Privacy Policy

This Privacy Policy explains how Bravescale ("Bravescale", "we", "us", or "our") collects, uses, and protects information about you when you visit our website or engage with our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

Bravescale is a performance marketing agency based in Thessaloniki, Greece (VAT / ΑΦΜ 161225734), with its registered office at Odysseos & Vakchou 1, Thessaloniki, 54629, Greece. We act as the data controller for the personal data we collect about you.

If you have any questions about this policy or our data practices, contact us at hello@bravescale.gr.

2. Data We Collect

We collect the following categories of personal data:

• Information you provide — your name, email, company, phone number, revenue range, and any message content, when you use our contact or booking forms, subscribe to our newsletter, or otherwise get in touch.
• Usage data — pages visited, time on site, referral source, approximate location, and browser and device information, collected through analytics.
• Marketing data — your interactions with our campaigns and your cookie and consent preferences.

We do not intentionally collect special categories of data (such as health or ethnicity) and ask that you do not submit them through our forms.

3. How We Use Your Data

We use the data we collect to:

1. Respond to enquiries and provide our services — when you contact us or book a call, we use your information to follow up and deliver what you requested.
2. Send marketing communications — where you have opted in, we send relevant content. You can unsubscribe at any time.
3. Improve our website — we use analytics to understand how visitors use our site.
4. Comply with legal obligations — including tax, accounting, and regulatory requirements.
5. Manage client relationships — to onboard, communicate with, and deliver services to clients.

4. Legal Basis for Processing

Under the EU General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") and Greek Law 4624/2019, we rely on the following legal bases:

• Consent — for marketing communications and non-essential (analytics and marketing) cookies. You may withdraw consent at any time.
• Performance of a contract — where processing is necessary to provide our services or to take steps at your request before entering into a contract.
• Legitimate interests — to secure and improve our website and services, where these interests are not overridden by your rights.
• Legal obligation — where we are required by law to process your data.

5. Cookies

Our website uses cookies — small text files stored on your device — to help the site function and to understand how it is used. We use:

• Strictly necessary — essential for the website to function. These do not require consent.
• Analytics — help us understand site usage (Google Analytics 4). Set only with your consent.
• Marketing — used by advertising platforms (Meta Pixel, Google Ads tag) to measure and improve campaigns. Set only with your consent.

When you first visit, our cookie banner lets you accept or reject non-essential cookies. You can change your choice at any time via the "Cookie settings" link in the footer or through your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6. Data Sharing

We do not sell your personal data. We share it only where necessary with:

• Service providers (processors) acting on our behalf under data processing agreements — including Netlify (website hosting and form submissions), HubSpot (CRM), and Google (Google Analytics 4).
• Advertising platforms — Meta and Google Ads — to measure and manage campaigns, where you have consented to marketing cookies.
• Professional advisors — such as accountants and lawyers, under duties of confidentiality.
• Public authorities — where required by law or to establish, exercise, or defend legal claims.

7. Data Retention

We keep personal data only for as long as necessary for the purposes set out above, or as required by law. Typical periods are:

• Enquiry and contact-form data — 2 years from last contact.
• Client data — 5 years from the end of the relationship, for legal and tax purposes.
• Newsletter subscriber data — until you unsubscribe.
• Analytics data — as configured in Google Analytics 4 (up to 14 months).

8. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data in certain circumstances.
• Restrict or object to our processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at hello@bravescale.gr. We will respond within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) at www.dpa.gr.

9. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction — including encrypted transmission (HTTPS), access controls, and regular reviews. No transmission over the internet is completely secure; if you believe your data has been compromised, contact us immediately at hello@bravescale.gr.

10. International Data Transfers

Some of our providers process data outside the European Economic Area (EEA). Where we transfer personal data internationally, we rely on appropriate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses (SCCs).

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the updated policy.