Privacy Policy

Last updated: 15 April 2026

1. Data Controller

The data controller responsible for your personal data is:

Artur Fortuna
Decision Altitude
Romania
Email: info@decisionaltitude.co

2. What Data We Collect

We collect personal data that you voluntarily provide to us when you:

  • Use our contact form: first name, last name, email address, phone number (optional), subject, and your message.
  • Purchase a product: your name and email address are collected by our payment processor (Paddle.com, Paddle Payments Ltd) to process the transaction and deliver your purchase.

We use Vercel Web Analytics to collect anonymous, aggregated usage data (page views, referrers, browser type). This service does not use cookies and does not collect personal data. Fonts are served locally from our own server; no data is transmitted to third-party font services. We store a license validation token in your browser's local storage to remember your interactive guide access. No personal data is stored locally.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

Purpose Legal Basis (GDPR)
Responding to your contact form inquiry Art. 6(1)(b) — performance of a contract or pre-contractual measures
Processing your product purchase and delivering digital content Art. 6(1)(b) — performance of a contract
Anonymous website analytics (page views, referrers) Art. 6(1)(f) — legitimate interest in improving our services
Complying with legal obligations (e.g., tax, invoicing) Art. 6(1)(c) — legal obligation

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: deleted within 12 months of your last communication, unless an ongoing business relationship exists.
  • Purchase data: retained for the duration required by applicable tax and commercial law (typically 7-10 years for invoicing records).

5. Third-Party Services

We may use the following third-party services to operate our business. Each processes data in accordance with their own privacy policies:

  • Payment processing: Paddle.com (Paddle Payments Ltd) — acts as the Merchant of Record for digital product purchases, processing payment information securely. We do not store your payment card details. Paddle Privacy Policy.
  • Contact form processing: Web3Forms — processes contact form submissions and delivers them to our inbox via email. Your name, email address, and message content are transmitted to Web3Forms for delivery purposes only. Web3Forms Privacy Policy.
  • Email delivery: used to send transactional emails. Your email address is shared with our email service provider solely for delivery purposes.

6. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

  • Right of access (Art. 15) — request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16) — request correction of inaccurate data.
  • Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten").
  • Right to restriction of processing (Art. 18) — request that we limit how we use your data.
  • Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
  • Right to object (Art. 21) — object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent (Art. 7(3)) — withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@decisionaltitude.co. We will respond within 30 days.

7. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. You may contact the supervisory authority in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmission is encrypted via TLS/SSL.

9. International Data Transfers

Some of our third-party service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider's participation in an adequacy framework.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the most recent changes were made. We encourage you to review this policy periodically.

11. Contact

For any questions about this Privacy Policy or our data practices, contact:

Artur Fortuna
Decision Altitude
Email: info@decisionaltitude.co