Privacy Policy

Brandson Digital is a brand and product design studio working from Barcelona, Spain and Kyiv, Ukraine.

The studio is run by Mykhailo Hafin, a sole proprietor (FOP) registered in Ukraine (hereinafter "Brandson Digital", "we", "us", or "our"). Mykhailo Hafin is the controller of your personal data.

Contact email: hello@brandson.digital

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website at brandson.digital, use our Brand Checker tool at checker.brandson.digital, contact us, or purchase our digital products (collectively, "the Services").

We process personal data under the following legal bases as defined by the EU General Data Protection Regulation (GDPR):

Contractual necessity and pre-contractual steps. Processing required to respond to your inquiry, prepare a proposal, deliver services you engage us for, or deliver digital products you purchase.

Consent. Processing based on your choice, such as analytics and behavior-measurement cookies (see section 5) or marketing communications. You may withdraw consent at any time.

Legitimate interest. Processing for website operation, security, and fraud prevention, where our interests do not override your rights and freedoms.

Legal obligation. Retention of financial and tax records where required by applicable law.

Information you provide. When you contact us via the contact form or by email, we receive the information you choose to share: typically your name, email address, company, and the content of your message. A form submission also records the page you sent it from, the page you first arrived on and, if present, the campaign tags (UTM) in the link that brought you to the site.

Technical data. When you visit the website, standard technical data is processed: IP address, browser type and version, device type, pages visited, and referring URL. This data is processed through our hosting infrastructure.

Usage and interaction data (with your consent). If you accept analytics cookies, our analytics tools collect information about how you use the website: pages visited, time on page, clicks, scrolling, and mouse movement. See section 5 for details.

Purchase data. If you purchase a digital product, the order and payment are processed by the payment provider or marketplace indicated at checkout. We receive order confirmation data (product, date, your email address) but never your card details.

Brand Checker data. When you use our Brand Checker tool at checker.brandson.digital, we process the website address you submit, your answers to the questions in the tool, and the free-text description of your customers. If you choose to provide it, we also process your work email address, together with your separate consent to receive our newsletter. The email field is optional and the report is produced whether or not you fill it in.

We do not knowingly collect sensitive personal data (such as health information, biometric data, or government identifiers).

We use personal data to respond to inquiries and prepare proposals; to deliver services and digital products; to operate, secure, and improve the website; to understand how visitors use the website (with your consent); to produce and store Brand Checker reports; to maintain financial records as required by law; and to comply with legal obligations.

Brand Checker. Your answers, together with publicly available information read from the website address you submit, are processed automatically to generate your report. We review submitted answers in order to improve the tool. We do not use them to train models. The report is stored so that it can be reopened at its own address.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you. The Brand Checker applies a predefined set of rules to the information described above, and its output is informational only.

We will never sell, rent, or trade your personal data. We will not send you marketing emails without your explicit consent.

We use cookies and similar technologies in two categories.

Strictly necessary cookies. Required for the website to function properly, including a small cookie or browser-storage entry that remembers your cookie-consent choice. These cannot be disabled.

Analytics and behavior-measurement cookies (consent-based). With your consent, given via the cookie banner, we use the following tools:

• Google Analytics 4 (Google LLC): aggregated statistics about website usage. Cookies: _ga, _ga_* (typical lifetime up to 24 months).
• PostHog (PostHog Inc.): product analytics showing how visitors use pages (page views, clicks, scrolling) and, where enabled, session replays. Cookies and browser storage: ph_*_posthog (up to 12 months).

Session replay tools record on-page interactions to help us improve usability. Keyboard input and form fields are masked and are not captured in recordings.

These tools set cookies only after you give consent (Art. 6(1)(a) GDPR and applicable ePrivacy rules). You can withdraw or change your choice at any time via the Cookie Settings link on this website or by clearing cookies in your browser. If you decline, the website remains fully functional.

Cookieless visit statistics (no consent needed). We also use Vercel Web Analytics (Vercel Inc.) to count visits and key actions (for example a click on Book a call or a submitted form): the page viewed, the referring website, country, and device, browser and operating system type. It sets no cookies and stores nothing in your browser. Visitors are not identified: page views are grouped by a hash of the request that is discarded after 24 hours, and IP addresses are not stored. The legal basis is our legitimate interest in knowing which pages are visited (Art. 6(1)(f) GDPR).

We share personal data only with service providers necessary to operate the Services:

Vercel Inc. (United States) provides hosting and infrastructure for this website and for the Brand Checker tool, and cookieless visit statistics (Vercel Web Analytics). Privacy policy: https://vercel.com/legal/privacy-policy

Google LLC provides analytics services (Google Analytics 4), subject to your cookie consent. Privacy policy: https://policies.google.com/privacy

PostHog Inc. provides product analytics (PostHog), subject to your cookie consent. Privacy policy: https://posthog.com/privacy

Neon, LLC, a Databricks company (United States), provides database storage for contact form submissions and Brand Checker reports. Data is stored in the European Union (Frankfurt). Privacy guide: https://neon.com/privacy-guide

Groq, Inc. (United States) provides the language model used to classify the free-text answers submitted within the Brand Checker. Only that text is sent. Your email address is never included. Privacy policy: https://groq.com/privacy-policy

Telegram delivers a short notification to us when a contact form is submitted. The notification contains only your name, your company website and the topic you selected; your email address and message are not included. Privacy policy: https://telegram.org/privacy

Cal.com, Inc. (United States) provides the scheduling tool used to book a call with us. When you book, Cal.com processes the details you enter in the booking form, such as your name, email address and the time you choose. Privacy policy: https://cal.com/privacy

Payment providers. Purchases of digital products, where offered, are processed by the payment provider or marketplace indicated at checkout. Your payment data is collected and processed directly by that provider; we do not receive or store your card details.

We do not share personal data with any other third parties unless required by law, court order, or lawful government request, or to protect the rights, property, or safety of Brandson Digital, our clients, or the public.

Contact form submissions are stored in our database and deleted automatically 24 months after they are received.

Inquiry correspondence is retained for as long as needed to handle the matter and for up to 24 months after our last exchange, unless a business relationship follows.

Brand Checker submissions are retained for 90 days from the date of the check. After that period your email address and the website address you submitted are deleted, and the report link stops working. Anonymized answer sets, which cannot identify you, may be retained to improve the tool. To have your submission removed sooner, write to hello@brandson.digital.

Financial and purchase records are retained as required by tax and accounting law (up to 7 years).

Analytics data is retained according to the settings of the respective tools. Server logs are retained by our hosting provider for a limited period. Aggregated, anonymized statistics that cannot identify you may be retained indefinitely.

Contact form submissions and Brand Checker reports are stored in the European Union (Frankfurt). Our hosting provider Vercel, as well as Google, PostHog, Neon, Groq and Cal.com, are US companies and may process data in the United States; such transfers rely on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission. Telegram notifications are processed by Telegram outside the European Union.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data.
• Restrict processing in certain circumstances.
• Port your data in a structured, machine-readable format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@brandson.digital. We will respond within one month.

You also have the right to lodge a complaint with your local data protection supervisory authority.

We implement appropriate technical and organizational measures to protect personal data, including encrypted connections (TLS) and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our Services are not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us at hello@brandson.digital and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, tools, or legal requirements. Changes will be published on this page with an updated "Last updated" date.

For any questions about this Privacy Policy or to exercise your data protection rights: hello@brandson.digital