Privacy policy

Who we are

iDoLead is the leadership coaching practice of Anna Susarenco, operated by EDUCATION FOR ALL SRL (CUI 45782799). We are the data controller for everything described on this page — we decide what is collected and why.

For anything to do with your data, including a request to see it or delete it, write to idolead@gmail.com. A person reads that inbox; there is no ticketing system in between.

What we collect, and when

We collect nothing until you fill in a form. There is no account to create, and you are not asked to identify yourself in order to read the site.

There are exactly two forms:

• The contact form asks for your name, your email address, the subject you picked, and the message you wrote.
• The free guide form asks for your email address, optionally your phone number, and your answers to two multiple-choice questions about your role and where you are in your career.

Beyond that, our hosting and analytics record ordinary technical information about the visit — the pages opened, the approximate region, the browser and device type, and the IP address the request came from.

Why we collect it, and on what basis

Each piece of data has one reason to exist:

• Your message and your name let us answer you. Without them there is no reply to send. This is our legitimate interest in responding to somebody who contacted us.
• Your email address on the guide form is how the guide reaches you. That is the performance of what you asked for, not marketing.
• Your phone number is optional and is used only if you have asked us to reach you that way.
• Your two answers on the guide form tell us who the guide is reaching, so it can be made more useful. This is our legitimate interest in improving what we publish.
• Analytics and advertising measurement tell us which pages and which adverts actually work. This is our legitimate interest in not spending money blindly.

We do not sell your data, we do not trade it, and we do not add you to a mailing list because you downloaded a guide. If we ever want to send you something you did not ask for, we will ask first.

Who else sees it

Running a website means using other companies, and each one that touches your data is named here rather than hidden behind the phrase “our partners”.

In practice, that is five:

• Supabase stores what you submit, in a database in the European Union.
• Resend delivers the emails — your copy of the guide, your confirmation, and the notification that lands in our inbox.
• Telegram carries a short notification to us that a form was submitted, so we see it quickly. It contains what you wrote.
• Vercel hosts the site and provides its analytics, which counts page views without cookies and without building a profile of you.
• Meta (Facebook and Instagram) measures our advertising, which is described on its own below because it works differently from the rest.

Nobody else receives your data. We would disclose it if the law obliged us to, and we would tell you unless we were forbidden to.

Advertising measurement

We advertise on Facebook and Instagram. To know whether those adverts bring anybody here, the site loads the Meta Pixel, which reports back that a page was opened and, if you submit a form, that a form was submitted.

When you submit a form, our server also reports that same event to Meta directly. This is one event sent a second way, so that it is still counted when a browser extension blocks the first — it is not a second piece of tracking, and Meta collapses the two into one.

Your email address and phone number are included in that server report, but only as an irreversible cryptographic hash. Meta uses the hash to check whether it matches somebody who was shown the advert; it cannot be turned back into your address. Your IP address and browser identifier are sent as well, which is how advertising measurement works everywhere.

Meta is in the United States, so this involves a transfer outside the European Economic Area, made under the European Commission's adequacy decision for the EU–US Data Privacy Framework. If you would rather none of this happened, a tracker blocker or your browser's tracking protection stops the browser half, and not filling in a form stops the rest.

How long we keep it

We keep what you submit for 24 months after we last heard from you, and then delete it. A conversation that turns into working together is kept for as long as that relationship lasts, and afterwards for whatever period the accounting rules require.

If you ask us to delete your data sooner, we delete it sooner. There is no waiting period and we will not ask you to justify it.

Your rights

Under the GDPR you can ask us for a copy of everything we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, and object to us relying on legitimate interest. You can also ask for your data in a portable form.

Write to idolead@gmail.com and we will answer within 30 days. If we get it wrong, you have the right to complain to your national data protection authority — in Romania, that is ANSPDCP.

Changes to this policy

If we start doing something with your data that this page does not describe, this page changes first. The date at the top is when the wording was last altered.