Privacy Policy

When you contact us, submit a form or interact with our website, we may collect:

• Your name
• Email address
• Phone number, Telegram username or other chosen contact details
• Business name, website or social-media profile, where provided
• Project details, requested services, approximate budget and message content
• Technical information such as IP address, browser, device, pages visited and referral source
• Cookie, analytics and advertising data, where you have consented to non-essential cookies

We collect only the information needed to respond to your enquiry, provide our services, improve the website or measure marketing performance.

The booking form currently asks for an optional name, a required email address, whether you are starting the project from scratch, one or more requested services, a preferred contact method and the details needed to use it, plus an optional approximate budget and project message.

The required form details are necessary for BOLD Agency to understand and answer the enquiry. If you do not provide them, the online form cannot be submitted, but you may use another contact channel published on the Contacts page.

If the page address contains standard UTM campaign parameters, the website may keep them temporarily while the open website remains active and include them with an enquiry. The website does not store those parameters in cookies, local storage or session storage.

We may use your data to:

• Respond to enquiries and discuss potential projects
• Prepare proposals, agreements and invoices
• Deliver requested services and communicate during a project
• Improve our website, services, content and customer experience
• Measure website performance, advertising activity and conversions
• Protect our website from misuse, fraud or security incidents
• Meet legal, accounting and tax obligations

Before an enquiry is delivered, the submitted values are used to validate the form, prevent automated abuse and return an appropriate submission status. An accepted enquiry is then used to understand the request, respond through the chosen contact channel and prepare a possible scope or proposal.

Campaign parameters included with an enquiry are used to understand which campaign led to the request and measure marketing performance without activating a separate analytics or advertising script.

We do not add enquiry details to a mailing list or use them for unrelated marketing without consent or another valid legal basis.

We process personal data only when there is a valid legal basis to do so, including:

• Taking steps at your request before entering into a contract, including reviewing enquiries and preparing proposals
• Performing a contract with you, including delivering services and communicating during a project
• Our legitimate interests in operating, protecting and improving BOLD Agency, including website security, abuse prevention and service improvement
• Your consent, where required for optional analytics, advertising technologies or marketing communications
• Compliance with legal obligations, including applicable accounting and tax requirements

You may withdraw consent at any time. This does not affect processing that took place before consent was withdrawn.

Our website may use essential cookies required for functionality and security.

BOLD Agency does not currently enable Google Analytics 4, Google Tag Manager, Google Ads conversion tracking, Meta Pixel or other optional analytics or advertising trackers on this website.

Portfolio pages may include YouTube videos. The website initially shows a preview without loading the YouTube player. If you choose to play a video, your browser connects to YouTube using its privacy-enhanced youtube-nocookie.com player. Google and YouTube may then receive technical information such as your IP address, browser details, referring page and interactions with the player, and may use cookies or similar storage in accordance with their own policies.

Where enabled and accepted through cookie preferences, BOLD Agency may use tools such as Google Analytics 4, Google Tag Manager, Google Ads conversion tracking and Meta Pixel. These tools help us understand website activity, measure campaign performance and improve our services.

For more information, please see our Cookie Policy.

We may share personal data only where necessary with trusted providers supporting our business, including:

• Website hosting and technical infrastructure providers
• Email, contact-form and communication providers
• Analytics and advertising platforms
• Embedded-video and media providers when you choose to load their content
• Payment, accounting and professional advisory providers
• Public authorities, where legally required

The website currently uses Vercel for hosting and server-side form processing, Cloudflare Turnstile for abuse prevention, Neon for short-lived rate-limit records, Resend for form delivery, Google Gmail for receiving and storing correspondence, and YouTube for videos that visitors choose to play.

A validated enquiry is sent through Resend to BOLD Agency's receiving inbox. The website application does not save the enquiry as a separate database record or place its contents in browser storage.

We do not sell personal data.

Some service providers may process personal data outside the European Economic Area. Where this happens, we take appropriate steps to ensure that the transfer is protected in accordance with applicable data-protection law.

Depending on the provider and the transfer, safeguards may include an adequacy decision, participation in the EU-U.S. Data Privacy Framework, European Commission Standard Contractual Clauses or another lawful transfer mechanism. Information published by the relevant providers is linked below.

We retain personal data only for as long as necessary:

• Project enquiries may be retained for up to 24 months after our last meaningful communication.
• Client, contract and invoice records may be retained for the period required by applicable law.
• Analytics and cookie data are retained according to the settings of the relevant platform and your cookie preferences.

Project enquiries may be deleted sooner when the enquiry is closed, you decide not to proceed or you request deletion, unless the information must be retained for a legal obligation or for the establishment, exercise or defence of legal claims.

The application does not store form submissions in its database, local storage or session storage. Successfully delivered correspondence remains with the delivery and email providers for only as long as needed under this policy and their applicable operational or legal requirements.

For abuse prevention, Neon stores keyed hashes derived from the requesting IP address and the normalized email-and-IP combination, together with counters and expiry times. It does not store the original IP address, original email address or enquiry text in the rate-limit table, and expired records are removed during routine cleanup.

Deletion from the active inbox may not remove residual copies from a provider's backups immediately. Any residual copies remain subject to the provider's backup cycle, security controls and legal-retention requirements.

You may have the right to:

• Request access to your data
• Request correction or deletion of data
• Request restriction of processing
• Object to certain processing
• Withdraw consent
• Request data portability, where applicable
• Lodge a complaint with the relevant data-protection authority

To exercise these rights, contact us at bold.smm.agency@gmail.com.

You may also lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or another competent supervisory authority.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no online transmission or storage method can be guaranteed to be completely secure.

The booking form uses Cloudflare Turnstile to distinguish legitimate visitors from automated abuse. A short-lived verification token and, where available, the requesting IP address are sent to Cloudflare for validation; the form entries themselves are not included in that verification request.

Server-side rate limits use keyed hashes rather than storing the original email address or IP address in the security table. Please do not submit passwords, payment-card information, identification documents, health information or other unnecessary sensitive data through the form.

Our website may link to third-party platforms or websites and may offer embedded YouTube videos. We are not responsible for third parties' privacy practices and encourage you to review their policies before following a link, playing embedded media or submitting personal data.

We may update this Privacy Policy when our services, website tools or legal obligations change. The latest version will always be available on this page.

Data controller: Keita Zviedre, operating BOLD Agency bold.smm.agency@gmail.com

For privacy-related questions or requests, including requests to access, correct or delete personal data, contact the email address above.