Privacy Policy
Last updated: July 12, 2026
1. Who we are
SpaceBlock (spaceblock.co) is operated by Access Memory SRL, a company incorporated in Romania, registered with the Trade Registry under no. J2025019610000, fiscal code (CUI) 51475403 (“Access Memory”, “we”, “us”). We process personal data as a data controller in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018. For any privacy matter, write to hello@accessmemory.co.
2. What data we collect
Account data — name, e-mail address and login credentials for the SpaceBlock dashboard. Content data — the pages, posts, media and other material you store in the CMS as part of a project. Contact data — the information you send through our contact form (name, e-mail, company, message). Usage data — pages visited, actions performed, approximate location derived from IP, device and browser type, collected through our own analytics. Cookies — see section 4.
3. Why we process it and on what legal basis
To provide and operate SpaceBlock for your project — performance of a contract, Art. 6(1)(b) GDPR. To answer messages you send us — our legitimate interest in responding, Art. 6(1)(f). To secure, debug and improve the service, including aggregated analytics — legitimate interest, Art. 6(1)(f). To send occasional product news, only if you opt in — consent, Art. 6(1)(a), withdrawable at any time. To keep invoices and fiscal records — legal obligation, Art. 6(1)(c), under Romanian accounting law.
4. Cookies
SpaceBlock uses strictly necessary cookies (session, security) that do not require consent, and first-party analytics cookies that are set only with your consent, in line with the ePrivacy rules as applied in Romania. You can withdraw consent from the cookie banner at any time and manage or delete cookies from your browser settings.
5. How long we keep it
Account and content data — for the duration of the project agreement and 90 days after termination, so exports can be provided. Contact messages — up to 24 months. Analytics — up to 24 months, aggregated afterwards. Invoicing and fiscal records — 10 years, as required by Romanian Law no. 82/1991 on accounting.
6. Who we share it with
We use a small number of processors — hosting, content delivery and e-mail providers — bound by data processing agreements under Art. 28 GDPR. Where a provider is located outside the EEA, transfers rely on adequacy decisions or the European Commission’s Standard Contractual Clauses. We never sell personal data.
7. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and the right to object, as well as the right to withdraw consent at any time. Write to hello@accessmemory.co and we will respond within one month. You also have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București — dataprotection.ro — or to address the competent courts.
8. Security
Data is encrypted in transit, stored in EU data centres, protected by role-based access controls and backed up daily. Access to production systems is limited to authorised Access Memory personnel.
9. Changes to this policy
We may update this policy from time to time. Material changes will be announced in the SpaceBlock dashboard or by e-mail at least 15 days before they take effect. Continued use after that date means the updated policy applies.