categories of information:

• Contact form data: name, email address, project type, and message; submitted via our contact form, processed by Formspree.
• Book-a-call form data: name, email address, project type, and message; submitted via the form on our checkout page, processed by Formspree.
• Payment data: processed entirely by Stripe. We never see or store your full card number, CVC, or billing credentials on our own servers.
• Basic technical data: standard information collected automatically by our hosting provider, Netlify (e.g. IP address, browser type), for security and performance purposes.

3. How we use it

• To respond to your inquiries and quote projects.
• To process and fulfill paid orders.
• To send order confirmations and project updates.
• To improve our services and Site.

We do not sell your personal information to third parties.

4. Third-party services we use

• Formspree: processes contact form submissions. See Formspree's Privacy Policy.
• Stripe: processes payments. See Stripe's Privacy Policy.
• Netlify: hosts this Site. See Netlify's Privacy Policy.

5. Legal basis for processing (GDPR)

If you are in the EU/EEA or UK, we process your data on these legal bases: performance of a contract (fulfilling an order you placed), your consent (submitting the contact form), and our legitimate interest in running and securing the Site. You can withdraw consent at any time without affecting processing already carried out.

6. Data retention

We retain contact form and order information for as long as needed to fulfill your project and for a reasonable period afterward for accounting and support purposes (3 years), unless a longer period is required by law (Romanian accounting law generally requires invoices to be kept for at least 10 years).

7. Your rights

If you are in the EU/EEA or UK, under GDPR you have the right to:

• Request a copy of the personal data we hold about you (right of access).
• Ask us to correct inaccurate data (right to rectification).
• Ask us to delete your data (right to erasure, "right to be forgotten").
• Object to or restrict how we use your data (right to object/restriction).
• Receive your data in a portable format (right to data portability).
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at gheorghisor_cristian@yahoo.com. If you're in Romania, you can also lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro, or with your own country's data protection authority if you live elsewhere in the EU.

8. Cookies

This Site does not use tracking or advertising cookies. Portfolio videos use YouTube's privacy-enhanced player (youtube-nocookie.com), which only loads, and may only set its own cookies, after you press play; see Google's Privacy Policy for details.

9. Security

We rely on Stripe, Formspree, and Netlify's security infrastructure to protect data in transit and at rest. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

10. Children's privacy

Our services are not directed at individuals under 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page.

12. Contact

Questions about this policy or your data? Reach us through the contact form or at gheorghisor_cristian@yahoo.com.