GDPR

Privacy Policy

Version 0.3, effective 30 June 2026.

This policy explains how Cactus Consult EOOD, UIC 203161861, processes personal data through this website, the contact form, reCAPTCHA checks, and analytics used only after consent.

Scope

This policy covers the public website. Personal data processed inside client systems, integrations, AI-assisted workflows, or support environments is governed by a separate contract, DPA, and client instructions.

Data We Process

• Contact data: name, email, and the message you submit.
• Business context voluntarily included in the enquiry.
• Technical data such as IP address, user agent, time, and server logs.
• Security data from Google reCAPTCHA, including token, action, score, and result.
• Analytics data only when Google Analytics is configured and consent is given.

Purposes

• Responding to enquiries and pre-contract communication.
• Protecting the website, form, and infrastructure from abuse.
• Improving website content and stability through consent-based analytics.
• Meeting legal obligations and protecting legitimate rights.

Retention

Enquiries are usually kept for up to 24 months unless a contractual relationship starts or a longer legal retention period applies. Server and security logs are normally kept for 6 to 12 months unless needed for incident investigation.

Your Rights

You may request access, correction, deletion, restriction, portability, or objection where applicable. Use the contact page to reach us.