Legal
Privacy Policy
Last updated: May 2026
Who we are
This website is operated by Miss Sunshine Media Ltd, trading as Brandstart, registered in Varna, Bulgaria. We are the data controller for personal data collected through this website.
For any privacy-related questions, contact us at hello@brandstart.io.
Data we collect
We collect personal data in two ways:
Contact form submissions
When you send us a message, we collect your name, agency name, email address, project type, and the content of your message. This data is used solely to respond to your enquiry.
Analytics data
If you accept analytics cookies, we collect anonymised usage data via Google Analytics 4 (GA4). This includes pages visited, session duration, and referral source. No data is linked to an identifiable individual.
Legal basis for processing
Contact form data is processed under Article 6(1)(b) GDPR - processing is necessary to take steps at your request prior to entering into a contract, or in the legitimate interest of responding to a business enquiry.
Analytics data is processed under Article 6(1)(a) GDPR - your explicit consent, given via the cookie banner. You may withdraw consent at any time.
How we use your data
- ▲To respond to your enquiry and communicate about potential projects
- ▲To understand how the site is used and improve it over time
- ▲We do not sell, rent, or share personal data with third parties for marketing purposes
Data retention
Contact enquiries - retained for up to 2 years from the date of submission, or until the business relationship concludes.
Analytics data - retained for 14 months in Google Analytics, in line with GA4 defaults.
Third-party processors
Google Analytics 4 - analytics data is processed by Google LLC, based in the United States. Transfers are covered by EU Standard Contractual Clauses. Google's privacy policy is available at policies.google.com/privacy.
Resend - contact form submissions are delivered via Resend (email infrastructure). Message content is transmitted through their servers and not stored beyond delivery. Resend's privacy policy is available at resend.com/legal/privacy-policy.
Your rights
Under GDPR, you have the right to:
- ▲Access the personal data we hold about you
- ▲Request correction of inaccurate data
- ▲Request erasure of your data where we have no legal basis to retain it
- ▲Restrict how we process your data
- ▲Receive your data in a portable format
- ▲Object to processing based on legitimate interests
- ▲Withdraw consent for analytics at any time (clear cookies and reload the page)
- ▲Lodge a complaint with the Commission for Personal Data Protection (CPDP) - cpdp.bg - the supervisory authority in Bulgaria
To exercise any of these rights, email us at hello@brandstart.io. We will respond within 30 days.
Contact
Questions about this policy: hello@brandstart.io