Privacy Policy

How we handle your personal data, including forms, Quick Scan and AI services.

Last updated: 19 August 2026

1. Who we are

Branding Guru B.V. (“we”, “us”) is the controller for personal data processed via branding-guru.com and related services, unless stated otherwise below (for example when we act as a processor for a client).

Company
Branding Guru B.V.
Netherlands branch
Pr. Margrietplantsoen 33, 2595 AM Den Haag
Belgium branch
Nieuwstraat 103, 8792 Waregem
KvK
94486700
VAT ID
NL866795133B01
IBAN
NL38REVO4018289022
E-mail
service@branding-guru.com
Phone
+31 70 207 1360

Privacy contact: service@branding-guru.com.

2. Which services and channels are covered?

  • Our website branding-guru.com (NL/EN), including the contact form
  • Price indication / scope tool and PDF quotes
  • Free Quick Scan (website audit with PDF report by email)
  • Email, phone and project communication
  • Hosting and Nexovix CMS for client websites (often as processor)
  • Services: websites, web apps, automations, vibe coding, AI to product, branding, online marketing, strategy and business advisory

3. Which personal data do we process?

  • Contact and quote data: name, email, phone, company name, VAT number (if provided), message content, selected services and pricing parameters
  • Quick Scan: email address, scanned website URL, technical scan results and the generated PDF report
  • Project data: content, login roles, tickets and documentation you share for delivery
  • Technical data: IP address, browser/device info and server logs for security and debugging
  • Cookies: see our cookie policy

4. Purposes and legal bases (GDPR)

  • Performance of a contract / pre-contractual steps (Art. 6(1)(b)): quotes, intake, delivery, hosting, support
  • Legitimate interests (Art. 6(1)(f)): security, fraud prevention, improving our website and services, internal administration — balancing test available on request
  • Legal obligation (Art. 6(1)(c)): tax retention, company registry duties
  • Consent (Art. 6(1)(a)): non-essential cookies/tracking (if used), optional newsletters — withdrawable

5. Quick Scan and price indication

For the Quick Scan we (or a service we engage) crawl the homepage URL you provide to score technical, SEO, UX and conversion signals. The report is emailed to the address you submit. Only submit URLs you are authorised to scan.

For the price indication we process your selections and contact details to generate and email a PDF. This is not a binding agreement until you sign a definitive quote.

6. AI and automated processing

We are an AI-first agency. For vibe coding, AI to product, automations and internal productivity, AI systems (including third-party tools) may generate or assist with code, copy, analysis or concepts. Personal data is shared with AI providers only as needed for the engagement or site feature, under appropriate contractual safeguards. See also our AI policy.

We do not take solely automated decisions with legal effects about website visitors within the meaning of Art. 22 GDPR.

7. Processors and recipients

We may share personal data with:

  • Hosting and infrastructure providers (e.g. Vercel or comparable cloud hosting)
  • Email delivery (Resend or comparable) for contact, quote and scan emails
  • AI and development tools used for client work
  • Accountants, legal advisers or authorities where legally required

For client websites on Nexovix/hosting we typically act as a processor; the client is the controller. See our data processing agreement.

8. Transfers outside the EEA

Some providers may process data outside the European Economic Area. Where that happens, we ensure an adequate level of protection (e.g. EU-US Data Privacy Framework, Standard Contractual Clauses or equivalent safeguards).

9. Retention

  • Contact and lead messages: up to 24 months after last contact, unless an engagement follows
  • Quotes and project administration: during the contract and thereafter per tax retention (typically 7 years)
  • Quick Scan reports and related emails: up to 24 months, unless you request earlier deletion
  • Server logs: as short as needed for security (typically up to 90 days), unless longer is required for incidents

10. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection (where applicable), and to withdraw consent. Submit requests via service@branding-guru.com. You may also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

11. Security

We apply appropriate technical and organisational measures (access control, TLS, least privilege, backups). No system is 100% secure; report suspected incidents as soon as possible.

12. Changes

We may update this policy. The date above is the version. Material changes will be published on this page.