Privacy

This page explains what personal data Unattended Crew collects, why, who else handles it and what you can ask us to do with it. It follows the EU General Data Protection Regulation (GDPR) and Romanian data protection law.

Who is responsible

The controller of your data is Eustațiu Digital Studio (PFA Dima F. Eustațiu), CUI RO43220859, Str. Carpați nr. 67, bl. D8, sc. 1, et. 3, ap. 15, 235300 Corabia, jud. Olt, Romania. Write to eustatiu@eustatiu.com about anything on this page.

What we collect, and why

When you open the free lessons. Your email address. We use it to open lessons 2 to 4 on your device and to send you each lesson by email. The legal basis is your consent, which you give when you submit the form. You can withdraw it at any time with the unsubscribe link in every email.

When you buy full access. Your email address, your order number, the product, the amount, the date and your country. Stripe sends us these after you pay. We use them to give you access, to send your sign-in links, to handle a refund and to keep our accounts. The legal basis is the contract with you, and for the accounting records, our legal obligation to keep them. We never receive your card details.

When you sign in. A sign-in token, sent to your email, and a session cookie once you are in. We record which lessons you have opened so the member area can show your progress. The legal basis is the contract with you.

When you visit any page. Our hosting provider receives the technical data every website receives, such as your IP address, browser and the page you asked for. It is used to deliver the page and to protect the site from abuse. The legal basis is our legitimate interest in running a secure site.

When you write to us. Your email and whatever you put in it. We use it to answer you. The legal basis is our legitimate interest in replying, or the contract if you are a buyer.

We do not sell your data. We do not use it for automated decisions about you.

Who else handles your data

We use a few providers. Each processes data only to provide its service to us.

• Stripe takes the payment, checks it for fraud and sends your receipt. As the merchant of record, Stripe also processes your payment data as a controller in its own right, under its own privacy policy. stripe.com/privacy
• Resend sends our emails: lesson emails, sign-in links and replies. It receives your email address and the content of each email. resend.com/legal/privacy-policy
• Cloudflare hosts the site and the database that holds your email, your orders and your lesson progress, and receives the technical data of each visit. cloudflare.com/privacypolicy
• Cloudflare Web Analytics counts visits without cookies and without tracking you across sites.
• Meta receives data only if you accept advertising cookies. See the cookies section below.

Some of these providers are based in the United States. Where your data leaves the EU, the transfer relies on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.

How long we keep it

• Free lesson emails: until you unsubscribe or ask us to delete your address.
• Buyer account and lesson progress: for as long as you have access, and deleted when you delete your account or get a refund, except what the next line requires.
• Order and invoice records: for as long as Romanian tax and accounting law requires.
• Sign-in tokens: 30 minutes, or until used.
• Server logs at our host: for a short period set by Cloudflare, for security.

Cookies and similar storage

We use as few as we can.

• Session cookie. Keeps you signed in to the member area. It is strictly necessary, so it needs no consent, and it expires when your session ends or you sign out.
• Theme preference. If you pick light or dark mode, your browser remembers it in local storage. It never leaves your device.
• Unlocked lessons. After you give your email for the free lessons, your browser remembers on this device that the lessons are open and which address opened them. It never leaves your device.
• Meta Pixel. Only if you accept advertising cookies in the banner. It tells Meta that a visit came from one of our ads and whether it led to a sign-up or a purchase, so we can see which ads work. Meta sets its own cookies for this, such as _fbp. For this collection Meta and we are joint controllers. You can change your choice at any time from the cookie settings link in the footer.

Your rights

You can ask us to:

• show you the personal data we hold about you
• correct it
• delete it
• limit how we use it
• send it to you, or to someone else, in a common format
• stop using it where we rely on our legitimate interest

Where we rely on your consent, you can withdraw it at any time. That does not affect what we did before.

Write to eustatiu@eustatiu.com. We answer within one month. A buyer can also delete their account from the member area.

If you think we have handled your data wrongly, you can complain to the Romanian data protection authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (dataprotection.ro), or to the authority in the EU country where you live.

Children

Unattended Crew is for adults. We do not knowingly collect data from anyone under 18.

Changes

If we change this policy, we will update the date at the top. If a change matters to how we use your data, we will also tell buyers by email.