Privacy Policy
**Last Updated: 02.10.2026.**
Climb and Claim ("Climb and Claim", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains what personal data we collect, how we use it, why we use it, how long we retain it, who we may share it with, and what rights you have under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR").
By using the Climb and Claim website and services, you acknowledge that you have read and understood this Privacy Policy.
---
## 1. Data Controller
The entity responsible for the processing of your personal data is:
**Legal Name:** [COMPANY LEGAL NAME]
**Trading Name:** Climb and Claim
**Registered Address:** [FULL ADDRESS]
**Company Registration Number:** [REGISTRATION NUMBER]
**VAT/CUI Number:** [VAT/CUI NUMBER]
**Email:** contact[at]clibandclaim.com
For privacy-related questions or requests, you can contact us using the email address above.
If a Data Protection Officer is legally required and appointed, their contact details will be provided here.
---
## 2. What Personal Data We Collect
Depending on how you use Climb and Claim, we may collect the following categories of personal data.
## 2.1 Account Information
When you create an account, we may collect:
* Email address
* Username or display name
* Password in securely hashed form
* Account creation date
* Account status
* Information necessary to authenticate and secure your account
We do not store passwords in plain text.
## 2.2 Profile Information
If you choose to provide it, we may collect:
* Name or business name
* Profile information
* Logo or profile image
* Other information you voluntarily add to your account
You are not required to provide information that is not necessary for the operation of your account or the services you request.
## 2.3 Advertising Information
If you purchase or manage an advertising position on Climb and Claim, we may collect and store:
* Advertising images, logos, banners, or other uploaded materials
* Destination URL associated with your advertisement
* Advertising or brand name
* Advertising position or spot identifier
* Purchase information associated with the position
* Date and time of purchase
* Information relating to changes or administration of your advertising position
Advertising materials submitted by users may be publicly displayed on the Climb and Claim website.
You are responsible for ensuring that you have the necessary rights, permissions, and licences to use any images, logos, trademarks, text, or other materials you upload.
## 2.4 Payment and Transaction Information
When you purchase a position, payment processing may be handled by Stripe.
We may receive and store information such as:
* Transaction or order ID
* Stripe payment ID
* Amount paid
* Currency
* Payment status
* Date and time of the transaction
* Information necessary for refunds, disputes, fraud prevention, accounting, and customer support
Climb and Claim does not intentionally store complete payment card numbers, card security codes, or other complete payment credentials on its own servers. Payment information is processed by the relevant payment provider.
Stripe may process personal data in accordance with its own privacy policies and applicable laws. Stripe may act as a data controller or processor depending on the specific processing activity.
## 2.5 Technical and Security Information
When you access or use the website, certain technical information may be processed automatically, including:
* IP address
* Browser type and version
* Operating system
* Device information
* Date and time of access
* Pages or resources accessed
* Referring website, where available
* Security and error logs
* Information necessary to detect and prevent abuse, fraud, or attacks
This information may be used for security, troubleshooting, fraud prevention, and maintaining the reliability of the website.
---
## 3. How We Collect Personal Data
We may collect personal data:
* Directly from you when you create an account
* When you purchase or manage an advertising position
* When you upload advertising materials
* When you contact us
* When you request support
* Automatically when you use the website
* From payment providers in connection with transactions
* From security and infrastructure providers where necessary to operate and protect the website
We generally collect personal data directly from you.
---
## 4. How We Use Your Personal Data
We may use personal data for the following purposes:
## Account Management
To:
* Create and maintain your account
* Authenticate you
* Allow you to manage your advertising positions
* Provide account-related functionality
* Communicate with you about your account
## Advertising Services
To:
* Process your advertising purchase
* Assign and manage advertising positions
* Display your approved advertising materials
* Connect your advertising position with the destination URL you provide
* Maintain records associated with your advertising position
## Payments
To:
* Process payments
* Confirm successful transactions
* Process refunds where applicable
* Handle payment disputes and chargebacks
* Prevent payment fraud
## Security and Fraud Prevention
To:
* Protect the website and its users
* Detect and prevent fraudulent activity
* Detect unauthorized access
* Prevent abuse, attacks, and attempts to compromise the platform
* Maintain security logs
## Legal and Administrative Purposes
To:
* Comply with applicable legal obligations
* Maintain accounting and transaction records
* Respond to lawful requests from public authorities
* Establish, exercise, or defend legal claims
* Enforce our Terms and Conditions and other applicable policies
## Customer Support
To:
* Respond to inquiries
* Resolve technical or account issues
* Investigate payment or advertising issues
* Communicate with you regarding your requests
---
## 5. Legal Bases for Processing
Depending on the circumstances, we process personal data under one or more of the following legal bases provided by the GDPR:
## Performance of a Contract
We process information when necessary to provide services you request, including creating your account, processing purchases, managing advertising positions, and providing related services.
## Legal Obligation
We may process and retain certain information where required by applicable laws, including accounting, tax, financial, and legal obligations.
## Legitimate Interests
We may process certain information where necessary for our legitimate interests, provided that those interests are not overridden by your rights and freedoms.
Examples may include:
* Website and network security
* Fraud prevention
* Protecting our services
* Maintaining technical logs
* Preventing abuse
* Defending legal claims
* Improving the reliability and security of the platform
## Consent
Where required by law, we will ask for your consent before processing personal data for purposes that require consent.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
GDPR consent must be freely given, specific, informed, and unambiguous where consent is used as the legal basis.
---
## 6. Publicly Displayed Information
Climb and Claim is an advertising platform. Information associated with advertising positions may therefore be publicly visible.
Depending on the functionality of the website, publicly displayed information may include:
* Advertising images or logos
* Business or brand name
* Advertising position
* Destination website URL
* Other advertising information intentionally submitted for public display
We will not intentionally display private account information such as your password, payment card details, or private account credentials.
You should not upload personal information into an advertising image, banner, logo, or other publicly displayed material unless you intend for that information to be publicly accessible.
---
## 7. Advertising Materials and Third-Party Websites
Advertising materials uploaded to Climb and Claim may contain links to websites operated by third parties.
We are not responsible for the privacy practices, security, content, or data processing activities of third-party websites.
When you visit a third-party website through an advertisement on Climb and Claim, that website's own privacy policy and terms may apply.
Users who submit advertising materials are responsible for ensuring that their advertisements and destination websites comply with applicable laws and our Advertising Policy.
---
## 8. Payment Processing
Payments for Climb and Claim services may be processed by Stripe.
When you make a payment, certain information may be transmitted to Stripe in order to process the transaction, prevent fraud, provide payment services, and comply with legal obligations.
Climb and Claim does not intentionally collect or store complete payment card information on its own systems.
Stripe's processing of personal data is also governed by Stripe's own privacy documentation. Stripe states that it may act as either a controller or processor depending on the relevant processing activity.
You can find more information about Stripe's privacy practices in Stripe's Privacy Center.
---
## 9. Hosting, Infrastructure and Security Providers
Climb and Claim may use third-party infrastructure and security providers to operate and protect the website.
This may include Cloudflare or similar services.
Such providers may process technical information, including IP addresses, connection information, security information, and website traffic data, where necessary to provide infrastructure, security, performance, or related services.
Cloudflare states that its role under data protection law may vary depending on the type of data and service involved, including acting as a controller for certain information and a processor for certain customer data.
The specific third-party providers used by Climb and Claim may change over time as the platform develops.
---
## 10. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods may depend on the type of information and the reason for processing.
For example:
* **Account information:** generally retained while your account remains active and for a reasonable period after account closure where necessary for legal, security, fraud prevention, or dispute-resolution purposes.
* **Transaction and accounting information:** retained for the period required by applicable accounting, tax, and other legal obligations.
* **Advertising information:** retained for as long as necessary to administer your advertising position, maintain transaction records, resolve disputes, and meet applicable legal obligations.
* **Security and technical logs:** retained for a limited period appropriate to the security and operational purpose for which they were collected.
* **Support communications:** retained for as long as reasonably necessary to resolve the relevant matter and maintain appropriate records.
When personal data is no longer required, we will delete it, anonymize it, or otherwise process it in accordance with applicable law.
---
## 11. Data Sharing
We do not sell your personal data.
We may share or provide access to personal data where reasonably necessary with:
* Payment providers, including Stripe
* Hosting and infrastructure providers
* Security and CDN providers, including Cloudflare where used
* Service providers that help us operate the website
* Professional advisers, such as accountants, lawyers, or auditors, where necessary
* Public authorities where required by law
* Courts, regulators, or law enforcement authorities where legally required
* Other parties where necessary to establish, exercise, or defend legal claims
Third-party service providers are expected to process personal data only as necessary to provide their services and in accordance with applicable legal requirements.
---
## 12. International Data Transfers
Some service providers used by Climb and Claim may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the circumstances, this may include an adequacy decision, Standard Contractual Clauses, an applicable certification mechanism, or another lawful transfer mechanism.
For example, Stripe states that it may rely on mechanisms including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses for certain transfers of European data.
