Privacy Policy
Last updated: 2 June 2025
1. Controller
The data controller for this website is:
ФОП Кузьмак Софія (Sole Trader, Ukraine)
Address: Solonka village, Lystopádovoho chynu St. 17, Lviv district, Lviv region, Ukraine
Trading as: Brandify™
Email: brandifycooperation@gmail.com
2. What data we collect and why
2.1 Contact and order forms
When you submit a contact request or place an order we collect: your name, email address, phone number, country code, message and language preference. For orders we also collect product and quantity details and, if provided, a design file.
Legal basis: Art. 6(1)(b) GDPR — processing necessary to take steps at your request prior to entering into a contract.
Retention: contact requests are stored for 3 years; orders and related files for 5 years.
2.2 Analytics cookies (only with your consent)
If you accept analytics cookies we use Google Analytics 4 to collect anonymised data about how visitors use the website (pages viewed, session duration, device type). IP addresses are anonymised. No personally identifiable information is linked to analytics data.
Legal basis: Art. 6(1)(a) GDPR — your consent.
2.3 Behavioural tracking (only with your consent)
If you accept behavioural cookies we use Microsoft Clarity to generate heatmaps and session recordings. All form input fields are masked and are never recorded.
Legal basis: Art. 6(1)(a) GDPR — your consent.
3. Data transfers outside the EU
Website and database are hosted on Hetzner servers in Nuremberg, Germany (EU). Your data may additionally be transferred to the following recipients outside the European Economic Area:
| Recipient | Country | Purpose | Safeguard |
|---|---|---|---|
| Telegram Messenger Inc. | UAE | Internal order notifications to the operator | Legitimate interest — only the operator receives the data |
| Google LLC | USA | Analytics (with consent only) | Standard Contractual Clauses (SCCs) |
| Microsoft Corporation | USA | Behavioural analytics (with consent only) | Standard Contractual Clauses (SCCs) |
4. Your rights
Under GDPR you have the right to:
- Access — request a copy of your personal data (Art. 15)
- Rectification — correct inaccurate data (Art. 16)
- Erasure — request deletion of your data (Art. 17)
- Restriction — request we limit processing (Art. 18)
- Objection — object to processing based on legitimate interest (Art. 21)
- Portability — receive your data in a machine-readable format (Art. 20)
- Withdraw consent — at any time for consent-based processing via Cookie Settings in the footer
To exercise any right contact: brandifycooperation@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with your local supervisory authority. For users in Germany: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).
5. Cookies
| Cookie | Provider | Purpose | Retention | Type |
|---|---|---|---|---|
| brandify_cookie_consent | This site | Stores your cookie preferences | 1 year | Necessary |
| _ga, _ga_* | Analytics | 13 months | Analytics | |
| _clck, _clsk | Microsoft | Clarity session tracking | 1 year / session | Behavioural |
You can change your cookie preferences at any time via the Cookie Settings link in the footer.
6. Changes to this policy
We may update this policy. Material changes will be communicated via a notice on the website. The date at the top of this page reflects the latest revision.