Privacy Policy

Last updated: 29 April 2026

1. Data Controller

The data controller responsible for your personal data is:

Artur Fortuna
Decision Altitude
Romania
Email: info@decisionaltitude.co

2. What Data We Collect

We collect personal data that you voluntarily provide to us when you:

  • Use our contact form: first name, last name, email address, phone number (optional), subject, and your message.
  • Subscribe to our newsletter: your email address only.
  • Purchase a product: your name and email address are collected by our payment processor (Payhip Ltd, payhip.com) to process the transaction and deliver your purchase.

Fonts are served locally from our own server; no data is transmitted to third-party font services.

Analytics and behavioural measurement (consent-based)

If you accept our cookie banner, we load two analytics services to understand how visitors use the site:

  • Google Analytics 4 (Google Ireland Limited) — measures page views, time on page, scroll depth, traffic sources, and conversion events such as clicks on our purchase links. We have enabled IP anonymisation, disabled Google Signals, and disabled ad personalisation. Data is processed in the EU where possible and may be transferred to the United States under Standard Contractual Clauses.
  • Microsoft Clarity (Microsoft Ireland Operations Limited) — records anonymous session replays and generates heatmaps showing where visitors click, hover, and scroll. Form input fields are masked by default. No personally identifiable information is captured intentionally.
  • Vercel Web Analytics — anonymous, aggregated usage data (page views, referrers, browser type). This service does not use cookies. It runs regardless of your consent choice because it processes no personal data.

If you decline the cookie banner, no Google Analytics or Microsoft Clarity code is loaded and no related cookies or requests are sent. Your choice is stored only in your browser's local storage.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

Purpose Legal Basis (GDPR)
Responding to your contact form inquiry Art. 6(1)(b) — performance of a contract or pre-contractual measures
Sending you our newsletter Art. 6(1)(a) — your explicit consent (you submitted your email via the signup form)
Processing your product purchase and delivering digital content Art. 6(1)(b) — performance of a contract
Anonymous, aggregated traffic measurement (Vercel Web Analytics) Art. 6(1)(f) — legitimate interest in operating the site
Google Analytics 4 and Microsoft Clarity (engagement, heatmaps, session replay) Art. 6(1)(a) — your explicit consent via the cookie banner
Complying with legal obligations (e.g., tax, invoicing) Art. 6(1)(c) — legal obligation

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: deleted within 12 months of your last communication, unless an ongoing business relationship exists.
  • Newsletter subscriptions: retained until you unsubscribe. You can unsubscribe at any time by replying to any newsletter email asking to be removed.
  • Purchase data: retained for the duration required by applicable tax and commercial law (typically 7-10 years for invoicing records).
  • Google Analytics 4 data: 14 months (Google's default user-and-event retention setting).
  • Microsoft Clarity recordings and heatmaps: approximately 90 days (Clarity's default retention).
  • Your consent choice: stored in your browser's local storage until you clear it or change it.

5. Third-Party Services

We may use the following third-party services to operate our business. Each processes data in accordance with their own privacy policies:

  • Payment processing: Payhip Ltd (payhip.com) — acts as the Merchant of Record for digital product purchases, processing payment information securely. We do not store your payment card details. Payhip Privacy Policy.
  • Contact form and newsletter processing: Web3Forms — processes contact form submissions and newsletter signups, delivering them to our inbox via email. Data transmitted is limited to what you provide in each form (e.g., email only for newsletter; name + email + message for contact). Web3Forms Privacy Policy.
  • Email delivery: used to send transactional emails. Your email address is shared with our email service provider solely for delivery purposes.
  • Google Analytics 4: Google Ireland Limited / Google LLC. Loaded only with your consent. Google Privacy Policy.
  • Microsoft Clarity: Microsoft Ireland Operations Limited / Microsoft Corporation. Loaded only with your consent. Microsoft Privacy Statement.
  • Vercel Web Analytics & hosting: Vercel Inc. — hosts the website and provides cookieless aggregate analytics. Vercel Privacy Policy.

Withdraw or change your consent

You can withdraw or change your consent at any time. Click here to re-open the cookie banner and choose again. Declining stops Google Analytics and Microsoft Clarity from loading on subsequent page views.

6. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

  • Right of access (Art. 15) — request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16) — request correction of inaccurate data.
  • Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten").
  • Right to restriction of processing (Art. 18) — request that we limit how we use your data.
  • Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
  • Right to object (Art. 21) — object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent (Art. 7(3)) — withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@decisionaltitude.co. We will respond within 30 days.

7. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. You may contact the supervisory authority in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmission is encrypted via TLS/SSL.

9. International Data Transfers

Some of our third-party service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider's participation in an adequacy framework.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the most recent changes were made. We encourage you to review this policy periodically.

11. Contact

For any questions about this Privacy Policy or our data practices, contact:

Artur Fortuna
Decision Altitude
Email: info@decisionaltitude.co