This policy describes the public FormToInbox site operated by Nitu M. Adrian PFA. Accounts, hosted endpoints and server-side form processing remain inactive.
Nitu M. Adrian PFA
CUI: 51772633
Trade Register: F2025016373009
Registered office: Viforata 15, Buzau, Romania, European Union
Privacy and legal requests may be sent by post to the registered office. A verified electronic legal-contact address will be added before accounts or hosted form processing are activated.
Last updated: 3 September 2026
Operator verification and legal review recommended: These pages describe the current public site and should be reviewed for every jurisdiction and any future service or processing change.
Nitu M. Adrian PFA is the controller for personal data processed to operate this public website. A person publishing code generated by the builder controls the destination and use of data collected through that exported form. FormToInbox does not receive those form submissions.
The builder stores the draft and destination settings in local storage on your device. The site does not require an account and does not ask you to submit a form to FormToInbox. ROMARG and Cloudflare may process connection metadata such as IP address, requested URL, timestamp, browser information and security signals to deliver and protect the site.
Strictly necessary technical processing supports delivery, availability, abuse prevention and security. Optional Google Analytics is used only after consent for audience measurement. The operator must confirm and document the precise legal basis and technical-log retention configuration before expanding the service.
Google Analytics loads only after an affirmative analytics choice and remains absent after rejection or a Global Privacy Control signal. It may process page and session activity, approximate location, browser/device information and a pseudonymous client identifier. Form field values and builder destination settings are not intentionally sent to Analytics. Google signals and advertising-personalisation signals are disabled in the site integration.
Email, WhatsApp, SMS, Facebook Messenger and Telegram exports open a draft in the visitor’s chosen app. Nothing is sent automatically. If the visitor continues, the selected provider receives the information according to that provider’s own terms and privacy notice.
Current infrastructure providers are ROMARG for hosting and Cloudflare for DNS, edge delivery and security. Google becomes an analytics recipient only after consent. These providers may process data in multiple locations under their own contractual safeguards. The builder draft and privacy preference remain until the visitor resets them or clears site data; Google Analytics cookies can last up to two years under Google’s default settings. Exact server-log retention and transfer safeguards remain an operator-review item before hosted processing.
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw analytics consent at any time without affecting earlier lawful processing. Requests may be sent by post to the registered office. Identity information may be requested only when reasonably necessary to protect the requester’s data.
FormToInbox applies the same strict opt-in analytics choice worldwide. It does not sell personal information or share it for cross-context behavioural advertising. Browser Global Privacy Control signals are honored by keeping analytics off. Where a US state privacy law applies, including California’s CCPA as amended by the CPRA or the Colorado Privacy Act, applicable rights may include access or knowledge, correction, deletion, portability, opt-out and freedom from discriminatory treatment. This voluntary global baseline does not state that every law applies to the operator in every circumstance.
People in the European Economic Area may lodge a complaint with their competent supervisory authority; in Romania this is ANSPDCP. California residents may consult the California privacy authorities. This policy will be updated before accounts, hosted submissions, paid plans or additional providers are activated.