Last updated: November 8, 2026
This Privacy Policy explains what personal data BrandSprint Europe SRL collects when you visit brandsprint.com, buy a BrandSprint product, join the waitlist or subscribe to our newsletter, why we collect it and what you can do about it.
1. Who we are
The controller of your personal data is BrandSprint Europe SRL, Gheorghe Lazar 35, 310117 Arad, Romania, fiscal code (CUI) 44618985 (“BrandSprint”, “we”, “us”). For any question about your data, write to office@brandsprint.com.
2. What data we collect
- Purchase data. Your first and last name, email address, billing country, the product you bought, the price, currency, discount code and order number.
- Payment data. Stripe processes all payments. We never see or store your full card number. We receive the payment status and limited card details, such as the card brand and the last four digits.
- Waitlist and newsletter data. Your email address and, if you give them, your name and your answers in the sign-up form.
- Communication data. What you write to us by email or in the BrandSprint community, and our replies.
- Technical and usage data. Your IP address, the approximate country derived from it, browser and device type, the pages you visit and how you reached the site. We collect analytics and advertising data only after you consent in the cookie banner. Our Cookie Policy describes this in detail.
3. Why we use your data and on what legal basis
- To process your order, deliver the files, give you access to the community and answer support questions. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- To issue invoices and keep accounting records. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
- To keep the website and checkout secure and to prevent fraud and spam. Legal basis: our legitimate interest in protecting the business and our customers (Art. 6(1)(f) GDPR).
- To send the newsletter and waitlist updates. Legal basis: your consent (Art. 6(1)(a) GDPR). Every email has an unsubscribe link.
- To tell customers about the product they bought, such as updates, new tools and community news. Legal basis: our legitimate interest in supporting the product you use (Art. 6(1)(f) GDPR). You can opt out at any time.
- To measure how the site is used and how our ads perform, through Google Analytics, Google Ads and the Meta Pixel. Legal basis: your consent in the cookie banner (Art. 6(1)(a) GDPR).
- To measure purchases that come from our Google ads. When you buy, we send Google a hashed (encrypted one-way) version of your email address together with the order, so Google can match the purchase to an ad you clicked. Google does not receive your email in readable form. This happens only if you accepted marketing cookies. Legal basis: your consent (Art. 6(1)(a) GDPR).
- To match visits and purchases with our Meta ads. When the Meta Pixel loads, it can send Meta a hashed (encrypted one-way) version of contact details you type into forms on the site, such as your email address. Meta does not receive them in readable form. This happens only if you accepted marketing cookies. Legal basis: your consent (Art. 6(1)(a) GDPR).
We do not make decisions about you based solely on automated processing.
4. Who receives your data
We share personal data only with companies that help us run BrandSprint, and only the data each of them needs:
- Stripe processes payments and screens them for fraud.
- Twilio SendGrid delivers order confirmations and download emails.
- MailerLite sends the newsletter and waitlist emails.
- Skool hosts the BrandSprint community you join after purchase.
- Google provides Analytics, Ads measurement (including enhanced conversions with hashed email) and reCAPTCHA spam protection.
- Meta Platforms provides the Meta Pixel, including matching with hashed contact details. It loads only with your consent.
- Our hosting provider stores the website and its database.
- Our accountant receives invoice data to keep the books.
We also disclose data when the law requires it, for example to the tax authorities. We do not sell your personal data.
5. Transfers outside the European Economic Area
Some of these providers, including Stripe, Google, Meta, Twilio SendGrid and Skool, may process data in the United States or in other countries outside the EEA. These transfers rely on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework for certified companies, or on the Commission’s Standard Contractual Clauses.
6. How long we keep your data
- Order and invoice data: for as long as Romanian accounting and tax law requires.
- Customer and support data: while you use the product, and afterwards only as long as we need it to handle questions, refunds or legal claims.
- Newsletter and waitlist data: until you unsubscribe or ask us to delete it.
- Analytics and advertising data: for the periods set out in the Cookie Policy.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- correct data that is wrong or incomplete;
- ask us to delete your data;
- restrict how we use your data;
- receive your data in a portable format;
- object to processing based on our legitimate interest, including direct marketing;
- withdraw your consent at any time, without affecting what we did before you withdrew it.
To use any of these rights, write to office@brandsprint.com. We answer within one month. If you think we handle your data unlawfully, you can complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority in the EU country where you live.
8. Cookies
We use cookies and similar technologies. You choose which ones load through the cookie banner, and you can change your choice at any time. Details are in our Cookie Policy.
9. Children
BrandSprint products are made for professionals. We do not knowingly collect data from anyone under 16.
10. Changes to this policy
When we change how we handle personal data, we update this page and the date at the top. If a change is significant, we also tell customers by email.
11. Contact
BrandSprint Europe SRL
Gheorghe Lazar 35, 310117 Arad, Romania
Fiscal code (CUI): 44618985
Email: office@brandsprint.com