01 / Who we are
NOT MORE. is a brand of NOTMORE SRL. The registered office, Trade Register number and tax identification number (CUI) will be added here as soon as they are available.
NOT MORE. operates the website notmore.studio and is the controller of the personal data described in this notice. The domains notmore.ro and not-more.com redirect to notmore.studio and are covered by the same notice.
For any question about your data or to exercise your rights, write to hello@notmore.studio. We have not appointed a data protection officer, as we are not required to; requests sent to this address are handled by the person responsible for data protection.
02 / What data we collect
Providing your data is voluntary. The short contact form requires your name, email address, company and message. If you choose the detailed form, additional context fields are required; optional fields are marked. Booking a call requires your name, email address, a short description of what you would like to discuss, and your selected date, time and call length. The website or company field is optional. Without the required information, we cannot process the form or schedule the call.
If a colleague or your organization gives us your contact details for a collaboration, we use them only for that collaboration, for the purposes and on the legal bases described below.
We do not ask for special categories of data (such as health data). Please do not include them in forms or messages.
- Start Here form: your name, email, company, role and, in the detailed version, optional phone number and website, plus the context you choose to share (situation, objective, timing, indicative budget, constraints and how you heard about us).
- Booking a call: your name, email, optional website or company, what you would like to discuss, the chosen date, time, length and time zone, and the language of the page.
- Emails and messages: the content of what you send us at hello@notmore.studio or through our social media profiles, and our replies.
- Collaboration: contact details of the people we work with, project information and the billing details needed for contracts and invoices.
- Technical and security data: IP address, browser type, requested pages and timestamps, processed by our hosting provider to deliver and protect the website.
- Analytics and advertising data, only with your consent: pages visited, interactions, device and browser type, approximate location derived from the IP address, campaign parameters, ad click identifiers and cookie identifiers.
03 / Why we use it and on what legal basis
We do not send newsletters or marketing emails without your separate consent. We do not sell personal data.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Every request is read by a person.
| PURPOSE | LEGAL BASIS (GDPR) |
|---|---|
| Reading and replying to your request or message | Steps taken at your request before a possible contract, art. 6(1)(b); our legitimate interest in replying to business inquiries, art. 6(1)(f) |
| Scheduling the call you book and sending the invitation | Steps taken at your request, art. 6(1)(b) |
| Delivering the services we agree on, invoicing and managing the collaboration | Performance of a contract, art. 6(1)(b) |
| Keeping accounting and tax records | Legal obligation, art. 6(1)(c) |
| Protecting the website, forms and booking against abuse | Legitimate interest in security, art. 6(1)(f) |
| Measuring how the website is used (analytics) | Your consent, art. 6(1)(a) |
| Measuring campaigns, attribution and remarketing (advertising) | Your consent, art. 6(1)(a) |
| Defending or exercising legal claims | Legitimate interest, art. 6(1)(f) |
04 / Who processes data for us
We share data only with providers that help us run the website and the business, under data processing agreements, and only to the extent they need:
- Cloudflare (hosting, content delivery, security and the database that stores form submissions). Cloudflare Turnstile checks that the contact and booking forms are sent by a person, using technical signals from the browser and the device, such as the IP address. It is used only for security, not for advertising.
- Cal.com (scheduling the calls booked on the website, calendar invitations and reminder, reschedule and cancellation emails).
- Resend, which delivers to our team an email notification with the details you send through the contact form.
- Our email and calendar provider, for the messages and meetings that follow your request.
- Google, with your consent: Google Analytics 4, Google Tag Manager and Google Ads. Google Search Console gives us aggregated search statistics that do not identify visitors.
- Meta Platforms, with your consent: the Meta Pixel, for measuring and improving Facebook and Instagram campaigns.
- Other advertising platforms listed in the cookie notice, only if we activate them and only with your consent.
- Professional advisers (such as an accountant or lawyer) and public authorities, where the law requires it or to defend legal claims.
05 / Our social media profiles
We have profiles on LinkedIn, Instagram and X. When you visit or interact with them, the platform processes your data under its own privacy policy.
For the aggregated statistics some platforms provide about visits to our profiles (for example LinkedIn, and Meta for Instagram), we may be joint controllers with that platform, under the arrangement it publishes. We see only aggregated statistics, not who visited. You can exercise your rights directly with the platform or by writing to us; where the platform is responsible, we forward your request.
06 / Transfers outside the EEA
Some providers (such as Google, Meta, Cloudflare, Cal.com and Resend) are based in or may process data in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, where the provider is certified, or on the Standard Contractual Clauses approved by the European Commission, with additional safeguards where needed.
You can ask us at hello@notmore.studio for more information about the safeguards that apply.
07 / How long we keep data
| DATA | RETENTION |
|---|---|
| Requests and messages that do not lead to a collaboration | Up to 24 months from the last contact, then deleted |
| Booked calls | Up to 24 months after the call, unless a collaboration follows |
| Collaboration and contract data | For the duration of the collaboration and the limitation period for legal claims |
| Accounting and tax documents | For the periods required by Romanian accounting and tax law |
| Analytics data (Google Analytics 4) | 14 months |
| Advertising cookies | As listed in the cookie notice, at most 13 months |
| Your cookie choice | Stored in your browser for up to 180 days, or until you change it or clear your browser storage |
08 / Your rights
Write to hello@notmore.studio. We reply within one month, which can be extended by two further months for complex requests; we will tell you if that happens. We may ask for information to confirm your identity.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro, or with the authority in the EU country where you live or work.
- Access: ask for a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your data, where the legal conditions apply.
- Restriction: ask us to limit how we use your data in certain situations.
- Portability: receive the data you gave us in a structured, commonly used format.
- Objection: object to processing based on our legitimate interests.
- Consent: withdraw your consent at any time, for example from Cookie settings in the footer, without affecting processing carried out before.
09 / Security, minors and changes
We use appropriate technical and organizational measures, including encrypted connections, restricted access and providers with recognized security practices. No online system can guarantee absolute security; if a breach affects your rights, we will inform you and the authority as the law requires.
The website is intended for businesses and professionals and is not directed at children under 16.
We update this notice when our services, providers or legal requirements change. The date at the top shows the current version; for significant changes, we will make them visible on the website.