1. Scope and data controller
This Privacy Policy applies to brand-bar.net and the design, branding, website, presentation, and catalog services offered through it. It applies to visitors, prospective clients, clients, and business contacts outside and inside the Russian Federation.
The data controller is Denis Nikolaevich Zakharov, a self-employed individual registered in the Russian Federation under the professional income tax regime, TIN 261506790711, operating under the business name Brand Bar.
Privacy contact: info@brand-bar.net.
2. Personal data we collect
2.1 Data you provide
Depending on how you interact with us, we may collect:
- your name, email address, phone number, and messenger contact;
- company name, role, website, country, and preferred language;
- project information, requirements, budget range, deadlines, source materials, and files attached to a brief;
- messages, correspondence, feedback, and records of our business relationship;
- contract, billing, and payment-related information required to deliver services and maintain legally required records.
2.2 Data collected automatically
When you use the website, our systems and analytics provider may receive technical and usage data such as:
- IP address and approximate location derived from it;
- browser, device, operating system, screen size, language, and time zone;
- visited pages, page titles, referring URLs, clicks, scrolling, and session duration;
- cookie identifiers, local-storage identifiers, and similar technologies;
- diagnostic, security, and form-submission metadata, including the page from which a request was sent.
2.3 Sensitive data and children
We do not intentionally request special-category or sensitive personal data. Please do not include health, biometric, government-identifier, financial-account, or similarly sensitive information in forms or project files unless it is strictly necessary and agreed with us in advance.
Our website and services are intended for business users and are not directed to children under 16. If you believe a child has provided data to us, please contact us so that we can review and delete it where required.
3. How and why we use personal data
| Purpose | Typical data | Legal basis where GDPR/UK GDPR applies |
|---|---|---|
| Responding to inquiries and preparing proposals | Contact and project information | Steps requested before entering into a contract |
| Delivering projects and client support | Contact, project, contract, and billing data | Performance of a contract |
| Maintaining tax, accounting, and business records | Contract, transaction, and correspondence records | Legal obligation |
| Protecting the website and preventing abuse | Technical, security, and submission metadata | Legitimate interests in security and fraud prevention |
| Understanding and improving website performance | Analytics and usage data | Consent where required; otherwise legitimate interests |
| Establishing or defending legal claims | Relevant business and correspondence records | Legitimate interests and legal obligations |
If we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal. We do not use personal data to make decisions producing legal or similarly significant effects solely by automated means.
6. Data retention and security
We keep personal data only for as long as reasonably necessary:
- inquiry records are generally retained for up to 24 months after the last meaningful contact;
- client, contract, project, and transaction records are retained for the project period and any additional period required by tax, accounting, limitation, or other applicable laws;
- security and technical records may be retained for up to 12 months, unless a longer period is needed to investigate an incident;
- analytics identifiers and records follow the retention settings and policies of the relevant analytics provider.
We use reasonable organisational and technical safeguards designed to protect personal data against unauthorised access, alteration, disclosure, or loss. No online transmission or storage method can be guaranteed to be completely secure.
7. Your privacy rights
7.1 EEA and United Kingdom
Where the GDPR or UK GDPR applies, you may have the right to request access, correction, deletion, restriction, objection, and data portability, and to withdraw consent. You may also lodge a complaint with the data-protection authority in the country where you live, work, or believe an infringement occurred.
You may object at any time to processing based on legitimate interests. You may also object at any time to direct marketing. We will stop direct marketing after receiving your objection.
7.2 California and other jurisdictions
Where applicable law grants these rights, you may request to know, access, correct, delete, or obtain a copy of your personal data, and you may exercise applicable opt-out or restriction rights without discrimination.
During the preceding 12 months, the categories of personal information described in this Policy may have included identifiers, internet or electronic-network activity, professional and project information, and correspondence. These categories come directly from you or are collected automatically and may be disclosed to the service-provider categories listed in Section 5 for business purposes. We have not sold or shared these categories for cross-context behavioural advertising.
7.3 Exercising your rights
Send requests to info@brand-bar.net. Please write “Privacy Request” in the subject line and identify the request you wish to make. We may ask for information needed to verify your identity and protect your data. An authorised agent may submit a request where permitted by law, subject to verification of their authority.
8. Third-party websites
The website may link to third-party websites or services. Their privacy practices are governed by their own policies, and Brand Bar is not responsible for their content or processing activities.
9. Changes to this Policy
We may update this Policy to reflect changes in our services, technology, providers, or legal requirements. The latest version will be published on this page with a revised effective date.
10. Contact us
Questions, requests, and complaints concerning this Policy or our use of personal data may be sent to:
Brand Bar / Denis Nikolaevich ZakharovSelf-employed individual, Russian Federation
TIN 261506790711
Email: info@brand-bar.net
Website: https://brand-bar.net/