Legal
Privacy policy
Last updated:
This page explains what we collect about you, why, who else sees it, and how to make us correct or delete it. We wrote it in plain words. If anything is unclear, write to us.
On this page
Who we are
Brandz (brandz.tech) is a software agency operated from Algeria by [LEGAL_NAME]. We decide how the personal data described here is used, so in GDPR terms we are its controller.
For anything about your data, write to [PRIVACY_EMAIL].
What we collect, and where it comes from
We collect only what we need to answer you and to run this site. It comes from you, from Meta when you answer one of our ads, and from your browser.
- Our website form. Your name, your business, your WhatsApp number or email, and what you need. With it we save the page you sent it from, the tag of the link or ad that brought you (such as
srcorutm_sourcein the address), the page you came from, your language, your approximate country (worked out by our host from your IP address) and your browser type. We do not save your IP address with the form. - Our Facebook and Instagram lead forms. When you submit one of our instant forms, Meta passes us what you entered: your name, your WhatsApp or phone number, your type of business, what you need and when you want to start.
- Messages you send us. What you write to us on WhatsApp, Telegram, Instagram or by email, with the name and the number or address you use there.
- The assistant. Our assistant at
/assistantis a chat for training academies in Algeria. Everything you type or pick there is sent to an AI provider, which writes the replies. We save your answers (type of academy, number of students and teachers, what you need, the plan you are interested in, and your WhatsApp number if you give it), with your IP address, your browser type and the page you came from. We do not save the full chat. - Analytics, only if you accept cookies. The pages you view, the buttons you press (for example opening the form or a WhatsApp link), how far you scroll, your device and browser type, and your approximate location. Google Analytics collects this with cookies. If you reject, none of it is collected.
- Marketing, only if you accept marketing cookies. The Meta Pixel tells Meta when you open a page, send our form, or press a WhatsApp, email or booking link. See Facebook and Instagram ads. If you reject, none of it is sent.
- Booking a call. If you book through our Google Calendar page, Google passes us your name, your email, the time you picked and anything you write in the booking.
- Project data. If you become a client, the details we need to run your project and to invoice you.
- Technical data. To deliver the site and keep it safe, our host processes your IP address and keeps short technical logs. When you use our form or the assistant, Cloudflare checks that you are a person and not a bot, using your IP address and technical signals from your browser. It sets no cookies. To stop floods of requests, our server holds your IP address in memory for up to 24 hours.
- Videos. The videos on our home page load from YouTube only when you press play. YouTube then receives your IP address and technical data from your browser.
Why we use it, and the legal basis
The GDPR asks us to name a legal basis for every use of your data (Article 6). Here they are.
| What we do | Legal basis |
|---|---|
| Reply to your request, prepare a proposal, and run the assistant when you use it | Steps you asked for before a contract, Article 6(1)(b) |
| Run your project once you are a client | Our contract with you, Article 6(1)(b) |
| Analytics and marketing cookies (Google Analytics, the Meta Pixel), and any marketing message | Your consent, Article 6(1)(a). You can withdraw it at any time. |
| Keep the site secure and working: technical logs, the anti-spam check, flood limits | Our legitimate interest, Article 6(1)(f) |
| Know which ad, video or page brought a request | Our legitimate interest in knowing which of our ads work, Article 6(1)(f) |
| Keep invoices and accounting records once you are a client | Our legal obligations, Article 6(1)(c) |
Where we rely on legitimate interest, you can object at any time (see your rights).
Who else sees it
We use a few providers to run the site and to talk with you. Each one sees only what its job needs.
- Meta Platforms Ireland runs Facebook and Instagram, including our lead forms, and receives the Meta Pixel events from this site if you accept marketing cookies. WhatsApp Ireland runs WhatsApp.
- Google (Google Ireland, with Google LLC in the United States) runs three services we use: Analytics (only if you accept), the Calendar page where you can book a call, and YouTube for our videos.
- Vercel (United States) hosts the site and runs our form on its servers.
- Supabase hosts our database, where form requests and assistant answers are stored.
- EmailJS delivers each form request to our inbox as an email.
- Hostinger hosts our email inbox.
- Cloudflare runs the anti-spam check on our form and assistant.
- DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China) writes the assistant's replies from what you type there.
- Telegram, if you choose to message us there.
We never sell your data. We never show one client's data to another.
International transfers
We work from Algeria, which has no EU adequacy decision. We transfer your details there because it is necessary to answer the request you made (GDPR Article 49(1)(b)).
Our providers outside the EU rely on Standard Contractual Clauses or the EU US Data Privacy Framework, where that applies.
The assistant is the exception. What you type there goes to DeepSeek in China. China has no EU adequacy decision, and we have no Standard Contractual Clauses with DeepSeek. The assistant is built for academies in Algeria. If you are in the EU, please reach us through the form, WhatsApp or email instead.
How long we keep it
- Requests that do not become a project (website form, lead forms, messages and assistant answers): deleted 12 months after our last contact.
- Clients: for the length of the contract, then as long as accounting law requires.
- Analytics: Google Analytics keeps it for [GA_RETENTION], then deletes it.
- Meta Pixel events: we do not store them ourselves. Meta keeps them under its own rules, explained in Meta's privacy policy.
- Cookies: as listed in our cookie policy.
- Technical logs: our host deletes them automatically within a few days.
- IP addresses held to stop floods: up to 24 hours, in memory only.
Your rights
You have the right to:
- see the data we hold about you (access)
- have it corrected
- have it deleted
- limit what we do with it (restriction)
- object to how we use it where we rely on legitimate interest
- get it in a format you can reuse (portability)
- withdraw your consent at any time, without affecting what we did before.
How: write to [PRIVACY_EMAIL] or message us on WhatsApp. We answer within 30 days. We may ask you to confirm it is you, for example by writing from the number or address you used with us.
You can also complain to your data protection authority: in Portugal the CNPD, in Poland the UODO, in Estonia the Andmekaitse Inspektsioon, in Malta the IDPC, in Cyprus the Commissioner for Personal Data Protection, or the authority of your own EU country.
In Algeria, personal data is protected by Law 18-07 of 10 June 2018, overseen by the ANPDP, the national authority for the protection of personal data.
Facebook and Instagram ads
We advertise on Facebook and Instagram. When you submit one of our lead forms, Meta sends us your answers, and we use them to reply to your request.
On its own platforms, Meta handles your data under its own rules, explained in Meta's privacy policy.
To stop seeing our ads, or to see fewer ads like them, change your Meta ad preferences.
The Meta Pixel. This site uses the Meta Pixel, a script from Meta that tells us which of our Facebook and Instagram ads bring requests. It runs only if you accept marketing cookies. Until you do, nothing is loaded from Meta, nothing is stored in your browser and nothing is sent to Meta.
With your consent, your browser sends Meta these events, and no others:
- PageView, when you open a page.
- Lead, when our form is sent successfully. It carries the name of the form and the tag of the link or ad that brought you (
src). - Contact, when you press a WhatsApp or email link.
- Schedule, when you press the link to book a call in our calendar.
Each event also carries what any request from your browser carries: the address of the page, your IP address, your browser type, and the Meta cookies listed in our cookie policy. If you are logged in to Facebook or Instagram in the same browser, Meta may link the events to your account. We never send Meta your name, your phone number, your email or your answers to the form.
For collecting these events and sending them to Meta, we and Meta Platforms Ireland are joint controllers, under the Meta Controller Addendum. What Meta does with them after that is its own responsibility.
To withdraw your consent, press Cookie settings at the bottom of any page and turn Marketing off, or press Reject all. The pixel stops sending at once, and we delete its cookies from this site.
If you share your number, we message you there about your request. WhatsApp is run by Meta under its own terms. Your chat stays in our WhatsApp account. Ask us to stop at any time and we will.
Children
Our services are for businesses, not for anyone under 16. We do not knowingly collect data about children.
No automated decisions
Nothing about you is decided by software alone. The assistant asks questions and records your answers. A founder reads every request and decides what to offer.
Security
The whole site runs over HTTPS. Access to your data is limited to the two founders, and our database accepts connections only from our own server and from them.
Changes
We update this page when our tools or our use of your data change, and the date at the top moves with it. If a change affects you, we will make it clear on this page.