Privacy Notice
How Clarelio uses your personal data
Version v1, 9 October 2026 (text ID PN-v1-2026-10-09)
In short
- We use your details only to answer you, prepare your estimate or quote, deliver and fit your order, and meet the law.
- We send you offers by email only if you tick the box for it. You can stop at any time.
- Our suppliers see technical specifications only, never your name or contact details.
- Write to privacy@clarelio.com to see, correct or delete your data. We answer within 30 days.
1. Who is responsible for your data
Clarelio S.R.L., Str. Avram Iancu 8, et. 1, ap. 2B, 400098 Cluj-Napoca, Romania, company number (CUI) RO55038363, decides why and how your personal data is used. Under the EU General Data Protection Regulation (GDPR) it is the "controller".
For customers in Canada, 17541198 Canada Ltd., 530 Speers Rd, Oakville ON L6K 0K3, Canada, is the organisation responsible under the Canadian privacy law PIPEDA. The two companies share one privacy contact.
Privacy contact for both companies: privacy@clarelio.com.
2. What we collect, why, and on what legal basis
| When | What data | Why | Legal basis (GDPR) |
|---|---|---|---|
| You visit this website | Your IP address, date and time, pages requested and browser type, kept in the web server log. Your language choice, saved in your own browser. | To show the site, keep it secure and fix faults. | Our legitimate interest in running a secure website (Art. 6(1)(f)). |
| You send the contact, spec sheet or partner form | Name and email, your message. For the partner form also company, country, phone, type of business and website. The page and language you were on. | To answer your request. | Steps you ask for before a contract (Art. 6(1)(b)), or our legitimate interest in answering business enquiries (Art. 6(1)(f)). |
| You use the online estimate | Name, email, phone, company, login details (the password is stored only as a one-way hash), project address, window sizes and options, photos or drawings you upload, your estimate history, sign-in records (IP address and browser). | To prepare your estimate, manage your account and keep the service secure. | Steps before a contract and the service itself (Art. 6(1)(b)); security (Art. 6(1)(f)). |
| You order from us | Contact details, delivery and installation address, project details. | To deliver, install and support your order. | Contract (Art. 6(1)(b)). |
| We invoice and keep accounts | Name, address, tax details, amounts. | To meet tax and accounting law. | Legal obligation (Art. 6(1)(c)). |
| Warranty and service | The link between the product, the invoice and you, and service notes. | To honour the legal guarantee and our warranty. | Legal obligation and contract (Art. 6(1)(c) and (b)). |
| Offers and news by email | Your email address, the date, and the exact text you agreed to. | To send you offers and news about Clarelio products. | Your consent (Art. 6(1)(a)). The box is never ticked for you and you can withdraw at any time. |
| Business contacts (dealers, architects, installers) | Business name, work email, role. | To tell you about products for your business. Every message has an unsubscribe link. | Our legitimate interest (Art. 6(1)(f)), where the law allows it. |
| Disputes and legal claims | The records above, as far as needed. | To protect our rights. | Our legitimate interest (Art. 6(1)(f)). |
You do not have to give us any of this. Without the details marked as needed in a form, we cannot answer you or open an account. The offers box is always optional.
If you enter details of your own customers in the estimate (their name, email, phone, address), you must be allowed to do so and you must have told them. The Terms of Use say the same.
Please do not upload photos of people, vehicle plates or other personal items. Send only what the estimate needs.
3. Who receives your data
- Our staff, only those who need it for their work.
- Our installers and carriers, only for delivery and fitting (address and project details).
- Companies that work for us under a contract and only on our instructions: Microsoft (email and file storage), our web hosting provider (this website and the online estimate, servers in the European Union), our accountant and IT support.
- Our Canadian company, 17541198 Canada Ltd.: business contact details of dealers and business customers. The data of private customers is not shared between our two companies.
- Authorities and courts, when the law requires it.
