Privacy

Privacy Policy

This policy explains what personal data Brand Design Ltd. processes through this website, why we use it, how long we keep it, and what rights you have. Last updated: 15 July 2026.

1. DATA CONTROLLER

The controller is Brand Design Ltd., registered address: zh.k. Vazrazhdane 4, bl. 75, Varna 9025, Bulgaria. Contact: contact@branddesign.ltd, +359 877 57 00 76.

2. DATA WE COLLECT

Contact forms may collect your name, company, email address, phone number, project details and message. The free AI audit may collect the website URL you submit, your name, email address, phone number, the generated report, IP address, browser user-agent and submission time. The chat may collect the messages you send, a session identifier and, when voluntarily provided, your contact and project details. Our servers also process technical logs needed for security and reliable operation.

3. PURPOSES AND LEGAL BASES

We process enquiries and requested audits to take steps at your request and to respond to you. We process technical security and abuse-prevention data on the basis of our legitimate interest in protecting the website and service. Analytics and advertising technologies are activated only after your consent, which you may refuse or withdraw. Contract, invoicing and accounting information is processed when required to perform an agreement or comply with legal obligations.

4. AI AUDIT AND CHAT PROVIDERS

The free audit sends the submitted website content and audit context to Anthropic so the report can be generated. The website chat sends the conversation context to OpenAI so a response can be produced. Do not enter confidential, special-category or third-party personal data in either tool. The audit is informational and does not make decisions producing legal or similarly significant effects. These providers may process data outside the European Economic Area under their applicable data-protection and transfer mechanisms.

5. COOKIES, ANALYTICS AND ADVERTISING

Essential storage is used for security, language and consent choices. Google Analytics/Google Tag Manager and Meta Pixel are not loaded until you accept marketing and analytics technologies through the consent banner. If you reject them, no analytics or advertising request is sent by our consent module. You can change the stored choice by clearing site data in your browser and revisiting the site.

6. RECIPIENTS

Data is available only to authorised Brand Design Ltd. personnel and service providers needed to operate the website and respond to requests. These may include our hosting and email providers, Anthropic for AI audits, OpenAI for chat, and—only after consent—Google and Meta for analytics or advertising. We do not sell personal data.

7. RETENTION

AI audit records and chat records are retained for up to 12 months. Contact enquiries are normally retained for up to 24 months after the last communication. Security and abuse-prevention logs are normally retained for up to 90 days. Data connected to an active contract, invoice, dispute or legal obligation may be kept longer for the applicable statutory or limitation period.

8. YOUR RIGHTS

Subject to the conditions in applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. Contact contact@branddesign.ltd. We may request information needed to verify your identity. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection or another competent supervisory authority.

9. SECURITY AND CHANGES

We use access controls, encryption in transit, rate limits and other technical and organisational measures appropriate to the service. No online system can guarantee absolute security. We may update this policy when the website, providers or legal requirements change; the current version and update date will be published on this page.