---
## 13. Cookies and Similar Technologies
Climb and Claim may use cookies and similar technologies that are necessary for the operation, security, and functionality of the website.
These may include cookies used for:
* Authentication and login sessions
* Security
* Maintaining user preferences
* Shopping or checkout functionality
* Remembering cookie preferences
* Preventing abuse or fraudulent activity
If we introduce analytics, advertising, or other non-essential tracking technologies that require consent, we will request consent where required by applicable law.
You may be able to control or delete cookies through your browser settings. Certain website functions may not operate correctly if necessary cookies are disabled.
Where applicable, additional information about cookies will be provided in our Cookie Policy.
---
## 14. Your Data Protection Rights
Depending on the circumstances and applicable law, you have rights regarding your personal data, including:
## Right of Access
You may request confirmation as to whether we process your personal data and request a copy of the personal data we hold about you.
## Right to Rectification
You may request correction of inaccurate or incomplete personal data.
## Right to Erasure
You may request deletion of your personal data where the applicable legal conditions are met.
## Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances.
## Right to Object
You may object to certain processing activities, including processing based on legitimate interests and, where applicable, direct marketing.
## Right to Data Portability
Where applicable, you may request to receive personal data you have provided to us in a structured, commonly used, and machine-readable format, or request that it be transmitted to another controller.
## Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time.
## Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that your personal data has been processed unlawfully.
These rights are subject to the conditions and limitations established by applicable law.
---
## 15. How to Exercise Your Rights
To exercise your privacy rights or ask questions about the processing of your personal data, contact us at:
**Email:** [PRIVACY EMAIL]
Please provide enough information for us to understand your request and, where necessary, verify your identity.
We will normally respond to valid data protection requests without undue delay and, in principle, within one month of receiving the request, subject to applicable legal extensions or exceptions.
We may request additional information where reasonably necessary to verify the identity of the person making the request.
---
## 16. Account Deletion
You may request deletion of your Climb and Claim account by contacting us at [PRIVACY EMAIL] or using any account deletion functionality made available on the website.
Deleting an account does not necessarily require us to delete all information immediately.
Certain information may need to be retained where required by law or where reasonably necessary for:
* Accounting and tax obligations
* Fraud prevention
* Payment disputes
* Chargebacks
* Security investigations
* Legal claims
* Compliance with legal obligations
Where an advertising position or transaction is associated with an account, the consequences of account deletion may also be subject to our Terms and Conditions.
---
## 17. Children's Privacy
Climb and Claim is not intended to collect personal data from children without appropriate authorization.
We do not knowingly collect personal data from children where doing so would be prohibited by applicable law.
If you believe that a child has provided personal data to us in circumstances where it should not have been collected, please contact us at [PRIVACY EMAIL].
---
## 18. Data Security
We take reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
Depending on the nature of the information and the risks involved, these measures may include:
* Encrypted connections using HTTPS
* Secure password hashing
* Access controls
* Authentication and authorization controls
* Server and application security measures
* Input validation and protection against common web attacks
* Security monitoring and logging
* Backup and recovery procedures
* Payment processing through specialized payment providers
However, no internet transmission or storage system can be guaranteed to be completely secure.
---
## 19. Data Breaches
If a personal data breach occurs that is subject to notification under applicable law, we will take the measures required by the GDPR and other applicable data protection legislation.
This may include assessing the breach, taking steps to contain and remedy it, notifying the competent supervisory authority where legally required, and notifying affected individuals where legally required.
---
## 20. Automated Decision-Making and Profiling
Climb and Claim does not currently use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.
If this changes, we will update this Privacy Policy and provide any information required by applicable law.
---
## 21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to:
* Our services
* Our technology
* Third-party service providers
* Applicable laws
* Our data processing practices
When we make material changes, we may provide additional notice where required by law.
The "Last Updated" date at the top of this Privacy Policy indicates when the policy was most recently revised.
---
## 22. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
**Climb and Claim**
**Email:** contact[at]clibandclaim.com
We will make reasonable efforts to address privacy-related concerns and requests in accordance with applicable law.
---
## 23. Supervisory Authority
If you believe that your data protection rights have not been respected, you may lodge a complaint with the competent data protection supervisory authority.
For individuals in Romania, the relevant authority is:
**Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)**
**Website:** https://www.dataprotection.ro/
You may also have the right to lodge a complaint with the data protection supervisory authority in the EU Member State where you live, work, or where you believe an infringement occurred, depending on the circumstances.
---
**This Privacy Policy was last updated on 02.10.2026.**