Privacy Policy

Last updated: September 2026 · Potentorix is operated by Savaya Leads S.R.L.

1. Who we are

Potentorix is a brand operated by Savaya Leads S.R.L. (Romania) [TODO: CUI / Trade Register No. / registered address]. This policy explains how we process personal data in accordance with Regulation (EU) 2016/679 (GDPR).

2. What data we collect

Order data — name, email, shipping address, phone — collected by our payment processor Stripe when you place an order.
Email address — if you voluntarily submit it to claim a discount offer.
Technical data — a first-party cookie containing an anonymous click identifier used for order attribution, and standard server logs (IP, user-agent).

3. Why we process it

To fulfil and deliver your order (performance of contract, Art. 6(1)(b) GDPR).
To measure marketing performance via an anonymous click ID (legitimate interest, Art. 6(1)(f)).
To send you the discount you requested (consent, Art. 6(1)(a)) — you may withdraw at any time.

4. Cookies

We set one functional first-party cookie (ptx_clickid, 30-day lifetime) used solely to attribute your order to the advertising partner who referred you. It contains no personal information. Language preference and discount status are stored in your browser's local storage.

5. Data sharing

Payment data is processed by Stripe Payments Europe, Ltd. (PCI-DSS Level 1). Shipping data is shared with our fulfilment and courier partners solely for delivery. We do not sell personal data.

6. Retention

Order data is kept for the period required by Romanian accounting and tax law. Marketing emails are kept until you unsubscribe. Click identifiers expire after 30 days.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability, and objection (Art. 15–21 GDPR). Contact support@potentorix.com. You may also lodge a complaint with ANSPDCP (dataprotection.ro) or your local supervisory authority.