Privacy Policy

Last updated: September 2026 · Potentorix is operated by Savaya Leads S.R.L.

1. Who we are

Potentorix is a brand operated by Savaya Leads S.R.L. (Romania) [TODO: CUI / Trade Register No. / registered address]. This policy explains how we process personal data in accordance with Regulation (EU) 2016/679 (GDPR).

2. What data we collect

Order data — name, email, shipping address, phone — collected by our payment processor Stripe when you place an order.
Email address — if you voluntarily submit it to claim a discount offer.
Technical data — a first-party cookie containing an anonymous click identifier used for order attribution, and standard server logs (IP, user-agent).

3. Why we process it

To fulfil and deliver your order (performance of contract, Art. 6(1)(b) GDPR).
To measure marketing performance via an anonymous click ID (legitimate interest, Art. 6(1)(f)).
To send you the discount you requested (consent, Art. 6(1)(a)) — you may withdraw at any time.

4. Cookies and similar technologies

Functional. We set first-party cookies (ptx_clickid and related ptx_sub* values, 30-day lifetime) used solely to attribute your order to the advertising partner who referred you, and to remember the pack you selected. They contain no personal information. Language preference and discount status are stored in your browser's local storage.

Advertising and measurement. Where you reach this site through an advertising partner, that partner's Meta (Facebook) pixel is loaded on the pages you visit. The pixel reports page views, checkout starts and completed purchases to Meta, so the partner can measure and optimise their advertising. This involves setting third-party cookies and sharing your IP address, browser information and the pages you viewed with Meta Platforms Ireland Ltd., who acts as an independent controller for that data under its own privacy policy. Visitors who arrive without an advertising partner's identifier are not tracked in this way — no pixel is loaded at all.

You can prevent this by blocking third-party cookies or tracking scripts in your browser, or by using your device's ad-tracking controls. The website works normally either way.

5. Data sharing

Payment data is processed by Stripe Payments Europe, Ltd. (PCI-DSS Level 1). Shipping data is shared with our fulfilment and courier partners solely for delivery. Advertising measurement data is shared with Meta and with the advertising partner who referred you, as described in section 4. We do not sell personal data.

6. Retention

Order data is kept for the period required by Romanian accounting and tax law. Marketing emails are kept until you unsubscribe. Click identifiers expire after 30 days.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability, and objection (Art. 15–21 GDPR). Contact support@potentorix.com. You may also lodge a complaint with ANSPDCP (dataprotection.ro) or your local supervisory authority.