Privacy policy

1. This website (consentl.com)

Last updated: 2026-10-23

Who is responsible

STL EMBEDED CREATIONS SRL, Str. Kovari 75, 400217 Cluj-Napoca, Cluj, Romania; trade register no. J2020001305120; fiscal code (CUI) 42512332. Contact for privacy matters: [email protected]. We have not appointed a data protection officer.

Scope

This notice covers visits to the website consentl.com (also reached through www.consentl.com and consentl.eu). It does not cover:

• the Consentl app for Shopify, which has its own privacy policy;
• the Consentl dashboard at app.consentl.com and the public Consentl API used by the platform plugins on our customers' websites: see the privacy policy for websites;
• websites of third parties that we link to (for example the Shopify App Store).

What happens when you visit this website

The website consists of static pages. It does not use cookies, local storage or similar technologies, analytics, advertising or social media plugins, and it does not load fonts, scripts or images from other providers. It has no user accounts; its only form is the legal document generator (see "Legal document generator preview" below).

When your browser requests a page or a download, our hosting provider necessarily processes the technical data of that request. The same applies when a WordPress site that uses our plugin asks this website for a new plugin version (about twice a day; the request comes from that site's server and contains no site address or key):

We do not use this data to identify you, do not combine it with other data and do not create profiles. Nothing is stored on or read from your device, so no consent under the ePrivacy rules is needed and the website shows no cookie banner (see https://consentl.com/cookies).

Legal document generator preview

On the page https://consentl.com/legal-document-generator you can answer questions about your business and see a preview of the legal documents Consentl would generate. Your answers stay in the page: nothing is stored on your device, and reloading the page clears them. When you ask for the preview, your browser sends the answers you entered to our Consentl service (https://api.consentl.com, on DigitalOcean servers in Frankfurt, Germany), which uses them only to build that preview and returns it. The answers are not stored, logged or used for anything else, and they are not linked to a Consentl account. If they contain personal data (for example your name as a sole trader or a contact e-mail address), the legal basis depends on why you use the preview: if you use it to prepare a purchase of the documents, it is the steps you ask for before entering into a contract, Art. 6(1)(b) GDPR; if you only try out the generator without a purchase in view, it is our legitimate interest in showing you the preview you asked for, Art. 6(1)(f) GDPR.

To protect the service against misuse, the service uses your IP address to limit the number of previews per address. The address is held only in the server's memory and is never written to a log or a database; an entry can remain in memory after its limit window until the table is cleaned up or the server restarts (legitimate interest in a secure service, Art. 6(1)(f) GDPR). Our hosting provider processes the technical data of the request as described above.

Hosting and recipients

The website is hosted by DigitalOcean, LLC (New York, USA) as a static site on DigitalOcean's content delivery network, which DigitalOcean operates with Cloudflare, Inc. (USA), under a data processing agreement. Requests are answered by the edge location nearest to you, which can be outside the EU. Transfers are covered by the EU Standard Contractual Clauses in DigitalOcean's data processing agreement. See the sub-processor list for details.

E-mail

If you write to us, we use your e-mail address and your message to answer you (performance of a contract or steps before one, Art. 6(1)(b) GDPR, or our legitimate interest in answering enquiries, Art. 6(1)(f)). We keep the correspondence for 3 years after the enquiry is closed: we review our mailboxes once a year and delete correspondence closed more than 3 years before, unless we need it longer to establish or defend legal claims. Our consentl.com mailboxes are hosted by Proton AG (Switzerland, which has an EU adequacy decision).

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to receive data you gave us on the basis of consent or a contract in a machine-readable format (Art. 20) and to object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21). Write to [email protected].

We do not make automated decisions with legal or similarly significant effects about you (Art. 22 GDPR). You do not have to give us any data to read this website. If you write to us, we need your e-mail address to answer.

You can also lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. Our competent authority is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, 010336 București, Romania — www.dataprotection.ro (external site).

Changes

We update this notice when the website changes and change the "Last updated" date above.

2. Consentl for websites (dashboard and plugins)

How we process personal data in the Consentl dashboard at app.consentl.com, in the Consentl service that the website snippet and the platform plugins use, and for billing is described in a separate policy: Consentl for websites — privacy policy.