Privacy Policy

Data Controller

Magnet Minds Marketing Agency is operated by MAGNET MINDS Ltd., a marketing agency based in Bulgaria. When you interact with our website or engage our services, we act as the data controller responsible for your personal information.

Personal Data We Collect

We collect only the data necessary to provide our services and communicate with you. The categories of personal data we may collect include:

Information you provide directly:

• Full name and contact details (email address, phone number)
• Company name and business information
• Project descriptions and marketing budget details
• Messages and enquiries submitted via contact forms
• Meeting booking information submitted through Calendly

Information collected automatically:

• Browser type, operating system, and device information
• IP address and approximate geographic location
• Pages visited, time spent on site, and referral sources
• Interaction data collected via Google Analytics and Meta Pixel

Purposes of Processing

We use your personal data for the following purposes:

• Providing services - to deliver the marketing services you have engaged us to perform, including campaign management, web design, SEO, and email marketing.
• Communication and support - to respond to your enquiries, schedule meetings, send project updates, and provide client support.
• Marketing communications - to send you relevant information about our services, case studies, and offers - only where you have given consent or where we have a legitimate interest to do so.
• Website improvement - to analyse how visitors use our website so we can improve content, navigation, and conversion performance.
• Fraud prevention and security - to detect and prevent fraudulent activity, spam, or abuse of our services.
• Legal compliance - to comply with applicable laws, regulations, and legal obligations.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal grounds:

• Contract performance (Art. 6(1)(b)) - processing necessary to fulfil or negotiate a contract with you (e.g. delivering agreed marketing services).
• Legitimate interests (Art. 6(1)(f)) - processing necessary for our legitimate business interests, such as website analytics, fraud prevention, and sending relevant marketing to existing or prospective clients - provided these interests are not overridden by your rights.
• Consent (Art. 6(1)(a)) - where you have given us clear, specific consent, such as opting in to marketing emails or accepting non-essential cookies.
• Legal obligation (Art. 6(1)(c)) - where we are required by law to retain or share certain information.

Who We Share Your Data With

We do not sell your personal data. We do not rent, trade, or share your data with third parties for their own marketing purposes.

We may share your data only in the following limited circumstances:

• Trusted service providers - third-party tools and platforms we use to operate our business (listed in Section 6). These providers are bound by data processing agreements and may only process your data on our instructions.
• Legal requirements - when required by applicable law, court order, or regulatory authority, we may disclose personal data to the relevant authorities.
• Business transfers - in the event of a merger, acquisition, or sale of business assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

Third-Party Tools We Use

Our website and operations rely on the following third-party services. Each operates under its own privacy policy and may process data independently:

Some of these services may transfer data outside the European Economic Area (EEA). Where this occurs, transfers are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us improve your browsing experience and understand how our site is used.

Types of cookies we use:

• Essential cookies - strictly necessary for the website to function. These cannot be disabled.
• Analytics cookies - set by Google Analytics to collect aggregate data about website usage. Activated only with your consent.
• Marketing cookies - set by Meta Pixel to track ad campaign performance and build advertising audiences. Activated only with your consent.

When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can update your preferences at any time by clearing your browser cookies and revisiting the site.

You can also control cookies directly through your browser settings. Note that disabling certain cookies may affect website functionality.

How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes set out in this policy. Our standard retention periods are:

• Enquiries and prospective clients - data from contact forms and meeting bookings is retained for up to 90 days if no engagement follows.
• Active clients - data is retained throughout the engagement and for up to 2 years after the engagement ends, to facilitate re-engagement and handle any disputes.
• Legal and financial records - retained for as long as required by Bulgarian and EU law (typically 5-10 years for accounting and tax purposes).
• Analytics data - anonymised usage data collected via Google Analytics is retained per Google's data retention settings (typically 14 months by default).

When data is no longer needed, we securely delete or anonymise it.

Your GDPR Rights

As a data subject under the GDPR, you have the following rights regarding your personal data. You may exercise any of these rights by contacting us at [email protected]. We will respond within 30 days.

How We Protect Your Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encrypted data transmission via HTTPS across our website
• Access controls limiting who within our team can view personal data
• Use of trusted, security-maintained third-party platforms for data storage
• Regular review of our data handling practices and security posture

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. In the unlikely event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority as required by law.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.

Data Requests and Enquiries

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us: