1. Data controller
The controller of personal data processed through business-simplify.ro is BUSINESS SIMPLIFY SRL, with its registered office at Str. XIII no. 1, room 5, Șag, Timiș County, Romania, unique registration code 40407209, registered with the Trade Register under no. J35/143/2019.
For privacy questions and requests, email contact@business-simplify.com. This policy applies to the public website and enquiries sent through the form or by email; separate services or products may provide their own privacy information.
2. Data we may process
Contact form data
Full name, email address, telephone number, company name if provided, preferred contact time, indicative budget range and the objective or message submitted.
Direct communications
Your email address, message content and metadata, together with information you choose to provide during the discussion.
Technical data
IP address, user agent, requested URL, date and time, error and security information, where recorded by the server and infrastructure.
Measurement data
Pages viewed, interactions and events such as a server-confirmed form submission or an email click, under the conditions described below.
3. Purposes and legal bases
Responding to enquiries
We use form and communication data to reply, understand the need and take pre-contractual steps at your request — Article 6(1)(b) GDPR.
Professional relationship and records
We may retain communications needed for continuity, security, abuse prevention and the defence of rights — legitimate interests, Article 6(1)(f) GDPR.
Legal obligations
We process data where required by legal, tax or accounting duties or a valid authority request — Article 6(1)(c) GDPR.
Optional measurement
Optional analytics or advertising cookies and technologies are enabled after you select Accept — consent, Article 6(1)(a) GDPR. You may withdraw it at any time through Measurement preferences.
4. Contact form
Fields marked * are required to understand and answer the enquiry. The form cannot be submitted without them. Company name, preferred time and indicative budget are optional. A preferred time is not a confirmed appointment.
Form data is sent to our contact endpoint and through the email service used to manage the enquiry. Your message, name, email, telephone number, budget and other form fields are not sent to measurement tools. A technical generate_lead event may be emitted only after the server confirms that the form was sent.
5. Cookies and measurement
The website uses strictly necessary storage to remember your measurement choice and operate essential elements. It cannot be disabled through the preferences panel because it is needed to remember that choice.
Google Tag Manager manages the Google Analytics 4 and Meta Pixel integrations. The OpenAI Ads Measurement Pixel is loaded separately after consent. If you accept, these services may use cookies or identifiers for statistics, attribution and contact measurement. If you decline, optional cookies are not enabled and are removed where the website can control them.
Under advanced consent mode, Google may receive limited cookieless signals for statistics and modelling when optional measurement is declined. These signals do not include data entered in the form. You may change your choice at any time through the Measurement preferences button in the footer.
6. Recipients
Access is limited to what is necessary for the purposes above. We may use these categories of recipients:
Hosting and email
Providers that host the website, process the technical request and deliver messages to our mailbox.
Measurement and advertising
Google, Meta and OpenAI, only for the signals and technologies described above and according to your measurement choice.
Professional providers
IT, security, accounting or advisory providers that require access for a specific task and are subject to applicable duties.
Authorities and courts
Where disclosure is required by law, necessary for proceedings or needed to protect our rights or those of another person.
7. International transfers
Some technology providers may process data outside the European Economic Area. Such transfers must rely on a GDPR-recognised mechanism, such as an adequacy decision, standard contractual clauses and, where required, supplementary safeguards. Details for each provider are available in its privacy documentation.
8. Retention
We retain contact data for as long as needed to answer and manage the enquiry, and afterwards only where there is a relationship, legal obligation, documented legitimate interest or need to establish, exercise or defend a legal claim. Data is deleted or anonymised when the purpose and applicable periods expire.
Technical logs are kept as long as needed for security and diagnostics. Measurement-platform data is retained according to provider settings and policies, without exceeding what is necessary for the purpose. Your measurement choice remains in the browser until you change it, clear browser data or the storage expires under the technical configuration.
9. Your rights
Subject to the GDPR, you may request:
Send your request to contact@business-simplify.com. We may ask for additional information strictly to verify identity. We normally respond within one month, subject to the extensions allowed by the GDPR.
