Privacy Policy

craftberry.co is run by КРАФТБЕРИ ООД (Craftberry OOD), a company registered in Bulgaria under company number (ЕИК) 205930461 (VAT number BG205930461), with its registered address at ul. Shipka 18, floor 2, office 203, 9000 Varna, Bulgaria ("craftberry", "we", "us"), the controller of the personal data described here. For anything about your data, email hello@craftberry.co.

1.0What we collect

1.1When you contact us

The contact form asks for your name, email address and message, and optionally your website, currency, annual revenue and project budget. Along with it we send the first page you landed on, the site that referred you, any campaign parameters in that first link (UTM tags and ad click IDs such as gclid, fbclid or msclkid) and the page you sent the form from. We use this to answer your enquiry and to understand which channels bring us new clients.

The form arrives as an email in our team inbox. We don't keep a separate database of submissions.

1.2When you browse

Our hosting provider records technical data for every request: IP address, browser and device type, the page requested and the time. We also use your IP address briefly, in memory, to limit how many times the contact form can be sent from one address. Both are needed to run and protect the site.

With your consent, analytics and marketing tools also collect data about how you use the site. The next section lists them.

2.0Cookies and similar technologies

On your first visit you choose which categories to allow. Nothing beyond the necessary category runs until you agree, and you can change your choice at any time through Cookie settings in the footer.

2.1Necessary (always on)

• cb_consent (craftberry, 180 days): remembers your cookie choices.
• craftberry:first-touch-attribution (craftberry, stored in your browser until you clear it): the landing page, referrer and campaign parameters described above. It stays on your device and is only sent to us if you submit the contact form.

2.2Analytics (with consent)

• Google Analytics 4 (Google Ireland Ltd): _ga and _ga_* cookies, up to 2 years. Pages visited, time on site, approximate location and device, and whether a contact form was sent.
• Hotjar (Hotjar Ltd, Malta): _hjSessionUser_* and _hjSession_* cookies, up to 1 year. Clicks, scrolling and anonymised session recordings. Form inputs are masked.
• Microsoft Clarity (Microsoft Ireland Operations Ltd): _clck and _clsk cookies, up to 1 year. Heatmaps and anonymised session recordings.

Before you choose, Google Analytics may receive cookieless signals (for example that a page was viewed) that carry no identifier and set no cookie. This is Google Consent Mode.

2.3Marketing (with consent)

• Meta Pixel (Meta Platforms Ireland Ltd): _fbp cookie, 90 days. Measures our ads on Facebook and Instagram and helps show them to relevant people.
• Google Ads conversion linker (Google Ireland Ltd): _gcl_au cookie, 90 days. Measures our Google ads.
• RB2B (USA) and Leadsy.ai (USA): identify the companies, and in some cases the individual business contacts, visiting our site. They match your visit against business data these providers hold — typically company name, and for contacts a name, job title, work email and LinkedIn profile. That information comes from the provider, not from you. We use it to follow up with businesses that show interest in our services, and we keep it for up to 24 months from your visit. To object or ask us to delete it, email hello@craftberry.co.

The banner also offers a preferences category. We don't set any preference cookies today — it's there in case we add features that remember your settings. Tags load through Google Tag Manager, which doesn't set cookies of its own.

2.4Embedded content

Some pages show our Clutch rating in a widget loaded from clutch.co, and some images and videos load from Sanity, the content platform the site runs on. These providers receive your IP address when your browser fetches their content.

3.0Why we use your data (legal bases)

• Answering your enquiry and preparing a proposal: steps you ask us to take before entering a contract (GDPR Art. 6(1)(b)).
• Running, securing and improving the site, fighting spam and knowing which channels bring enquiries: our legitimate interests (Art. 6(1)(f)).
• Analytics and marketing tools: your consent (Art. 6(1)(a)), which you can withdraw at any time without affecting what happened before.
• Keeping records once we work together: legal obligations under Bulgarian accounting and tax law (Art. 6(1)(c)).

4.0Who we share it with

We don't sell your personal data. We share it only with providers that help us run the business, under agreements that restrict how they use it:

• Vercel Inc. (USA): website hosting.
• Sanity (Sanity AS, Norway, and Sanity Inc., USA): content platform and media delivery.
• Google (Google Workspace email, Google Tag Manager, Google Analytics, Google Ads).
• The analytics and marketing providers listed above, only with your consent.
• Our professional advisers and public authorities, when the law requires it.

Some of these providers process data outside the European Economic Area, mainly in the USA. Those transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

5.0How long we keep it

• Enquiries: up to 24 months after our last contact if we don't start working together.
• Client correspondence and records: for as long as we work together, then as long as Bulgarian law requires (up to 10 years for accounting records).
• Analytics data: according to each tool's retention setting, at most 14 months in Google Analytics.
• Visitor identification data: up to 24 months from your visit, or until you ask us to delete it.
• Cookies: for the periods listed above, or until you delete them.

6.0Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you or another company in a portable format. Where we rely on consent, you can withdraw it at any time through Cookie settings or by emailing us.

Email hello@craftberry.co and we'll reply within one month. If you're not happy with our answer, you can complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the data protection authority where you live.

7.0Children

The site is for businesses and isn't aimed at children under 16. We don't knowingly collect their data.

8.0Changes to this policy

We'll update this page when our tools or practices change and adjust the date at the top. If a change affects the choices you made about cookies, we'll ask you again.