Book a call
Menu

Privacy

Privacy policy

What personal data pavell.me collects, why, who helps me handle it, and what you can ask me to do with it. Last updated 7 November 2026.

The short version: I collect as little as I can. I don’t sell your data, I don’t use it for advertising, and Google Analytics and Hotjar only run with cookies if you say yes to the cookie banner.

Who I am

This website is run by Pavel Lupu, a freelance product and web designer based in Romania. I decide how the personal data collected here is used, so I’m responsible for it. For anything about your data, email hi@pavell.me.

What I collect and why

I only collect what you give me, plus basic analytics if you allow it.

  • Newsletter and the website launch checklist. Your first name and email address. I use them to send you the checklist, a short series of follow-up emails and occasional updates. The legal basis is your consent, which you give with the checkbox on the form. Every email has an unsubscribe link.
  • Contact form. Your name, phone number, email address and message. I use them to reply to you. The legal basis is answering your request before we work together, and my legitimate interest in replying to messages. Messages are stored on the website and sent to my inbox.
  • Booking a call. When you book through Google Calendar, Google collects your name, email and anything you add to the booking, and shares them with me so we can meet.
  • Emails and WhatsApp messages. If you write to me directly, I keep the conversation so I can reply and follow up.
  • Analytics, only if you accept. Google Analytics tells me which pages people visit, how they found the site, roughly where they are (country or city), and what kind of device they use. Hotjar shows me how people use a page: clicks, scrolling and anonymised recordings of visits, with anything typed into forms hidden. I use both to see which pages are useful and where people get stuck. The legal basis is your consent.

Cookies

When you first visit, a banner asks whether you accept analytics cookies. Until you choose, and if you reject, Hotjar doesn’t load at all and Google Analytics runs without setting cookies.

  • pv_consent (stored in your browser, not a cookie): remembers your choice for 12 months, then the banner asks again.
  • _ga and _ga_* (Google Analytics): set only after you accept. They tell apart one visitor from another and last up to 2 years.
  • _hjSessionUser_* and _hjSession_* (Hotjar): set only after you accept. They last up to 1 year and 30 minutes.
  • WordPress login cookies: only for people who log in to manage the site.

You can change your mind at any time: open cookie settings. The same link is in the footer of every page.

Services that handle data for me

These companies process data on my behalf, only for the purposes above:

  • Hostinger: hosts the website, including contact form messages.
  • Resend: sends the checklist and newsletter emails, and stores the newsletter list.
  • Google: Google Analytics (if you accept), Google Calendar for booking calls, and Google Fonts for the fonts on this site.
  • Hotjar: page analytics and visit recordings, only if you accept.
  • n8n: an automation tool on my own server that receives contact form messages so I can follow up on them.
  • WhatsApp (Meta): only if you choose to message me there.

Some of these companies are based outside the EU, mainly in the US. Where data leaves the EU, they rely on legal safeguards such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long I keep it

  • Newsletter: until you unsubscribe or ask me to delete you.
  • Contact messages, bookings and emails: up to 2 years after we last spoke. If we work together, I keep project and invoice records for as long as accounting law requires.
  • Analytics: no longer than 14 months in Google Analytics, and no longer than Hotjar’s retention period (up to 365 days).

Your rights

Under the GDPR you can ask me to:

  • show you the data I have about you, and give you a copy
  • correct it, or delete it
  • stop or limit how I use it
  • withdraw your consent at any time, for example by unsubscribing or rejecting cookies

Email hi@pavell.me and I’ll reply within a month. If you think I’ve handled your data wrongly, you can complain to the data protection authority where you live. In Romania that’s ANSPDCP (dataprotection.ro).

Changes to this policy

If I change how I handle your data, I’ll update this page and the date at the top. If the change matters to newsletter subscribers, I’ll email you about it.