Privacy Notice

Introduction

At BoldCrest, privacy is part of good design.

This Privacy Notice explains how BoldCrest SH.P.K. (“BoldCrest”, “we”, “our”, or “us”) collects, uses, stores, shares, and protects personal information when you visit our website, contact us, request our services, apply for a position, subscribe to our communications, or otherwise interact with us.

We are committed to processing personal information fairly, transparently, and securely in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR, Albanian Law No. 124/2024 “On Personal Data Protection”, and other applicable privacy laws.

Data Controller

Email: info@boldcrest.com

Information We Collect

Information You Provide Directly

We may collect information that you voluntarily provide, including:

• Name
• Company name
• Email address
• Telephone number
• Job title
• Project details and requirements
• Budget information
• Portfolio submissions
• CVs and employment applications
• Communications and correspondence
• Any information included in forms, messages, attachments, or uploaded documents

Information Collected Automatically

When you use our website, we may automatically collect certain information, including:

• IP address
• Browser type and version
• Device information
• Operating system
• Language preferences
• Referring URLs
• Pages viewed
• Date and time of visits
• Website usage and interaction data
• Cookie identifiers and similar technologies

Information From Third Parties

We may receive information from:

• Marketing and advertising platforms
• Analytics providers
• Social media platforms
• Recruitment platforms
• Referral partners
• Publicly available sources

How We Use Personal Information

We use personal information to:

• Respond to enquiries and requests
• Prepare proposals, quotations, and project scopes
• Deliver creative, branding, design, development, marketing, and consulting services
• Manage client relationships
• Process transactions and invoices
• Recruit and evaluate candidates
• Improve our website, services, and user experience
• Monitor website performance and security
• Detect, prevent, and investigate fraud or misuse
• Communicate important updates
• Comply with legal and regulatory obligations
• Establish, exercise, or defend legal claims

Legal Bases for Processing

Where GDPR or similar laws apply, we process personal information based on one or more of the following legal grounds:

Contractual Necessity

Where processing is necessary to perform a contract or take steps before entering into a contract.

Legitimate Interests

Where processing is necessary for our legitimate business interests, including:

• Operating and improving our services
• Managing client relationships
• Business development
• Security and fraud prevention
• Internal administration

Consent

Where required by law, we process information based on your consent.

You may withdraw consent at any time.

Legal Obligations

Where processing is necessary to comply with applicable legal obligations.

Recruitment and Careers

If you apply for a role through our website, careers platform, email, or other channels, we may process:

• CVs and resumes
• Cover letters
• Portfolios
• Employment history
• Educational background
• Interview notes
• References
• Professional profile information

We use this information solely for recruitment and hiring purposes.

Unless otherwise required by law or agreed with you, unsuccessful applications will be retained only for a reasonable period and then securely deleted.

Cookies and Similar Technologies

Our website may use cookies, analytics tools, pixels, and similar technologies to:

• Ensure website functionality
• Improve user experience
• Measure website performance
• Understand visitor behavior
• Support marketing and advertising activities

Specifically, where you provide consent, we use Google Analytics 4 (Google) to measure website usage and the Meta Pixel (Meta Platforms) to measure advertising performance and support retargeting. These tools set cookies and may transfer limited data to Google and Meta, including to servers in the United States, under the safeguards described in “International Data Transfers” below. We also use Vercel Web Analytics, which does not use cookies. No analytics or marketing technologies load until you accept them in our cookie banner.

Additional information is available in our Cookie Policy.

Marketing Communications

Where permitted by law, we may send information about our services, projects, events, insights, or company updates.

You may unsubscribe or opt out at any time by following the instructions included in the communication or by contacting us.

Sharing Personal Information

We do not sell personal information.

We may share information with trusted third parties where necessary to operate our business, including:

• Hosting providers
• Cloud infrastructure providers
• Email and communication providers
• Analytics providers
• Customer relationship management systems
• Project management platforms
• Recruitment platforms
• Professional advisers, accountants, auditors, and legal counsel
• Government authorities where required by law

All service providers are expected to maintain appropriate confidentiality and security measures.

International Data Transfers

Because we work with clients, partners, and service providers internationally, personal information may be transferred to and processed in countries outside your jurisdiction.

Where required by law, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions
• Contractual and organizational protections
• Other lawful transfer mechanisms

Data Security

We implement reasonable technical, organizational, and administrative measures designed to protect personal information against:

• Unauthorized access
• Accidental loss
• Misuse
• Disclosure
• Alteration
• Destruction

However, no method of transmission or storage can be guaranteed to be completely secure.

Data Retention

We retain personal information only for as long as necessary to:

• Deliver services
• Manage contracts and client relationships
• Fulfill legal, accounting, and regulatory obligations
• Resolve disputes
• Protect our legitimate business interests

Retention periods vary depending on the nature of the information and applicable legal requirements.

Your Rights

Depending on your location and applicable law, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of information
• Restrict processing
• Object to processing
• Withdraw consent
• Request portability of your information
• Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us using the details below.

Children's Privacy

Our website and services are not directed to children under the age required by applicable law.

We do not knowingly collect personal information from children without appropriate authorization.

Third-Party Websites

Our website may contain links to third-party websites, platforms, or services.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to review their privacy notices before providing personal information.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect legal, technical, or business developments.

Any updates will be published on this page with a revised effective date.

Contact Us

If you have questions, requests, or concerns regarding this Privacy Notice or our handling of personal information, please contact:

Email: info@boldcrest.com

We will make reasonable efforts to respond to privacy-related requests in accordance with applicable law.