Invisiu38
Privacy Policy
Last updated: 21/09/2026
2.1 Data controller
[LEGAL BUSINESS NAME], operating under the Invisiu38 brand, is the controller of personal data processed through the website and services.
Registered office: [INSERT]
Email for privacy requests: [INSERT]
Telephone: [INSERT]
Data Protection Officer, if appointed: [INSERT]
2.2 Personal data we may collect
Depending on how you interact with us, we may collect:
Identity and contact data: full name, email address, telephone number, billing address and company details.
Date of birth and, only where requested for the selected service, time and place of birth.
Professional information: job title, organization, professional goals and development context.
Service information: booking details, coaching questionnaires, assessment responses, strengths information, goals, feedback and information voluntarily shared during services.
Transaction and billing data: purchased service, amount, payment status, invoice information and limited transaction references. We do not normally receive full payment card details from the payment processor.
Communication data: enquiries, emails, form submissions, consent records and customer service correspondence.
Technical and usage data: IP address, device and browser information, cookie identifiers, website interactions and log information.
Marketing preferences: newsletter subscription, communication preferences and withdrawal records.
2.3 Date of birth and personalized services
Date of birth may be requested to prepare personalized self-awareness exercises, reports or numerology-based insights specifically selected by the client. Where relevant to the requested service, the time and place of birth may also be collected. These details will not be used for unrelated purposes. The collection form must explain whether the information is required or optional and what happens if it is not provided.
2.4 Purposes and legal bases
Purpose | Typical data | Legal basis |
Respond to enquiries | Contact and communication data | Legitimate interests or steps requested before a contract |
Manage bookings and deliver purchased services | Identity, contact, booking, professional and service data | Contract performance |
Prepare requested personalized reports or numerology-based insights | Name, date of birth and, where relevant, time/place of birth | Contract performance and, where used, consent documented at collection |
Process payments and issue invoices | Identity, transaction and billing data | Contract performance and legal obligation |
Maintain security and prevent misuse | Technical and usage data | Legitimate interests and legal obligation, where applicable |
Send newsletters or direct marketing | Contact data and marketing preferences | Consent, unless another lawful basis applies |
Establish or defend legal claims | Relevant records and communications | Legitimate interests and legal obligation |
2.5 Is providing data mandatory?
Fields marked as required are necessary to process the enquiry, booking, contract or personalized service. If required information is not provided, we may be unable to deliver the requested service. Optional information may be omitted without affecting unrelated services.
2.6 Sources of personal data
We normally obtain personal data directly from you, through website forms, booking tools, emails, calls, sessions, purchases and questionnaires. We may also receive limited transaction or booking information from the providers you use to complete a payment or appointment.
2.7 Recipients and processors
Personal data may be shared only as necessary with providers supporting hosting, website maintenance, scheduling, video conferencing, email, newsletters, analytics, payment processing, accounting, legal advice and secure file storage. Complete the provider register before publication and ensure appropriate data processing terms are in place.
Current providers: [INSERT ACTUAL PROVIDERS AND LINKS TO THEIR PRIVACY NOTICES].
2.8 International transfers
If a provider processes personal data outside the European Economic Area, we will use a lawful transfer mechanism and appropriate safeguards as required by applicable data protection law. The actual mechanism depends on the provider and processing location and must be verified before publication.
2.9 Retention
We retain data only for as long as necessary for the stated purpose and applicable legal requirements. Before publication, complete a retention schedule covering enquiries, client files, personalized reports, consent records, invoices, contractual records, marketing data, cookie data and technical logs. Where data is no longer required, it will be deleted or anonymized securely.
2.10 Your rights
Access your personal data and obtain information about its processing.
Request correction of inaccurate or incomplete data.
Request deletion where the legal conditions are met.
Request restriction of processing.
Object to processing based on legitimate interests and to direct marketing.
Receive certain data in a portable format where applicable.
Withdraw consent at any time, without affecting prior lawful processing.
Lodge a complaint with the competent supervisory authority.
Requests may be sent to [PRIVACY EMAIL]. We may request information necessary to verify identity. Rights are subject to the conditions and limitations established by applicable law.
2.11 Complaints
In Romania, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP). Add the authority’s current official contact details or link at publication.
2.12 Security
We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, loss, disclosure or destruction. Access is limited to persons and providers who need the data for their authorized role.
2.13 Automated decision-making
Invisiu38 does not use date-of-birth information to make decisions that produce legal or similarly significant effects through solely automated processing. Personalized interpretations are educational and developmental outputs, not determinants of eligibility, employment, credit, health or legal status.
2.14 Children
The website and standard services are intended for adults. We do not knowingly collect personal data from children through standard forms. If a service for a minor is expressly offered, a separate age-appropriate privacy notice and parent or guardian authorization process should be implemented.
2.15 Updates
We may update this Privacy Policy when services, providers or legal requirements change. The current version and update date will be published on the website.