Effective Date: October 2025
Website: https://brandexpand.consulting
1. Introduction
This Privacy Policy explains how BrandExpand Consulting (“we”, “our”, “us”) collects, uses, and protects your personal data when you visit or interact with our website https://brandexpand.consulting (the “Website”).
We are committed to respecting your privacy and ensuring that your personal data is handled in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
By using this Website, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
The data controller responsible for your personal data is:
Registered in: Romania, European Union
Email: contact@brandexpand.consulting
Website: https://brandexpand.consulting
3. What Data We Collect
We collect only the minimum amount of personal data necessary for legitimate business purposes, including:
(a) Data provided directly by you
When you contact us via forms, email, or scheduling links, we may collect:
Full name
Email address
Company name
Phone number (optional)
Any information you voluntarily include in your message
(b) Automatically collected data
When you browse our website, we may collect limited technical data such as:
IP address
Browser type and version
Device type and operating system
Referring/exit pages
Time spent on pages and general usage patterns
This data is collected anonymously and used primarily for analytical and security purposes.
(c) Cookies and analytics tools
We use cookies and similar technologies to analyze website performance, improve user experience, and understand how visitors engage with our content.
For more information, please review our separate Cookie Policy.
4. Purpose and Legal Basis of Processing
We process your personal data lawfully, fairly, and transparently.
| Purpose of Processing | Legal Basis under GDPR |
|---|---|
| Responding to contact inquiries | Art. 6(1)(b) – Performance of a contract or pre-contractual measures |
| Sending business proposals or service details | Art. 6(1)(f) – Legitimate interest |
| Website analytics and improvement | Art. 6(1)(a) – Consent |
| Ensuring security and preventing misuse | Art. 6(1)(f) – Legitimate interest |
| Compliance with legal obligations | Art. 6(1)(c) – Legal obligation |
We do not use your data for automated decision-making or profiling.
5. How We Use Your Data
Your personal data is used exclusively for:
Responding to inquiries and providing requested information
Managing client relationships and service communications
Analyzing website performance and visitor behavior
Maintaining website security and technical functionality
Meeting legal or regulatory obligations
We do not sell, rent, or otherwise disclose your personal data to third parties for marketing purposes.
6. Data Sharing and Transfers
We may share your personal data only when necessary and under strict confidentiality obligations, as follows:
Service providers (e.g., hosting, analytics, email delivery) who process data on our behalf and in compliance with GDPR;
Legal authorities where disclosure is required by applicable law or court order.
If we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards, such as:
Adequacy decisions by the European Commission; or
Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected or as required by law.
Contact form data: up to 12 months after resolution of inquiry;
Client data: as required by the duration of contract + 5 years for recordkeeping;
Technical and analytics data: up to 14 months (as set by Google Analytics).
After the retention period, data will be securely deleted or anonymized.
8. Your Rights under GDPR
As a data subject, you have the following rights:
Right of Access – to know whether and what personal data we hold about you.
Right to Rectification – to request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”) – to request deletion of your data under certain conditions.
Right to Restriction of Processing – to limit processing in specific circumstances.
Right to Data Portability – to receive your data in a structured, machine-readable format.
Right to Object – to object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent – if processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at:
📧 contact@brandexpand.consulting
We will respond to all legitimate requests within 30 days in accordance with GDPR.
9. Security of Data
We implement appropriate technical and organizational measures to safeguard your personal data from unauthorized access, alteration, disclosure, or destruction.
These include:
SSL/TLS encryption for all communications
Limited access to personal data on a need-to-know basis
Regular backups and security audits
However, no online transmission or storage system can be guaranteed 100% secure, and you acknowledge that you use the Website at your own risk.
10. Cookies and Tracking Technologies
Our Website uses cookies and tracking tools (such as Google Analytics, Meta Pixel, or similar) to understand user interaction and improve performance.
Cookies are small files stored on your device that help identify returning visitors and optimize site navigation.
You can manage or disable cookies through your browser settings.
For detailed information, please refer to our Cookie Policy.
11. Links to Third-Party Websites
Our Website may contain links to external websites operated by third parties.
We are not responsible for their privacy practices, content, or compliance.
We recommend reviewing their privacy policies before providing any personal data.
12. Children’s Privacy
Our Website and services are intended for professional users over 18 years of age.
We do not knowingly collect personal data from minors.
If you believe a child has provided us with personal information, please contact us immediately to remove it.
13. Updates to This Policy
We reserve the right to modify or update this Privacy Policy at any time to reflect changes in legal, technical, or business requirements.
The revised version will be posted on this page with an updated “Effective Date.”
We encourage you to review this page periodically to stay informed.
14. Contact Information
For questions, requests, or concerns regarding this Privacy Policy or our data protection practices, please contact:
Email: contact@brandexpand.consulting
Website: https://brandexpand.consulting
Registered in Romania, European Union