Privacy Policy

Who is responsible for your data

This website is operated by CoherentOrgs SRL, the legal entity behind the work of Lili David. CoherentOrgs SRL is the data controller for all personal data collected through this website.

CoherentOrgs SRL
Str Ion Lahovari 23B/2, Dumbraveni, Romania
Registration Number: RO54128042
Contact: connect@lilidavid.com

What data is collected and why

Contact form

When you submit the contact form on this website, the following information is collected: your name, email address, organisation (optional), and your message.

This data is collected solely to respond to your enquiry. It is not used for marketing, shared with third parties for commercial purposes, or added to any mailing list.

The legal basis for this processing is Legitimate Interest (Article 6(1)(f) GDPR): when you reach out through a professional enquiry form, it is mutually expected that the information you provide will be used to respond to you.

Booking a call

This website embeds a scheduling widget from TidyCal (tidycal.com) so you can book an introductory call without leaving the site. If you choose to book a call, your booking details are collected by TidyCal, where TidyCal acts as an independent data controller. Your booking data is subject to TidyCal's own Privacy Policy, not this one.

No analytics or tracking

This website does not use Google Analytics, Facebook Pixel, or any other behavioural tracking or advertising technology. No tracking cookies are placed on your device by this website.

How your data is handled

Form submission service

Contact form submissions are processed by FormSubmit (formsubmit.co), which forwards your message to Lili's email inbox. FormSubmit is a US-based service. When you use the contact form, your data will be transferred to servers outside the European Economic Area. FormSubmit does not currently publish a formal Data Processing Agreement or EU-approved transfer safeguards.

If you would prefer not to use the form, you are welcome to email connect@lilidavid.com directly. Emails sent directly do not pass through FormSubmit.

Email inbox

Once forwarded by FormSubmit, your message is received and stored in Lili's email inbox. Enquiry emails are retained for up to two years and then deleted, unless an ongoing working relationship requires longer retention.

Fonts

The fonts used on this website (Inter and Playfair Display) are served directly from this website's own servers. No font files are loaded from Google Fonts or any other external CDN, so no data is sent to third parties as a result of viewing this site.

Cookies

This website does not place any cookies on your device for tracking or analytics purposes. The contact form uses a honeypot field (an invisible field to detect spam bots) but this does not involve cookies or tracking.

If the optional spam-protection widget (Cloudflare Turnstile) is enabled on the contact form, Cloudflare may set a cookie as part of its bot-detection process. This cookie is functional in nature and does not track you across other websites.

Your rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access — You can request a copy of the personal data held about you.
• Right to rectification — You can ask for inaccurate data to be corrected.
• Right to erasure — You can ask for your data to be deleted, where there is no overriding reason to keep it.
• Right to restriction — You can ask for processing of your data to be restricted in certain circumstances.
• Right to data portability — You can ask to receive your data in a structured, machine-readable format.
• Right to object — You can object to processing based on legitimate interest. Processing will stop unless there are compelling legitimate grounds that override your interests.

To exercise any of these rights, please email connect@lilidavid.com. Requests will be responded to within 30 days.

Right to complain

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Romanian data protection supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
www.dataprotection.ro

You also have the right to bring a complaint before the supervisory authority in the EU member state where you live or work.

Changes to this policy

This policy may be updated from time to time. The date at the top of this page reflects when it was last revised. Significant changes will be noted here.

See also

Accessibility