- Meta (WhatsApp), only if you write to us there. Your messages are then also handled under WhatsApp's own terms. We keep customer chats to a minimum and move files into our project folders.
- Suppliers of profiles, glass and hardware: technical specifications only. They never receive your name or contact details.
- We do not sell your data and we do not pass it on for other companies' advertising.
- If you open a YouTube film from our site, YouTube (Google) receives your IP address and its own privacy policy applies. We load nothing from YouTube until you tap the film.
4. Transfers outside the European Union
Your data stays in the European Union as far as possible. Where it leaves:
- Business contact details of dealers shared with our Canadian company: the European Commission has decided that Canada gives an adequate level of protection to commercial organisations covered by PIPEDA.
- Microsoft: data is stored in the EU and Microsoft's data protection terms include the EU standard contractual clauses.
- YouTube (Google), only if you open a film: Google's own safeguards apply.
There are no other transfers. You can ask us for a copy of the safeguards at privacy@clarelio.com.
5. How long we keep your data
| Data | How long |
|---|---|
| Web server logs | Up to 3 months. |
| Contact, spec sheet and partner enquiries | 3 years after the last contact, then deleted or anonymised. |
| Online estimate account and its sign-in records | While in use. Switched off after 2 years without sign-in and anonymised 1 year later. |
| Quotes and estimates that did not become an order | 3 years after the last contact, then anonymised. |
| Orders, contracts and warranty documents | For the warranty period and 3 years after. |
| Invoices and accounting records | As tax law requires. In Romania at least 5 years, in Canada 6 years. |
| Offers and news (your consent) | Until you withdraw. After that we keep only a short record that you withdrew. |
| Records of your data requests and of security incidents | 5 years. |
When the time is over we delete or anonymise the data. We keep what the law makes us keep.
6. Your rights
- See the data we hold about you and get a copy.
- Have wrong data corrected.
- Have your data deleted. We must keep some records (for example invoices) because the law requires it, and we will tell you which.
- Limit how we use your data, or object to it, including when we rely on our legitimate interest.
- Receive the data you gave us in a common digital format.
- Withdraw your consent at any time. This does not affect what we did before.
Write to privacy@clarelio.com. It is free. We may ask you to confirm who you are. We answer within 30 days. If your request is complex we can take up to 60 more days, and we will tell you within the first 30 days.
You can complain to the Romanian data protection authority, ANSPDCP (B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucuresti, dataprotection.ro), or to the authority in the country where you live. In Canada you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).
7. Canada
For customers in Canada, 17541198 Canada Ltd. collects, uses and shares personal information for the purposes above, with your consent as PIPEDA requires. You can ask to see or correct your information at privacy@clarelio.com. If we cannot settle a concern, you can complain to the Office of the Privacy Commissioner of Canada.
8. Automated decisions
We do not make decisions about you by automated means that have legal or similar effects. The online estimate calculates a budget price from the sizes and options you enter. It does not assess you as a person.
9. Security
Our websites use encrypted connections (HTTPS). Estimate passwords are stored only as one-way hashes. The estimate is behind a personal login. Only staff who need the data can open it. If a data breach puts you at risk, we tell you and the authority within the legal time limit (72 hours for the authority).
10. Cookies
This website saves only your language choice in your browser. The online estimate uses a sign-in session and small screen preferences. We use no advertising, tracking or analytics cookies, so no cookie banner is needed. Details are on the Cookies page.
11. Children
Our websites and the online estimate are for adults and businesses. They are not meant for children.
12. Changes to this notice
When we change this notice we publish the new version here with a new version number and date. If the change affects how we use your data, we tell you directly. In the online estimate you are asked to accept a new version the next time you sign in.
Privacy Notice, version v1, 9 October 2026. Clarelio S.R.L., CUI RO55038363, Str. Avram Iancu 8, et. 1, ap. 2B, 400098 Cluj-Napoca, Romania. privacy@clarelio.com.