PRIVACY POLICY
Last updated: 13 October 2026
This policy explains what personal data we collect on boldpr.io, why, who we share it with, how long we keep it and what your rights are.
1. Who is responsible for your data
The data controller is MB "Geteksas" (Mažoji bendrija), providing services under the BOLD PR brand ("we", "us"):
- company code: 306172554;
- registered address: Eišiškių pl. 47-312, LT-02184 Vilnius, Republic of Lithuania.
For any questions about your personal data, contact us at prmanager@boldpr.io.
As we are established in the EU, we process personal data in accordance with the EU General Data Protection Regulation (GDPR), regardless of the country you visit the site from.
2. What data we collect
Data you provide via the "Discuss your project" form:
- name;
- company name (optional);
- phone number or Telegram handle and/or email;
- the service you're interested in and your comment.
We also receive data when you contact us via Telegram, email or phone.
Data collected automatically:
- technical data (IP address, browser and device type, pages visited, time of visit) — to operate and protect the site;
- data about your interaction with the site and our ads (opening the form, clicking contacts, submitting a request) — only if you consent to cookies.
We do not collect special categories of personal data and do not ask for them in the form.
3. Why we process data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your request, discussing your project, preparing a proposal | Steps taken at your request before entering into a contract — Art. 6(1)(b) |
| Performing a contract if we start working together | Contract — Art. 6(1)(b); legal obligations — Art. 6(1)(c) |
| Operating the site and protecting it from attacks and spam | Legitimate interests — Art. 6(1)(f) |
| Analytics and measuring the performance of Google ads, including Enhanced Conversions | Your consent — Art. 6(1)(a). You can withdraw it at any time |
4. Who we share data with
We do not sell your data. It is accessible only to our team members who need it to reply to your request, and to service providers that help us operate:
- Telegram — form requests are delivered there so we can reply quickly;
- Cloudflare, Inc. — domain names, site protection and delivery of form requests;
- Netlify, Inc. — website hosting;
- Google Ireland Ltd. / Google LLC — Google Tag Manager, Google Ads and analytics (only with your consent). If you have accepted cookies and submit a request, your email and phone number are shared with Google in hashed (encrypted) form to measure ads more accurately (Enhanced Conversions).
We may also disclose data where required by law.
5. Transfers outside the EU
Some of the providers listed above process data outside the European Economic Area (including in the United States). Such transfers rely on the European Commission's adequacy decision (EU–U.S. Data Privacy Framework) or on the Standard Contractual Clauses approved by the European Commission. Requests are delivered via Telegram because this is necessary to respond to your enquiry (Art. 49(1)(b) GDPR).
6. How long we keep data
- Requests that did not lead to cooperation — up to 1 year from receipt, then deleted;
- client data — for the duration of the contract and afterwards as long as required by law (e.g. accounting);
- cookies — for the periods stated in section 7, or until you delete them.
7. Cookies
Cookies are small files stored in your browser. We use:
- Necessary cookies — to run and secure the site (including Cloudflare technical cookies) and to remember your cookie choice. They do not require consent.
- Analytics and advertising cookies — Google Ads and Google Analytics (via Google Tag Manager), including
_gcl_au,_gcl_aw,_ga. Stored for up to 2 years. Set only after you click "Accept".
Until you consent, no analytics or advertising cookies are set (Google Consent Mode). You can change your choice at any time using the "Cookie settings" button at the bottom of every page, or delete cookies in your browser settings.
8. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw your cookie consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise your rights, email prmanager@boldpr.io. We will reply within one month.
If you believe your rights have been infringed, you may lodge a complaint with the supervisory authority — the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija) — or with the data protection authority in your country of residence.
9. Automated decision-making
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects for you.
10. Changes to this policy
We may update this policy. The current version is always available on this page; the date of the last update is shown at the top.