Legal

Privacy Policy

Notice version: 2026-09-19. Approved and updated on 20 September 2026.

1. Who we are

Nesco Digital ("we", "us") is a growth and operations partner for digital businesses, based in Romania. For privacy-related inquiries, contact us through our contact page.

2. What data we collect

Through the contact form:

Name, email, company, optional phone number, selected issues, and the website, context and project information you choose to provide. We also retain the inquiry source, language, notice acknowledgement, operational history and internal notification status to evaluate your inquiry and follow up on the business discussion.

Through the newsletter:

The contact form does not subscribe you to a newsletter or marketing. Newsletter sign-up is disabled in this release.

Through cookies and analytics:

We use Google Analytics, Meta Pixel and TikTok Pixel to measure advertising campaign performance and understand visitor behavior. These services collect anonymized data about pages visited, time spent, approximate location, and device. Collection occurs only after your explicit consent via the cookie banner.

3. Why we collect this data

Data	Legal basis	Purpose
Contact form	Legitimate interest	Responding to inquiry
Newsletter	Consent	Marketing communications
Analytics & Pixels	Consent	Campaign measurement, site improvement

4. How long we keep data

The prospect record — contact details, selected issues, context, planning, operational history and associated notifications — is retained for at most 365 days from receipt. Data no longer needed for the stated purpose is deleted earlier. Further interactions do not restart this period, and the inquiry does not authorize marketing.

Erasure includes checking inbox copies and exports. Backups are handled separately under the provider’s retention cycle; deletion from the active database does not mean immediate deletion from every backup. Erasure requests must be reapplied after restoration before data is reused. Client contracts and tax documents follow separate retention policies.

5. Who we share data with

We do not sell or rent your data. Data is processed by the following service providers, strictly for the purposes stated:

→Vercel — website hosting and request processing
→Supabase — storage of the inquiry in a private schema
→Resend and Nesco’s email service — internal notification to the Nesco team
→Google Analytics, site analytics
→Meta (Facebook), advertising campaign measurement via Meta Pixel
→TikTok, advertising campaign measurement via TikTok Pixel

Inquiry access is limited to the authorized Nesco operator. Internal notifications may contain inquiry details; they are not marketing messages and do not subscribe the requester to marketing.

6. Your rights

Under GDPR, you have the right to:

→Access the data we hold about you
→Rectify inaccurate data
→Erase your data ("right to be forgotten")
→Withdraw consent at any time, without consequences
→Data portability
→Lodge a complaint with the supervisory authority in your country

For any request: our contact page. We respond within 30 days.

7. Cookies

We use two types of cookies:

Essential, required for the site to function, no consent needed.

Analytics & Marketing, Google Analytics, Meta Pixel and TikTok Pixel, activated only after your consent. You can change preferences at any time via the cookie banner.

8. Security

Data is transmitted over encrypted connections (HTTPS). Access to contact data is restricted and monitored.

9. Changes

We reserve the right to update this policy. Significant changes will be communicated by email to newsletter subscribers. The last update date is shown at the top of this document.