Legal & Compliance
CoreStackwebs — Key Commitments at a Glance
GDPR-compliant data handling. We collect only what is necessary for service delivery.
Fixed-price contracts with milestone-based payments. No hidden fees or surprise charges.
SSL encryption, encrypted databases, and OWASP-compliant security practices on all deployments.
Full refund before work begins. Pro-rated refund for incomplete milestones per contractual terms.
Sections
1 Privacy Policy
Effective Date: January 1, 2026
1.1 Data Controller
CoreStackwebs, registered at 900694, Str. Maior Gheorghe Murea nr. 4, Constanța, Romania ("we", "us", or "our"), is the data controller responsible for the processing of personal data collected through our website and services.
1.2 Data We Collect
We collect the following categories of personal data:
- Identity Data: Full name, email address, and phone number submitted via contact forms.
- Technical Data: IP address, browser type and version, operating system, and referral URLs collected automatically through server logs.
- Usage Data: Page visit timestamps, session duration, and page interaction patterns collected via essential analytics.
- Project Data: Technical specifications, project requirements, and business context shared during service engagement.
1.3 Purpose of Processing
Personal data is processed exclusively for:
- Responding to inquiries and delivering requested services.
- Executing contractual obligations under signed agreements.
- Maintaining system security and preventing fraudulent activity.
- Complying with applicable Romanian and EU legal obligations.
1.4 Legal Basis (GDPR Art. 6)
We process personal data based on: (a) Consent — when you submit a contact form; (b) Contractual necessity — for service delivery; (c) Legitimate interest — for website security and analytics; (d) Legal obligation — for tax and regulatory compliance.
1.5 Data Retention
Contact form data is retained for 24 months from last interaction. Contract-related data is retained for the duration of the engagement plus 6 years (Romanian commercial law requirement). Server logs are purged after 90 days.
1.6 Your Rights (GDPR Arts. 15–22)
You have the right to: access your personal data, rectify inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent at any time. To exercise these rights, contact us at [email protected].
1.7 Data Transfers
We do not transfer personal data outside the European Economic Area (EEA) without adequate safeguards as defined under GDPR Chapter V.
1.8 Supervisory Authority
You have the right to lodge a complaint with the Romanian Supervisory Authority for Data Processing (ANSPDCP) at www.dataprotection.ro.
2 Terms of Service
Effective Date: January 1, 2026
2.1 Service Agreement
These Terms of Service ("Terms") govern the provision of web development, technical architecture, and related digital services by CoreStackwebs, registered at 900694, Str. Maior Gheorghe Murea nr. 4, Constanța, Romania. By engaging our services, you agree to these Terms.
2.2 Scope of Work
Each project is governed by a separate Statement of Work ("SOW") defining deliverables, timelines, and pricing. CoreStackwebs reserves the right to modify scope via written change orders mutually agreed upon by both parties.
2.3 Payment Terms
- 50% deposit required before project commencement.
- Remaining balance due upon delivery of final deliverables.
- Invoices are payable within 14 calendar days of issuance.
- Late payments incur a 1.5% monthly administrative fee.
- All prices are in EUR unless otherwise specified in the SOW.
2.4 Intellectual Property
Upon full payment, all custom code, designs, and documentation are transferred to the client. CoreStackwebs retains ownership of pre-existing frameworks, libraries, and internal tooling used during development.
2.5 Confidentiality
Both parties agree to maintain strict confidentiality of proprietary information exchanged during the engagement. This obligation survives termination for a period of 3 years.
2.6 Limitation of Liability
CoreStackwebs' total aggregate liability under any engagement shall not exceed the total fees paid by the client for the specific project. We are not liable for indirect, consequential, or incidental damages.
2.7 Governing Law
These Terms are governed by the laws of Romania. Any disputes shall be resolved through arbitration administered by the Constanta Chamber of Commerce, unless otherwise agreed in writing.
4 Refund & Reimbursement Policy
Effective Date: January 1, 2026
4.1 Pre-Work Refund
If a project has not yet commenced (no work has been performed and no deliverables have been produced), a full refund of the deposit will be issued within 7 business days of the written cancellation request.
4.2 In-Progress Refund
If work has commenced, refunds are calculated on a pro-rated basis according to completed milestones as defined in the Statement of Work. Completed milestones are non-refundable. The remaining deposit balance is refundable upon written request within 14 business days.
4.3 Delivered Work
Upon delivery and acceptance of final deliverables, no refund is available. Revisions requested after final delivery are treated as new work and billed accordingly at the standard hourly or project rate.
4.4 Non-Refundable Items
- Third-party software licenses purchased on behalf of the client.
- Domain registration or hosting fees already paid to third-party providers.
- Work completed under signed-off change orders.
4.5 Refund Process
To request a refund, contact us at [email protected] with your project reference number and reason for the refund request. All refund requests are reviewed within 3 business days. Approved refunds are processed to the original payment method within 7–14 business days.