Back home

Privacy Policy

Last updated: 24 November 2025

This Privacy Policy explains how Popup Home (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or use our website https://popuphome.ro and related online services. By using our website, you agree to the practices described in this Policy.

Who we are

Popup Home is a property management and short-stay services company, helping property owners turn their apartments into high-performing rental assets. For the purposes of applicable data protection laws, we act as the “data controller” for personal data collected through this website and related online forms. If you have any questions about this Policy or how we handle your data, you can contact us at [insert contact email] or by using the contact form on our website.

What personal data we collect

We may collect and process the following categories of personal data, depending on how you use our website and services:

  • Contact details: name, email address, phone number, and any other information you choose to include in contact or inquiry forms.

  • Account information: if the website offers accounts, we may collect login details, profile information, and preferences associated with your user profile.

  • Booking and service information: property details, requests related to property management, stay dates, apartment preferences, and information necessary to provide our services.

  • Comments and user-generated content: information you submit when leaving comments, reviews, or other content on the website.

  • Technical and usage data: IP address, browser type, device information, operating system, pages viewed, time spent on pages, and navigation paths.

  • Cookies and tracking data: information collected through cookies and similar technologies, including via Google Analytics, as described below.

We collect this data directly from you when you submit it, and automatically when you browse our website.

Comments

When you leave a comment on our site, we collect the information shown in the comments form, together with your IP address and browser user agent string. We use this information to help detect and prevent spam and abuse on the website. An anonymized string created from your email address (also called a “hash”) may be sent to the Gravatar service to determine whether you are using it for your profile image. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After your comment is approved, your profile picture, name, and comment text may be visible to the public in the context of your comment.

Media

If you upload images or other media files to the website, you should avoid uploading files that contain embedded location data (EXIF GPS). Visitors to the website can download and extract location data from images displayed on the site, so removing such data helps protect your privacy.

Cookies and similar technologies

Our website uses cookies and similar technologies to provide essential functionality, remember your preferences, improve performance, and analyze traffic. Cookies are small text files stored on your device when you visit a website. They allow us to recognize your browser, maintain sessions, and understand how visitors use our site. We use several categories of cookies:

  • Strictly necessary cookies: required for the website to function properly (for example, to manage logins or security features).

  • Preference cookies: used to remember your choices, such as language, cookie settings, or display options.

  • Analytics cookies: used to understand how visitors use the website and to improve our content and services.

  • Functionality cookies: used when editing or publishing content, or when interacting with specific features of the site.

If you leave a comment on our site, you may choose to save your name, email, and website in cookies for your convenience, so you do not have to re-enter these details when posting another comment. These cookies may remain on your device for up to one year. When you visit our login page, we set a temporary cookie to check whether your browser accepts cookies; this cookie does not contain personal data and is removed when you close your browser. When you log in, we set cookies that store your login information and display preferences. Login cookies usually last for two days, and screen options cookies for one year. If you select “Remember me”, your login may remain active for approximately two weeks. When you log out, login cookies are removed. If you edit or publish an article, an additional cookie may be stored in your browser, containing the ID of the post you edited and expiring after about one day. Most browsers allow you to manage or delete cookies through their settings. However, disabling certain cookies may affect the functionality and user experience of our website.

Google Analytics and traffic analysis

We use Google Analytics to better understand how visitors use our website, measure performance, and improve our content and services. Google Analytics collects information such as the pages you visit, the time spent on each page, the type of device and browser used, your approximate location based on IP address, and how you reached our site (for example, through search engines or external links). This information is collected in aggregated form and does not allow us to identify you directly. Google may process this data on our behalf as our analytics provider. Google Analytics uses cookies and similar tracking technologies to collect and analyze this information. Data generated by Google Analytics may be transmitted to and stored on Google servers, which can be located in the European Union or other countries. You can learn more about how Google uses data at the following page: https://policies.google.com/privacy. If you do not want Google Analytics to track your activity on our website, you can install the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout, or adjust your cookie preferences in your browser.

