Privacy Policy

Last updated: November 2, 2024

Introduction

This Privacy Policy explains how Futurewave Technologies SRL ("we," "us," "our," or "BabyValid") collects, uses, and protects your personal information when you use BabyValid.com (the "Service"). We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

Definitions

For the purposes of this Privacy Policy:

• Personal Data: Any information capable of identifying you directly or indirectly
• Usage Data: Data collected automatically through the use of the Service
• Cookies: Small files placed on your device
• Data Controller: Futurewave Technologies SRL, responsible for determining the purposes and means of processing Personal Data
• Data Protection Officer: The individual responsible for overseeing data protection strategy
• User: Any individual accessing or using the Service
• Device: Any device accessing the Service

Information We Collect and How We Use It

1. Information You Provide Directly

When you use our Service, you may provide:

• Email address
• Name
• Message content
• Account preferences
• Payment information
• Profile information
• Communication preferences

We use this information to:

• Create and manage your account
• Process payments and transactions
• Provide customer support
• Send newsletters and updates
• Respond to inquiries
• Personalize your experience
• Fulfill service requests
• Process orders and returns
• Administer promotions and contests
• Enable user-to-user communications
• Prevent fraudulent transactions
• Monitor service performance

2. Information Collected Automatically

Our system automatically collects:

Device Information

• Operating system and version
• Device type and model
• Browser type and version
• Screen resolution
• Language preferences
• Mobile device identifiers

Connection Data

• IP address (anonymized in compliance with GDPR)
• Access times and dates
• Connection duration
• Network information
• ISP details
• Referral source

Usage Data

• Pages visited and interaction
• Features used
• Click patterns
• Session duration
• Navigation paths
• Error reports
• Performance metrics

We use this data to:

• Improve our Service
• Analyze usage patterns
• Detect technical issues
• Enhance security
• Optimize performance
• Generate statistical insights
• Personalize content
• Monitor service health

3. Data Storage and Processing Location

Our primary data processing activities take place in:

• Voluntari, Ilfov, Romania
• EU-based data centers
• Approved third-party locations with adequate data protection measures

Contact and Data Protection Officer

The Party responsible for the processing of your personal data is as follows: Futurewave Technologies SRL. The Data Controller may be contacted as follows:

• contact@babyvalid.com;
• Bulevardul Pipera 1/i Constructia C2, 11/3, Voluntari, Ilfov, Romania, 077190

The Data Controller and operator of the Service are one and the same.

Our Data Protection Officer is:

• Name: Ana-Andreea Dumitrescu
• Email: contact@babyvalid.com
• Address: Bulevardul Pipera 1/i Constructia C2, 11/3, Voluntari, Ilfov, Romania, 077190

Third-Party Services and Data Sharing

1. Analytics Services

We use Google Analytics 4 with:

• IP anonymization enabled
• Data retention set to 14 months
• Sharing with Google disabled
• Advertising features disabled

2. Data Storage Services

We use Supabase for:

• Secure data storage
• Newsletter management
• Contact form processing
• Database operations

3. Other Third-Party Service Providers

We may share data with providers for:

• Payment processing
• Email delivery
• Customer support
• Hosting services
• Security services

All third-party providers must:

• Comply with our privacy standards
• Process data only as instructed
• Maintain adequate security measures
• Honor data protection agreements

Data Security Measures

We implement comprehensive security measures including:

Technical Measures

• End-to-end encryption (AES-256)
• SSL/TLS secure connections
• Firewalls and intrusion detection
• Regular security audits
• Automated threat monitoring
• Secure backup systems

Organizational Measures

• Access control policies
• Employee training programs
• Data handling procedures
• Incident response plans
• Regular security assessments
• Compliance monitoring

Your Data Protection Rights

GDPR Rights

You have the right to:

1. Access your personal data
2. Rectify inaccurate data
3. Erase your personal data
4. Restrict processing
5. Port your data
6. Object to processing
7. Withdraw consent

CCPA Rights

California residents have the right to:

• Know what personal information is collected
• Delete personal information
• Opt-out of data sales
• Non-discrimination for exercising rights

Cookies and Tracking

Types of Cookies We Use

1. Strictly Necessary Cookies

   • Essential for website function
   • Cannot be disabled
   • No personal data storage
   • Session-based only

2. Functionality Cookies

   • Remember preferences
   • Improve user experience
   • Can be disabled
   • Duration: up to 1 year

3. Analytics Cookies

   • Anonymous usage tracking
   • Performance monitoring
   • Can be disabled
   • Duration: 14 months maximum

Cookie Management

You can:

• Use our consent tool
• Modify browser settings
• Delete existing cookies
• Opt-out of tracking

Communication Preferences

Marketing Communications

• Opt-in required for marketing
• Clear unsubscribe options
• Frequency controls available
• Content preference settings

Service Communications

• Essential updates
• Security alerts
• Account notifications
• Technical support messages

Data Retention and Deletion

We retain your data:

• As long as necessary for service provision
• As required by law
• Until you request deletion
• According to our retention schedule

International Data Transfers

We ensure appropriate safeguards through:

• EU Standard Contractual Clauses
• Adequate data protection measures
• EU-US Data Privacy Framework compliance
• Regular transfer impact assessments

Acceptance of Risk

By using our Service, you acknowledge:

• No internet transmission is 100% secure
• We implement best-practice security
• You transmit data at your own risk
• We cannot guarantee absolute security

Changes to This Policy

We may update this policy:

• With 30 days notice for major changes
• With immediate effect for minor changes
• With email notification to users
• With website announcements

Contact Information

For privacy-related inquiries:

• Email: contact@babyvalid.com
• Address: Bulevardul Pipera 1/i Constructia C2, 11/3, Voluntari, Ilfov, Romania, 077190

EU Representative:

• Name: Ana-Andreea Dumitrescu
• Email: contact@babyvalid.com

Legal Disclaimer

Our services are for informational purposes only. Futurewave Technologies SRL does not provide medical advice, diagnosis, or treatment.

Effective Date: November 2, 2024