Privacy Policy

Effective Date:

17.4.2025

Company Name:

Brand-LM LTD

Business Address:

Dame Gruev 45, 2813, Bulgaria

Email Contact:

[email protected]

This Privacy Policy applies to all users of our website and services, whether you are located in the

European Union (EU), European Economic Area (EEA), the United States (U.S.), or anywhere else in the world.

1. Introduction

At Brand-LM LTD, we prioritize your privacy and are committed to handling your personal data with transparency, security, and respect. This Privacy Policy explains how we collect, use, disclose, and protect your information, in accordance with applicable privacy laws including:

General Data Protection Regulation (GDPR) — for users in the EU/EEACalifornia Consumer Privacy Act (CCPA) and other U.S. privacy laws (such as Virginia CDPA, Colorado CPA, etc.)Federal Trade Commission (FTC) Guidelines

By accessing or using our website or services, you consent to the terms in this Privacy Policy.

2. What Information We Collect

We may collect the following categories of information:

2.1 Personal Information (EU/EEA & U.S.)

Full name, email, phone numberBilling/shipping addressPayment method details (processed via secure third parties)Account credentials, if you registerAny content you submit to us voluntarily

2.2 Automatically Collected Information

IP address and geolocation (approximate)Browser type and operating systemPages visited, time on site, device typeCookies, tracking pixels, and analytics data

We do not collect sensitive data

(e.g. health, biometric, political views) unless explicitly required with your consent.

3. How We Use Your Information

We use your information for the following purposes:

To provide services and deliver digital productsTo process payments and send purchase confirmationsTo communicate with you (e.g. customer support, updates)To send marketing or promotional materials (with consent)To analyze traffic and user behavior for service improvementsTo comply with legal and tax obligationsTo protect our platform from fraud, abuse, or security threats

4. Legal Bases (for EU Residents)

If you are located in the EU or EEA, our processing of your data is based on one or more of the following legal bases under Article 6 of the GDPR:

Your consentPerformance of a contractLegal obligationLegitimate interest (e.g., analytics, fraud prevention)

You can withdraw your consent at any time by contacting us.

5. Your Rights – EU/EEA Residents (GDPR)

You have the right to:

Access the personal data we hold about youCorrect inaccurate or incomplete dataRequest deletion of your dataRestrict or object to certain types of processingReceive your data in a portable formatWithdraw consent at any time

To exercise these rights, email:

[email protected]

6. Your Rights – U.S. Residents (CCPA and Similar Laws)

If you are a resident of California or other states with privacy laws, you have the right to:

Know what personal information we collect and how we use itRequest access to your data (Right to Know)Request deletion of your personal informationOpt-out of the sale or sharing of personal data (Note: we do not sell data)Not be discriminated against for exercising your privacy rights

To make a request, email:

[email protected]

with the subject: "CCPA Privacy Request".

7. Data Sharing and Third Parties

We

do not sell or rent

your data. We only share data with:

Secure payment processors (e.g. Stripe, PayPal)Hosting and analytics providers (e.g. Google Analytics)Email marketing tools (e.g. Mailchimp, if used)Legal/government authorities when legally required

All service providers are contractually obligated to protect your data and comply with GDPR and/or U.S. privacy law.

8. International Transfers

As Brand-LM LTD operates from the EU but serves global clients, some of your data may be processed outside your country, including in the U.S. and other non-EU jurisdictions.

In such cases, we use legal safeguards such as:

Standard Contractual Clauses (SCCs) approved by the European CommissionData processing agreements with third partiesPrivacy Shield-certified partners (where applicable)

9. Data Retention

We keep your data only as long as necessary for the purposes outlined in this Privacy Policy or as required by law (e.g. for tax or accounting purposes).

When no longer needed, your data is securely deleted or anonymized.

10. Data Security

We apply best-in-class security measures to protect your information, including:

SSL encryptionAccess controlsFirewall and antivirus protectionsEncrypted backup storage

However, no system is entirely immune. In case of a data breach, we will notify you in accordance with GDPR or U.S. state law requirements.

11. Cookies and Tracking

Our website uses cookies to:

Ensure proper website functionalityAnalyze traffic patternsPersonalize your experienceRemember your preferences

You can control or disable cookies in your browser settings.

We may also use third-party analytics tools like Google Analytics, which may collect data via cookies. You may opt-out using

Google's opt-out tools

.

12. Children’s Privacy

We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has submitted information to us, please contact us and we will delete it immediately.

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. When we make changes, we will update the “Effective Date” above. Your continued use of our services signifies acceptance of these updates.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us:

Brand-LM LTD

📍 Dame Gruev 45, 2813, Bulgaria

[email protected]📧