Privacy Policy
This policy explains how UPORTHO STORE SRL collects and uses personal data when you visit www.uportho.com, create an account or place an order.
1. Who we are
The data controller is UPORTHO STORE SRL, a Romanian company registered under no. J40/17865/2018, VAT number RO40306492.
- Registered office: 5 Alexandru Vlahuță Street, Block M47, Staircase 2, Apartment 28, Bucharest, Romania
- Operational office: 39B Dr. Alexandru Vitzu Street, Sector 5, 050671 Bucharest, Romania
- Privacy contact: office@uportho.com
2. Data we collect
Data you give us
- Account and contact data: name, clinic or company name, professional title, email, phone
- Order data: billing and delivery address, VAT number, products ordered, order history
- Messages you send us by email, WhatsApp, phone or contact forms
Data collected automatically
- Technical data: IP address, browser, device type, pages visited, referring site
- Cookie and tracking data, as described in section 9 and in our Cookie Policy
Payment data
Card and wallet payments are processed by Stripe. UpOrtho never sees or stores your full card number.
We do not ask for health data about patients. Please do not send patient information through the Website or by email.
3. Why we use your data
Purpose | Data used | Legal basis (GDPR) |
Processing orders, delivery, invoicing | Account, order, contact data | Performance of a contract, Art. 6(1)(b) |
Accounting and tax records | Order and invoicing data | Legal obligation, Art. 6(1)(c) |
Verifying professional status and VAT numbers (VIES) | Company data, VAT number | Legal obligation and legitimate interest, Art. 6(1)(c) and (f) |
Customer support, returns, warranty claims | Contact and order data, messages | Performance of a contract, Art. 6(1)(b) |
Website security and fraud prevention | Technical data | Legitimate interest, Art. 6(1)(f) |
Website analytics (Google Analytics) | Cookie and technical data | Consent, Art. 6(1)(a) |
Advertising and remarketing (Meta, Google Ads) | Cookie data, hashed email and phone | Consent, Art. 6(1)(a) |
Newsletters, offers, event invitations | Email, name | Consent, Art. 6(1)(a) |
You can withdraw consent at any time, through the cookie settings on the Website or the unsubscribe link in any email. Withdrawal does not affect processing carried out before it.
4. Who we share data with
We do not sell your personal data. We share it only with the service providers below, who process it on our behalf and under contract, or where the law requires it.
Recipient | What they do | Location |
Odoo SA | Website, online store and customer database hosting | EU |
Stripe | Card, Apple Pay and Google Pay payments | EU and USA |
DPD, Sameday, UPS and other couriers | Delivery of orders | EU |
Google (Analytics, Tag Manager, Ads) | Website analytics and advertising, with your consent | EU and USA |
Meta Platforms (Meta Pixel) | Advertising measurement and remarketing, with your consent | EU and USA |
Mailchimp (Intuit) | Newsletters and email campaigns, with your consent | USA |
Accountants, auditors, legal advisers | Accounting, tax and legal compliance | Romania |
Public authorities | Only where required by law | Romania |
5. Transfers outside the European Economic Area
Some providers above, including Google, Meta, Stripe and Mailchimp, may process data in the United States.
These transfers rely on the EU–US Data Privacy Framework, where the provider is certified, or on the European Commission's Standard Contractual Clauses. You can ask us for details at office@uportho.com.
6. How long we keep your data
Data | Retention period |
Invoices and accounting records | As long as required by Romanian accounting and tax law |
Order history and customer account | While the account is active, then 3 years after the last order |
Support messages, returns, warranty claims | 3 years after the matter is closed |
Newsletter subscription | Until you unsubscribe |
Analytics data (Google Analytics) | 14 months |
Advertising cookies | According to the Cookie Policy, maximum 13 months |
When the retention period ends, we delete or anonymise the data.
7. Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you
- correct inaccurate or incomplete data
- request deletion, where we have no legal obligation to keep the data
- restrict or object to processing, including processing based on legitimate interest
- receive your data in a portable format
- withdraw consent at any time, without affecting earlier processing
- object at any time to direct marketing
To exercise any right, email office@uportho.com. We reply within one month and may ask you to confirm your identity.
8. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and payment processing through a certified provider. Only staff who need the data for their work can access it.
9. Cookies and tracking
The Website uses:
- Necessary cookies, for the cart, login and security; these do not require consent
- Analytics cookies (Google Analytics), to understand how the Website is used
- Marketing cookies (Meta Pixel, Google Ads, Mailchimp), to measure and personalise advertising
Analytics and marketing cookies are placed only after you accept them in the cookie banner. When you accept marketing cookies and are logged in or complete a purchase, your email address and phone number may be sent to Meta and Google in hashed (encrypted) form, to measure advertising results.
You can change your choices at any time from the cookie settings on the Website. Details are in our Cookie Policy.
10. Minors
The Website is intended for dental professionals and companies only. We do not knowingly collect data from persons under 18.
11. Changes to this policy
We may update this policy when our services or legal requirements change. The current version is always published on this page, with its effective date.
12. Contact and complaints
For any question about your personal data:
- Email: office@uportho.com
- Phone: +40 724 129 129
- Address: UPORTHO STORE SRL, 39B Dr. Alexandru Vitzu Street, Sector 5, 050671 Bucharest, Romania
You also have the right to lodge a complaint with the Romanian data protection authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro, or with the authority in your own EU country.
Effective date: 21.09.2026