Embedded content from other websites

Articles, property listings, or other content on this site may include embedded content from third-party websites, such as videos, maps, images, booking widgets, or social media posts. Embedded content from other websites behaves exactly as if you had visited the other website directly. These third-party websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with embedded content, including tracking your interaction if you have an account and are logged into that third-party website. We encourage you to review the privacy policies of those external services to understand how your data is processed there.

How and why we use your personal data

We use your personal data for the following purposes:

  • To operate, secure, and maintain our website and online services.

  • To respond to your inquiries, property management requests, or service questions submitted through forms, email, or other channels.

  • To manage user accounts, comments, and contributions where such features are available.

  • To analyze how our website is used, improve user experience, and develop new features and services.

  • To send you service-related communications, such as confirmations, updates, or important notices related to our collaboration.

  • To comply with legal obligations, respond to legal requests, or protect our rights and interests.

Legal bases for processing (EU / EEA visitors)

If you are located in the European Union or European Economic Area, we process your personal data based on one or more of the following legal bases:

  • Performance of a contract or steps prior to entering into a contract: when we process your data to provide property management services or respond to your requests.

  • Legitimate interests: when we analyze traffic, improve our website, prevent fraud, maintain security, and manage our relationship with users, provided your rights do not override these interests.

  • Consent: when required by law, for example, for certain analytics cookies or direct marketing communications, we rely on your consent, which you can withdraw at any time.

  • Legal obligation: when we need to retain or disclose certain information to comply with applicable laws and regulations.

Who we share your data with

We do not sell your personal data. However, we may share your data with trusted third parties where necessary to provide our services, operate our website, or comply with legal obligations, including:

  • Service providers such as hosting partners, email service providers, analytics providers (including Google Analytics), and IT support.

  • Professional advisors such as lawyers, accountants, or auditors, where necessary and subject to confidentiality obligations.

  • Authorities or regulators, where legally required or to protect our rights, property, or safety and that of others.

    If you request a password reset, your IP address may be included in the password reset email to help ensure security and detect potential misuse.

How long we retain your data

We retain personal data only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law. For example:

  • Comments and their metadata may be stored indefinitely, so we can automatically recognize and approve follow-up comments instead of holding them in a moderation queue.

  • For registered users (if applicable), we store the personal information provided in their user profile for as long as the account remains active. Users can view, edit, or delete their personal information at any time, except for their username, which may be fixed for technical reasons.

  • Contact form submissions, booking-related data, and service documentation may be retained for the duration of the collaboration and for a reasonable period afterward, for administrative, legal, or accounting purposes.

  • Technical logs and analytics data may be retained for a limited period defined in our internal policies or by our service providers.

Your rights over your data

Depending on your location and applicable law, you may have the following rights regarding your personal data:

  • Right of access: to request confirmation of whether we process your personal data and to receive a copy of that data.

  • Right to rectification: to request correction of inaccurate or incomplete personal data.

  • Right to erasure (“right to be forgotten”): to request deletion of your personal data, subject to legal retention obligations.

  • Right to restriction: to request that we restrict the processing of your data in certain circumstances.

  • Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible.

  • Right to object: to object to the processing of your data based on our legitimate interests, including profiling, and to object to direct marketing at any time.

  • Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out previously.

If you have an account on this site or have left comments, you can request an exported file of the personal data we hold about you and request that we erase any personal data we hold, subject to our legal obligations. To exercise your rights, please contact us at [insert contact email] and provide enough information for us to identify you and process your request securely. You may also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

International transfers

Some of our service providers or partners may be located outside your country or outside the European Economic Area. Where personal data is transferred internationally, we take appropriate measures to ensure an adequate level of protection, such as relying on adequacy decisions, standard contractual clauses, or other safeguards recognized by applicable law.

How we protect your data

We implement technical and organizational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include access controls, secure hosting, encryption where appropriate, and internal policies regarding data handling and retention. However, no method of transmission over the Internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.