Privacy policy

01This website

This site uses no cookies, no analytics and no tracking. Fonts and images are served from the site itself, so visiting it sends nothing to Google or any other third party.

The site is hosted by Cloudflare, which processes technical data such as IP addresses to deliver the pages and protect them from attacks.

02What I collect and why

Business contacts

If you run a photography or real estate business, I may collect your name, business email and details you publish on your website, such as your services and prices, to send you an offer. I collect these only from public business websites. Legal basis: my legitimate interest in offering my services to businesses (GDPR Art. 6(1)(f)).

Emails

When we write to each other, I keep the messages and your contact details. Legal basis: taking steps toward, or carrying out, an agreement with you (Art. 6(1)(b)).

Photos you send

Photos can show personal belongings or other details of a home. I use them only to do the work you ask for. Legal basis: carrying out our agreement (Art. 6(1)(b)).

Billing details

Name, business name, address, tax details and payment records. Legal basis: my obligations under Romanian tax and accounting law (Art. 6(1)(c)).

I don't sell personal data, and I don't use it for anything other than the purposes above.

03Who else handles it

I use a small number of providers to run the business. They process data on my behalf:

• Google Workspace: email and documents.
• fal.ai: the AI image service I use to stage photos. Photos you send are processed there.
• Cloudflare: website hosting.
• Stripe: card payments, once card payments are available. I never see or store your card number.

Some of these providers are based in the United States, so data can be transferred outside the EU. These transfers rely on the safeguards the providers offer, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

04How long I keep it

• Business contacts: deleted 12 months after my last message if you never reply. If you ask me to stop, I delete your details right away and keep only your email address on a do-not-contact list, so I don't write to you again.
• Photos and staged files: deleted 90 days after delivery.
• Emails with clients: kept while we work together, and afterwards only as long as needed for invoices and legal obligations.
• Billing records: kept for as long as Romanian accounting law requires.

05Your rights

You can ask me to show you the data I hold about you, correct it, delete it, limit how I use it, or send it to you in a portable format. You can object to my use of your data at any time, and you can always stop marketing emails: reply “no thanks” or write to cristian@emptytosold.com. I reply within one month.

If you think I've handled your data wrongly, you can complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority where you live or work.

06Changes

If I change how I handle data, I'll update this page and the date at the top.