Legal

Privacy Policy

Last updated: 1 October 2026

1. Who we are

This policy explains how personal data is processed when you visit ybrtrade.com or contact us through it. The data controller is Yellow Brick Road S.R.L., registered office at Strada Cornelia nr. 6, room 1, Sector 4, Bucharest, Romania, CUI 53942130, Trade Register No. J2026010160002, EUID ROONRC.J2026010160002 (“YBR Trade”, “we”). You can contact us at office@ybrtrade.com or +40 751 296 400.

2. What data we collect

We only collect the data you choose to send us, plus the minimum technical data needed to run the website:

• Contact form: your name, email address, and optionally your company name and website, together with the content of your message.
• Email and phone: any details you share when you contact us directly.
• Technical data: our hosting provider automatically records server logs (such as IP address, browser type, date and time of access) for security and to keep the website running.

3. Why we use it and on what legal basis

• To respond to your enquiry and to take steps, at your request, before entering into a contract — Art. 6(1)(b) GDPR.
• To communicate with business contacts and keep our website secure and protected against abuse — our legitimate interests, Art. 6(1)(f) GDPR.

We do not use your data for automated decision-making or profiling, and we never sell it.

4. How long we keep it

We keep enquiries for as long as needed to handle your request and any follow-up, and no longer than 2 years from our last contact, unless a business relationship follows — in which case the data is kept for the duration of that relationship and as required by law. Server logs are kept by our hosting provider for a limited period for security purposes.

5. Who we share it with

Your data is handled by YBR Trade and by our hosting and email provider (Namecheap, Inc.), which acts as our processor. Some of this processing may take place outside the European Economic Area; where it does, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses. We may also disclose data where required by law.

6. Cookies and tracking

This website does not use cookies, analytics or advertising trackers. Fonts are served from our own server, so no data is sent to third parties when you browse the site.

7. Your rights

Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. To exercise any of these rights, email us at office@ybrtrade.com.

You also have the right to lodge a complaint with the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).

8. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date of the last update shown at the top.

Back to homepage