Privacy Policy

1. Who processes your data

This policy applies to the website embrand.me, operated by Alexander Eduard Petrov (Embrand Studio), company ID (ЕИК) 180204941, registered seat: 2 Esperanto Street, 6100 Kazanlak, Bulgaria. The studio itself works from 2 Mednikarska Street, 5000 Veliko Tarnovo.

For any question about your personal data, you can reach us at: office@embrand.me

2. What personal data we collect

Personal data reaches us only when you initiate contact with us yourself, namely:

• Through the contact form on the site — when you fill it in, the data you enter (e.g. name, email address and the content of your message) is stored as a row in a database on the site itself (Instatic, on our own infrastructure) and is then forwarded automatically as a notification to a Telegram bot, so that we are alerted. The data is not passed to any other external form provider.
• By email — when you write to us at the email address listed, we receive your name, email address and the content of your message.
• Through the booking system (Cal.com) — when you book a call, Cal.com collects your name, email address and the meeting time you choose. That processing is carried out by Cal.com as an independent controller/processor — see Cal.com’s privacy policy.
• Through Telegram — both for messages sent to us on Telegram (@embrandstudiobot) and for the notifications from the contact form, the data passes through Telegram’s infrastructure under its own terms.

We do not collect payment data and we do not require registration. We do not sell personal data. Data is passed only to the service providers named here (Cal.com, Telegram, Google — for traffic analytics), and only as far as is necessary for them to function.

3. Cookies and traffic analytics

The site uses Google Analytics (through Google Tag Manager) to analyse traffic. These tools place cookies on your device and collect data such as your IP address (truncated/pseudonymised), device and browser type, the pages you visit, and the time you spend on the site.

• These cookies are not strictly necessary and are loaded only after you have given consent through the cookie banner shown on your first visit to the site.
• The data is processed by Google Ireland Limited (and by Google LLC for part of the infrastructure in the United States), under its certification with the EU–U.S. Data Privacy Framework. More information: Google’s privacy policy.
• You can withdraw your consent at any time through the cookie banner or your browser settings.

Separately from Google Analytics, the site uses Umami, an open-source analytics tool that we run ourselves on a server in the EU (stats.embrand.me). Umami places no cookies and stores nothing on your device, so it runs on every visit without consent through the banner.

• It collects the pages you visit, where you came from (a referring site or search engine), your device type, browser and operating system, language, and approximate location (country and city).
• It also records heatmaps — where you click and how far you scroll — so we can see which parts of the site are used. Text you type into forms is not recorded.
• Your IP address is not stored. It is used only at the moment of the visit, to estimate your location and to create an anonymous identifier that changes every month and cannot be used to identify you personally.
• The data is not shared with third parties and is not used for advertising.
• You can object to this processing by writing to the email address above, or stop it with a browser extension that blocks analytics scripts.

Google Search Console is used by us alone, to monitor how the site performs in search results (queries, clicks, indexing). It places no cookies on your device and collects no personal data through the site itself.

Cal.com’s booking widget may load its own technical cookies when the booking window opens — that is under Cal.com’s control, not Embrand Studio’s.

4. Purpose and legal basis for processing

We process the data above solely in order to:

• reply to enquiries and correspond with prospective and current clients;
• arrange and hold meetings and calls;
• measure traffic and how the site is used, so we can improve it.

Legal basis:

• for the contact form, email, Cal.com and Telegram: Article 6(1)(b) and (f) GDPR — taking steps at the request of the data subject prior to entering into a contract, and our legitimate interest in answering the enquiries we receive;
• for Google Analytics and Tag Manager: Article 6(1)(a) GDPR — the explicit consent you give through the cookie banner;
• for Umami (cookieless analytics and heatmaps): Article 6(1)(f) GDPR — our legitimate interest in understanding how the site is used and improving it, with a minimal amount of data and without identifying visitors.

5. Retention period

We keep correspondence for as long as is necessary for the purposes of the communication and any performance of a contract, but no longer than 5 years after the last contact, unless the law requires a longer period.

We keep Umami analytics data (visits and heatmaps) for up to 24 months, after which it is deleted.

6. Your rights

Under the GDPR you have the right to:

• access your own personal data;
• have inaccurate data corrected;
• have your data erased (the “right to be forgotten”);
• restrict processing;
• object to processing;
• data portability;
• lodge a complaint with the Commission for Personal Data Protection (CPDP), cpdp.bg.

To exercise these rights, write to us at the email address given above.

7. Changes to this policy

This policy may be updated from time to time. The current version is always available on this page.