Privacy Policy

Last updated: 5 November 2026

This policy explains how personal data is processed through confussius.com, including browsing, correspondence and the website’s commercial functions.

1. Who is responsible for your data

The data controller is Eduard Scarlat, administrator of the Confussius editorial project. For questions or requests concerning your personal data, contact contact@confussius.com.

2. Data processed

  • Contact: your name, email address, subject and message, the choice recorded in the form and technical information associated with submission, such as the date, IP address and browser information.
  • Browsing and security: IP address, device and browser information, pages visited, access times, referral sources and usage events, depending on the tool used.
  • Orders and accounts: for existing orders or an active commercial offering, data may include your name, email, billing information, products, order value and status, transaction identifiers, and delivery or download records. Public account registration is currently disabled.

Editorial content can be read without creating an account. Required form fields are marked; without the necessary information we may be unable to respond. Please limit messages to relevant information and avoid sending sensitive data or other people’s personal information.

3. Purposes and legal grounds

  • Responding to messages: consent given through the form where requested, or our legitimate interest in handling correspondence initiated by you; for commercial enquiries, precontractual steps requested by you. The grounds are Article 6(1)(a), (f) or (b) GDPR, depending on the enquiry.
  • Orders and delivery: performing a contract or taking precontractual steps; where records are required by law, compliance with a legal obligation — Article 6(1)(b) and (c).
  • Operation, spam prevention, backups and legal claims: our legitimate interest in protecting the website, correspondence and service continuity — Article 6(1)(f).
  • Analytics and advertising using non-essential technologies: consent where required — Article 6(1)(a). Visiting the website does not itself constitute consent to these technologies.

Sending a message does not subscribe you to a newsletter. No active newsletter subscription form is currently configured.

4. What happens to messages

Forms are managed through Contact Form 7. Messages are emailed to the project and stored in WordPress through Flamingo. FluentSMTP handles sending and email logs. WP Armour uses a honeypot spam check. Correspondence and technical records are accessible to the administrator and the technical providers involved, within the scope of their services.

5. Statistics, Google and Meta

WP Statistics produces local website usage statistics. IP anonymisation and hashing are enabled in the configuration checked. These measures reduce direct identification; a hashed identifier does not automatically make all associated data anonymous.

Google Analytics, through Site Kit, is connected and Google code is inserted into the website. Interaction and conversion measurement features are enabled. These may process online identifiers, technical information, pages and browsing events. Search Console and PageSpeed Insights support the administration of website visibility and performance.

Meta Pixel is present on the pages checked and sends page view events to Meta. It may associate website activity with online identifiers or a Meta account and may be used to measure advertising and create audiences.

These integrations are separate from local statistics. Their inclusion in this policy describes the functions identified and does not constitute your consent to tracking. Provider information: Google and Meta.

6. Cookies and choices

WordPress, WooCommerce and Polylang may use cookies for authentication, basket functionality, sessions and language preferences. Google and Meta may use cookies or similar technologies for analytics and advertising. Storing or accessing non-essential information on your device requires prior consent where required by law.

You can control or delete cookies in your browser and use Google and Meta privacy settings. Blocking cookies may affect login, basket functionality or saved preferences. Browser settings do not replace the website’s consent obligations.

7. Providers and international transfers

Data may be accessible to hosting and email provider Hostinger, backup storage providers including Google Drive, and Google and Meta for the functions described above. Backups may contain the database and messages stored in it.

WooPayments is active in the configuration checked; information needed to authorise a payment is processed by the payment provider used at checkout under its own terms. This policy also covers previous order records, including when a product is withdrawn from sale.

Some providers may process data outside the European Economic Area. The applicable mechanism depends on the provider, service and destination and may include an adequacy decision or standard contractual clauses. Google describes its mechanisms in its transfer information. Contact us for information about recipients and safeguards applicable to your data.

8. Retention

Retention depends on the purpose and data category:

  • messages and associated logs are retained as needed to resolve the enquiry and follow up on correspondence; in a dispute, until resolution and expiry of the relevant legal periods;
  • order data and financial records are retained to meet contractual obligations and for the periods required by applicable law;
  • technical and statistical data is retained according to tool settings and security and analysis needs;
  • backup copies are replaced through backup rotation; deletion from the current system does not immediately remove all earlier copies.

The configuration checked does not set a single automatic deletion period for all messages and WooCommerce data. Deletion requests are assessed individually, considering necessity and legal obligations.

9. Your rights

Subject to GDPR conditions, you may request access, correction, deletion, restriction and portability of your data. You may object to processing based on legitimate interests and, at any time, to direct marketing. Where consent is the legal ground, you may withdraw it without affecting earlier lawful processing.

Send requests to contact@confussius.com. We may request proportionate information to verify your identity. We normally respond within one month; any extension permitted by law will be explained and communicated.

You may complain to Romania’s National Supervisory Authority for Personal Data Processing or the competent authority where you live or work.

10. Security and updates

The website uses HTTPS, restricted administrative access, spam protection and backups. No storage or transmission method provides absolute security. External links take you to services with their own data processing rules.

This policy is updated when processing activities or services change. The date above identifies the published version.