Last updated: 2 May 2025
1. Who we are
INTERNATIONAL DIGITAL RETAIL S.R.L.
Reg. No.: J40/15475/2023 | VAT ID: RO48660664
Address: Str. Povestei 10, Sector 4, Bucharest, Romania
E-mail: [email protected]
2. Scope
This Privacy Policy explains how Express5PL (“we”, “our”, “us”) collects, uses, shares and safeguards personal data when you visit express5pl.com or interact with our services. It applies to visitors from the European Union (GDPR), the United States (including CCPA/CPRA) and any other region.
3. What data we collect
Category
Details
Identity data
Name
Contact data
E-mail address, phone number
Technical data
IP address, browser & device information, cookies
Message content
Information you provide in contact forms or live-chat
We do not intentionally collect special-category (sensitive) data.
4. How we collect data
Source
Method
Contact forms (Contact Form 7)
Direct submission by the user
Newsletter opt-in
Voluntary subscription
Analytics & cookies
Google Analytics, Google Tag Manager, Google Maps, WP Go Maps
Security / anti-spam
Google reCAPTCHA, server logs
APIs & integrations
HubSpot, Telegram API
5. Why we process data (legal bases)
Purpose
Legal basis (GDPR Art. 6)
Typical retention
Respond to enquiries & provide services
Legitimate interest / Contract
24 months after last interaction
Fulfil orders & logistics
Contract
7 years (tax & accounting)
E-mail marketing (newsletter)
Consent (opt-in)
Until you unsubscribe
Web analytics & site improvement
Legitimate interest
26 months in Google Analytics
Security, fraud & spam prevention
Legitimate interest
12 months
You may withdraw consent at any time (see §8).
6. Cookies & similar technologies
We use functional, analytical and security cookies. Detailed information—including categories, retention periods and opt-out options—is provided in our separate Cookie Policy, which forms part of this Privacy Policy.
7. Sharing with third parties
Provider
Purpose
Location & safeguards
Google LLC (Analytics, Tag, Maps, reCAPTCHA)
Analytics, maps, anti-spam
EU & US servers, SCCs + IP-anonymization
HubSpot Inc.
CRM & marketing automation
EU data center, SCCs
Telegram API
Real-time form notifications
Encrypted transport
Vultr (EU data center)
Website hosting
ISO 27001 compliant
We do not sell personal data.
8. Your rights
GDPR / CPRA right
How to exercise
Access, rectification, deletion
E-mail us at [email protected]
Data portability
Request a copy in CSV/JSON
Restrict or object to processing
Contact us; we will respond within 30 days
Opt-out of marketing
Click “Unsubscribe” in any newsletter
California only – “Do Not Sell or Share”
We do not sell data, but you may still e-mail us to confirm
9. International transfers
Data are stored on Vultr (EU) servers; limited transfers to the USA (Google, HubSpot) rely on Standard Contractual Clauses and additional safeguards (TLS, data-minimisation).
10. Security
We use HTTPS, firewalls, routine server updates, Wordfence, reCAPTCHA and strict access controls to protect data.
11. Retention
We keep data only as long as necessary for the purposes stated in §5 or to comply with legal obligations. Back-ups are purged on a rolling 30-day cycle.
12. Minors
Our website and services are not targeted at individuals under 16 years of age. We do not knowingly process children’s data. Parents may contact us to delete any such information.
13. Changes to this policy
We may update this Privacy Policy. Material changes will be announced on this page at least 7 days before they take effect. Last revision date is indicated at the top.
14. Contact
For any privacy-related questions or requests, please e-mail [email protected] or write to the postal address in §1. We will respond within 30 days.
