Privacy Policy
Last updated: June 2026
MERAKI HR SRL · Registered office: Bucharest, Romania · Trade Register: J2024005188408 · CUI: 49743547 · VAT: RO49743547 · EUID: ROONRC.J2024005188408 · office@merakihr.ro
Consumer protection: ANPC — Autoritatea Națională pentru Protecția Consumatorilor · EU Online Dispute Resolution platform
This Privacy Policy explains how MERAKI HR ('we', 'us', or 'our') collects, uses, discloses, and safeguards personal data when you visit merakihr.eu or engage our consultancy and Digital Lab products.
1. Who we are
MERAKI HR SRL ('we', 'us', 'our'), Trade Register J2024005188408, CUI 49743547, VAT RO49743547, registered in Bucharest, Romania, is the data controller. For any data-protection question, contact office@merakihr.ro.
2. Data we collect
- Contact data you provide voluntarily (name, email, company, message) when you email us or book a discovery call via Calendly.
- Usage data collected automatically through analytics (pages viewed, referrer, device, approximate location derived from IP).
- Cookies and similar technologies as described in our Cookies Policy.
- Assessment data, where you purchase the Pay Transparency Readiness Assessment: your name, company name, work email, country of registration, employee band, your questionnaire answers, and payment confirmation data. Your answers describe your organisation's pay practices; we treat them as confidential.
3. How we use your data
- To respond to enquiries and deliver requested services.
- To operate, secure, and improve the website and our digital products.
- To comply with legal obligations (tax, accounting, regulatory).
4. Legal bases (GDPR)
We rely on: your consent for non-essential cookies and marketing; contract for service delivery; legitimate interests for website security and analytics; and legal obligation for record-keeping.
5. Sharing and processors
We share personal data only with processors that help us operate, each bound by a data processing agreement and, where relevant, EU Standard Contractual Clauses:
| Processor | Role | Location / transfer basis |
|---|---|---|
| Lovable (Lovable Technologies) | Platform, hosting, and transactional email sent from your own domain (e.g. noreply@merakihr.eu) | EU; SCCs where applicable |
| Supabase (as Lovable's database layer) | Database hosting | EU (Frankfurt) |
| Stripe | Payment processing (assessment) | EU/US; SCCs |
| Calendly | Discovery-call scheduling | US; SCCs |
| FGO / i-Tom Solutions SRL | Romanian fiscal invoicing | Romania |
| Google (Tag Manager / Analytics) | Analytics — only after consent | US; SCCs |
| Meta Platforms (Meta Pixel) | Marketing measurement — only after consent | US; SCCs |
Our current sub-processor list is available on request.
6. Retention
We keep contact and enquiry data only as long as needed for the purpose, then delete or anonymise it. Assessment answers and reports are retained for 12 months unless you ask us to delete them sooner. Invoicing and accounting records are retained for 10 years as required by Romanian accounting law.
7. Your rights
You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with the Romanian DPA (ANSPDCP). To exercise any right, email office@merakihr.ro.
8. Security
We apply reasonable technical and organisational measures to protect personal data. No method of transmission over the internet is fully secure; we cannot guarantee absolute security.
9. Changes
We may update this Policy from time to time. Material changes will be reflected by updating the date above.