Privacy policy
In short
- I only collect what I need to reply to you and do the work.
- I never sell your data or use it for advertising.
- Google Analytics only runs if you click “Allow”.
- You can ask to see, correct or delete your data at any time: [email protected].
Who I am
SocialDany is run by Yordan, a self-employed creative professional based in Europe (“I”, “me”). I decide how your personal data is used, which makes me the data controller under the EU General Data Protection Regulation (GDPR).
For anything about your data, email [email protected].
What I collect
- When you use the contact form or email me: your name, email address, the service you're interested in and your message.
- When we work together: contact and billing details, project briefs, the files you send me and our messages.
- When you visit the website: the hosting provider records technical data such as your IP address, browser and the pages requested, to keep the site running and secure. If you allow analytics, Google Analytics also records how you use the site: pages viewed, approximate location and device type.
- When you play a video: videos are embedded from YouTube (in privacy-enhanced mode) and Instagram. When you play one, those services receive data such as your IP address and may set their own cookies.
- When I film or photograph: people who appear in footage I shoot for clients. See “People in my videos” below.
I don't ask for sensitive data (such as health information) through this website, and the site isn't meant for children under 16.
Why I use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your enquiry and preparing a quote | Steps before a contract, at your request (Art. 6(1)(b)) |
| Doing the work, delivering files and invoicing | Performing our contract (Art. 6(1)(b)) |
| Keeping invoices and accounting records | Legal obligation (Art. 6(1)(c)) |
| Keeping the website secure and working | Legitimate interest (Art. 6(1)(f)) |
| Seeing which pages are useful (Google Analytics) | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Showing finished work in my portfolio | Legitimate interest (Art. 6(1)(f)). If you're clearly recognisable in the work, I ask for your consent first. You can object, or withdraw consent, at any time. |
I don't use your data for automated decisions or profiling.
People in my videos
When I film for a client, people may appear in the footage. The client is responsible for getting permission from people who are the focus of a shot, such as staff or interviewees, unless we agree that I arrange it.
If you appear in something I've published and want it removed or blurred, email me and I'll deal with it quickly.
Who helps me
I use a few trusted services to run the website and my work. Each only gets the data it needs:
- Cloudflare: website hosting and security.
- Web3Forms: sends contact form messages to my inbox. It doesn't store them.
- Google: Analytics (only with your consent) and YouTube video embeds.
- Meta: Instagram video embeds.
- My email and file-sharing providers: to receive messages and deliver files.
- An accountant: for invoices and tax records.
Some of these companies are based in the United States. Those transfers are covered by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. I never sell your data or share it for advertising.
How long I keep it
- Enquiries that don't become a project: up to 12 months, then deleted.
- Project files and messages: for the project and 12 months after delivery, then deleted unless we agree otherwise.
- Invoices and accounting records: as long as tax and accounting law requires, usually up to 10 years.
- Analytics data: 14 months.
- Website technical logs: kept by the hosting provider for a short time, for security.
Your rights
Under the GDPR you can:
- see the data I hold about you and get a copy;
- have it corrected or deleted;
- limit how I use it, or take it with you to another service;
- object to uses based on legitimate interest, including portfolio use;
- withdraw your consent at any time. This doesn't affect anything that happened before.
Email [email protected] and I'll reply within one month. If you're not happy with how I handle your data, you can complain to the Commission for Personal Data Protection in Bulgaria (cpdp.bg) or to the data protection authority where you live or work.
Changes
If I change this policy, I'll update the date at the top. Important changes will also be shown on the website.