If you believe your rights have not been respected, you may complain to the Romanian National Supervisory Authority for Personal Data Processing through www.dataprotection.ro, or bring a claim before the competent courts.
Access and a copy
Confirmation of processing and a copy of the personal data relating to you.
Correction or deletion
Correction of inaccurate data and deletion where the legal conditions are met.
Restriction and objection
Restriction of processing or objection to processing based on legitimate interests, depending on the circumstances.
Portability and withdrawal
Receipt of applicable data in a structured format and withdrawal of consent without affecting prior lawful processing.
10. Automated decisions, security and updates
We do not use data collected through this website for solely automated decisions that produce legal or similarly significant effects. Measurement tools may perform statistical modelling or attribution under their own functionality, but this does not decide whether we accept an engagement.
We apply proportionate technical and organisational safeguards, although no internet-connected system can guarantee absolute security. If you notice a problem, email contact@business-simplify.com.
We update this policy when practices, providers or legal requirements change. The current version is published on this page. Last updated: 2 October 2026.
11. AI assistant
Text and voice use the same native ElevenLabs AI agent, with GPT-4.1 nano for replies; its portrait is a fictional illustration, not a team member. When you choose to use it, your messages and the history needed to answer are processed by ElevenLabs and the configured AI provider. Transcript retention at ElevenLabs is configured to 7 days; this does not guarantee the absence of all provider logs. Do not enter sensitive data. Replies may be inaccurate and should be checked before important decisions.
Before the first AI reply, we require your name, email address and mobile number to manage and follow up on your enquiry. The number is not verified by SMS or an OTP code. Contact details are kept on the server, accessible to the team in the protected dashboard and conversation emails; they are not stored in cookies, sent separately to ElevenLabs or the AI provider, or sent to measurement tools. Information you write in messages, including personal data, may reach ElevenLabs and the configured AI provider. Processing to reply and take pre-contractual steps at your request follows the basis in section 3; it is not consent to marketing.
For access to local history, the chat uses a strictly necessary cookie containing an opaque identifier, with HttpOnly, Secure and SameSite=Strict, valid for 30 days and renewed when used. This cookie does not keep the agent connection or active context alive for 30 days. Messages and contact details remain on the server. Deleting or expiring the cookie breaks browser access to the previous conversation without automatically deleting the internal archive. Closing the window is remembered separately for 12 hours, without messages or contact details in that cookie.
The conversation is kept in our internal dashboard, with protected team access. When it ends or after 30 minutes of inactivity, a transcript is prepared for email to the team. An inactivity notification does not erase history or extend the provider connection. You can continue the same discussion only while the native agent connection is active, within the 5-minute duration limit. New messages may produce an updated transcript. Messages and the contact profile are not sent to measurement tools.
If you explicitly end the discussion, reach the message limit, lose the provider connection or reach the maximum duration of 5 minutes, the current conversation closes safely. Its history remains visible while the cookie is valid and the archive is available. You can start a new conversation with a new context; this does not resume the previous workflow or delete the previous conversation’s archive. When the 30-day access period expires, any unsent transcript is prepared for the team.
Conversations are kept in our system without automatic deletion after a fixed period. The team can manually archive and unarchive a conversation while preserving its transcript and contact details. Permanent deletion requires an explicit manual action in the dashboard and does not remove copies in the mailbox or backups; the criteria in section 8 apply to these. For requests concerning your data, email contact@business-simplify.com.
Anca, the AI voice assistant, processes audio conversations through ElevenLabs, using an AI model for replies. The avatar is fictional. Your microphone is accessed only after you explicitly start the call and allow access in your browser. We do not store raw audio recordings on our server; agent audio recording is disabled in ElevenLabs, and provider transcripts have a configured retention period of 7 days. These settings do not guarantee the absence of all provider logs. The text transcript is kept in the same protected dashboard and team emails, under the conversation retention rules described above. Voice uses a separate strictly necessary bs_voice cookie containing an opaque identifier, with HttpOnly, Secure and SameSite=Strict, valid for 30 days; contact details remain on the server and are not sent separately to ElevenLabs.