This policy explains what personal data BetterBuyBase collects, why, the legal basis for it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Romanian data-protection law. We collect as little as possible and we never sell your personal data.

Who is responsible for your data

The data controller for this site is:

Ciprian Jitaru

B-dul Bucureștii Noi, 136, et. Parter, ap. 5, Sector 1, București, Romania

Email: contact@betterbuybase.com

What we collect, why, and our legal basis

• Reviews — when you sign in with Google to leave a review, we receive your name, email address and Google account user ID (we do not receive or store your profile photo). Your display name — not your email — appears publicly next to your review. We use this to attribute, publish and moderate reviews; you can ask us to edit or remove your review at any time. Reviews are checked before they appear. Legal basis: your consent and the performance of the review service you request.
• Price-drop alerts — the email address you provide, so we can notify you. Legal basis: your consent. You can unsubscribe from any alert email at any time.
• Contact & product-suggestion forms — your name, email and message, so we can reply and act on your request. Legal basis: your consent and our legitimate interest in responding to enquiries.
• Security & anti-spam — your IP address and bot-check signals (via Cloudflare Turnstile) to protect the forms and the site from abuse. Legal basis: our legitimate interest in keeping the service secure.
• Site security (Wordfence) — we use Wordfence Security, provided by Defiant, Inc., to help protect the website against malicious traffic, unauthorized access, brute-force login attempts, malware and other security risks. For this purpose, Wordfence may process technical and security-related data such as IP addresses, browser and user-agent information, request data, login and security events, and firewall activity. Legal basis: our legitimate interest in keeping the website secure and preventing abuse.

Who we share it with

We use a small number of trusted processors to run the site: Bluehost (hosting; our contact replies and price-alert emails are sent from our own server, not a separate email-marketing provider), Google for the optional Google sign-in used to post reviews, Cloudflare (the Turnstile bot-check that protects our forms), CookieYes (cookie-consent management), and Amazon and other affiliate networks that attribute purchases made through our links. Each processes data under its own terms and only as needed for that feature. We do not sell your data or share it for unrelated advertising.

We also use Defiant, Inc. as a security processor: its Wordfence Security service filters malicious traffic and blocks attacks before they reach the site, processing the security data described above solely for that purpose.

International transfers

Some of these providers may process data outside the European Economic Area. Where they do, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

This includes Defiant, Inc. (Wordfence), which processes security data in the United States and offers the European Commission’s Standard Contractual Clauses as a safeguard for such transfers.

How long we keep it

We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it. In practice: reviews are kept while they remain published and are removed on request; price-alert emails are kept until you unsubscribe or the alert is discontinued; and contact and product-suggestion messages are kept for up to 12 months after your enquiry is resolved. Where the law requires us to retain certain records for longer, we keep them only for that required period.

Security logs collected by Wordfence are kept for up to 30 days, and only as long as necessary for website protection, troubleshooting, abuse prevention and security investigations.

Cookies

We use only a small number of cookies — to remember your consent choice, to keep our forms secure, and (if you choose to) to sign you in to post a review. We run no analytics or advertising cookies of our own. Non-essential cookies are only set with your consent, gathered through our consent banner, which you can reopen at any time to review or change your choice. See our cookie policy for the full list and how to control them.

Your rights

Under the GDPR you have the right to access your data; to have it corrected or erased; to restrict or object to its processing; to data portability; and to withdraw consent at any time (without affecting processing already carried out). To exercise any of these, email contact@betterbuybase.com and we will respond within one month.

Right to complain

If you believe we have mishandled your data, you can lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at www.dataprotection.ro — or with the authority in your own EU country.

Children

The site is intended for general audiences and is not directed at children under 16. We do not knowingly collect their data.

Contact

Questions about privacy or your data? Email us at contact@betterbuybase.com.

We keep this policy up to date as the site evolves. It is written to reflect our actual practices but is not a substitute for tailored legal advice.