The controller and your contact

Multisign SRL, VAT RO34108890, Str. Bruxelles nr. 61-62, Parcul Industrial Graells & Llonch, 507165 Prejmer, Jud. Brașov, Romania, is responsible for Plan Lab’s processing of personal information. Contact team@planlab.eu for privacy questions or rights requests.

Information used by the website

Your bag, guest wishlist and country preference are stored in this browser. When you sign in, saved products are linked to your Medusa customer account so you can access them on other devices; guest saved products are merged into that account. When you send a quotation enquiry, Plan Lab receives your contact email, organisation, project details and equipment shortlist by email so we can reply. Download draft creates a copy on your device without sending it. A temporary browser identifier helps prevent duplicate submissions; it does not store your contact details.

The site saves your cookie preference and its date. Hosting services handle technical page requests. Checkout sends your contact, delivery and order details to our commerce backend; Stripe handles payment details and we do not store card numbers. With your consent, Google Analytics measures visits and public pages viewed using browser identifiers and technical information. We do not send it names, email addresses, form contents, account links or payment details. Advertising features are disabled.

When you request a business VAT check in checkout, your company name, VAT number and delivery country are sent to our backend. The VAT country and number are checked with the European Commission’s VIES service; the returned company name is compared with the one you entered. This provisional check does not place an order. We recheck eligibility when preparing checkout and retain signed verification evidence with the checkout. These form details are not saved in browser storage, and the verification expires after ten minutes.

Purposes and legal bases

Requested shopping and draft features use information to provide the functions you ask for and, where applicable, to take steps at your request before a contract. Minimal technical processing needed to run and protect the site relies on our legitimate interests in reliable and secure operation. Optional tracking, if introduced, will require the appropriate prior consent.

If you independently send us an email, we use its contents to answer your request, take requested pre-contractual steps or handle an existing contract. Legal obligations may require retaining specific business correspondence or records. Other enquiry handling may rely on our legitimate interest in responding to people who contact us.

Storage, retention and recipients

Bag and guest wishlist data and preferences remain until you remove them or clear the site’s browser storage. An older saved quotation draft may also remain; clearing the enquiry form or successfully sending an enquiry removes it. New enquiries are not saved as browser drafts. Cookie choices expire after 180 days. Downloaded files remain wherever you save them. Avoid storing personal or confidential details on a shared device; other people using that browser may be able to view them.

Local drafts are not shared with suppliers or processed into orders. Opening a manufacturer link sends you to another website, which will receive the ordinary connection information from your browser. Emails you send use your and our email providers. An enquiry is kept for as long as needed to resolve it and any applicable legal or claims period; the operational retention schedule and named providers must be confirmed before the public launch.

Our commerce backend runs on Medusa Cloud. A requested business VAT check also involves the European Commission’s VIES service and its participating national tax databases. Stripe processes payments. Medusa stores checkout and order details, including business VAT verification where requested. Order processing is connected to RVX for invoicing and stock, GLS for parcel labels and tracking, and our transactional email service for account and order messages. Only the details needed for the relevant operation are sent to those services. Encrypted recovery backups include commerce data and are kept in a restricted Google Drive backup folder. Actual order retention periods and relevant transfer safeguards must be documented before live checkout opens.

Accounts, saved products and deletion

We keep your account details, saved addresses and signed-in wishlist in Medusa to provide the account features you request. You can edit your details, remove saved products and manage email preferences in your account.

You can request account deletion under Your details. After password confirmation, access is disabled, your profile, addresses and wishlist are removed, and marketing emails stop. Existing orders are not cancelled. We review any remaining personal data, including order and invoice records that may need to be retained for legal obligations or claims, and respond within one calendar month. Any permitted extension is explained within that first month. Completed request records are kept for up to three years to document our response; contact details are removed when the review is completed. You can also contact team@planlab.eu to exercise your rights.

Withdrawal notices

When you submit the withdrawal form, we store your name, confirmation email, contract or goods details, optional delivery date and the time and contents of your notice in our Medusa backend. We use these records to handle your withdrawal, provide its receipt and meet consumer-law obligations. They are available to authorised staff and the providers operating our shop and transactional email service; they are not used for marketing.

We retain the notice for handling the return and refund and for applicable legal or claims periods. No copy of the form is saved in browser storage. A receipt you download remains on your device until you delete it.

Newsletter subscriptions

When newsletter signup is enabled, we use the email address you provide to send Plan Lab product news, guides and offers with your consent. Subscription is optional and separate from buying or requesting a quotation. We record the signup source, consent wording version and submission time, and request confirmation by email before subscribing you.

We store newsletter preferences in our Medusa commerce system, including your email address, the consent wording and version, the request source, and request, confirmation and withdrawal dates. We send a confirmation email before activating a subscription. If you explicitly choose marketing when creating an account, one verification button confirms both your email and that subscription request. Creating an account or placing an order alone does not subscribe you. We do not currently share this list with Zoho Campaigns. You can unsubscribe without signing in using the link in each marketing email, through Email preferences in your account, or by contacting team@planlab.eu. Account and order messages continue separately. Unconfirmed requests with no earlier consent history are deleted after seven days. While subscribed, we keep the records needed to provide the newsletter and demonstrate consent. After withdrawal, limited consent and opt-out records are kept for up to three years to handle complaints and respect your choice, then deleted; this is our retention policy, not a universal legal retention requirement. An expired confirmation link never activates a subscription.

Your choices and rights

Where applicable, you may request access, correction, deletion, restriction or portability of personal data, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting earlier lawful processing. Contact team@planlab.eu; we may need proportionate verification of your identity. We respond within the statutory timeframe, normally one month, with any permitted extension explained.

You may complain to the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or the competent authority where you live or work. No automated decision with legal or similarly significant effects is made by this website. The tool finder uses the project preferences you select to suggest catalogue items.

Children and changes

Products may be relevant to education, but forms and purchases are intended for adults, including educators and parents. Please do not enter children’s personal information into a quotation enquiry. This policy will be reviewed as the store develops; the displayed date identifies this version.