Privacy Policy

1. Who We Are

POINT LAB ltd. ("we", "us", or "our") is a company that operates https://www.logopoint.co/, an online service that provides brand identity design services.

We are committed to protecting your privacy and managing your personal data responsibly in line with applicable European and Bulgarian data protection laws, including the General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.

2. Data Controller

POINT LAB ltd.
UIC: 208349123
VAT Number: BG208349123
Address: Bulgaria, Blagoevgrad, Postal Code 2704, Elenovo district, No. 59, entrance B, fl. 7, apt. 19
Contact: hi@logopoint.co

3. What Personal Data We Collect

a) Data You Provide

We collect personal data when you:

• Book a consultation through our Cal.com booking calendar: your name and email, and your answers to the booking questions (company or project name, website, what you are looking for, when you would like to start, how you heard about us, and your confirmation that you are ready to invest at least our starting price and are the decision-maker for the project). The booking is added to our Google Calendar, with a Google Meet link for the call.
• Confirm a Proposal, sign the Service Agreement and pay as set out in it (billing details needed for the invoice)
• Answer our questions on the discovery call and share project materials, such as existing brand files and account access
• Contact us via email or our website

b) Consultation and Project Calls

Our calls take place on Google Meet. With your agreement, which we ask for at the start of each call, we use Google Gemini in Meet to take notes: it produces a transcript and a summary of the call, stored in our Google Workspace account. We do not record video or audio. If you prefer no notes to be taken, tell us before or during the call and we will take notes by hand instead.

c) Data Collected Automatically

• IP address, browser, device and operating system, processed by our hosting provider in server logs to deliver and secure the site
• Your cookie choices, stored in your browser
• Anonymous, aggregate visit statistics (pages viewed, referring site, country, device and browser type, and page-load speed), collected by Cloudflare Web Analytics without cookies and without storing any identifier on your device

Only if you allow Analytics in the cookie preferences, we use Google Analytics 4 (provided by Google Ireland Limited and Google LLC) to measure how the website is used: the pages viewed, approximate location (country or city), device and browser type, how you reached the site, and whether a booking was made. This is used in aggregate to improve the website, and Google keeps it for 2 months. We do not use Google advertising features or Google signals, and nothing is measured if your browser sends the Global Privacy Control signal. You can withdraw your consent at any time from “Manage Cookies” in the footer. Google may process this data in the United States; see the Cookie Policy for the cookies involved. You can also block Google Analytics on every website with Google’s browser add-on.

We do not use advertising trackers.

4. How We Use Your Data

We use your data:

• To provide and manage our services
• To process bookings and inquiries
• To prepare proposals and keep an accurate record of what we discussed on our calls
• To manage proposals, agreements, invoicing and payments
• To host interactive brand guidelines for Brand System clients
• To keep the website secure and working
• To comply with legal and tax obligations

5. Legal Bases for Processing

We rely on the following lawful bases under applicable data protection law:

• Consent – for loading the Cal.com booking calendar, for note-taking on our calls and, if you allow it, for analytics
• Contractual necessity – to provide our services
• Legal obligation – for invoicing and financial compliance
• Legitimate interest – for securing the website, measuring its use without cookies and running the business

6. Third-Party Services We Use

We share your data with GDPR-compliant service providers that help us operate our business and website:

Note: The Cal.com booking calendar is loaded only after you consent to third-party embeds.

Where data is transferred outside the EU, we ensure adequate protection via Standard Contractual Clauses (SCCs) or equivalent safeguards.

7. Cookie Policy and Consent

We use our own cookie notice to ask for your choices. Your choices are stored in your browser's local storage, not on our servers, and nothing optional loads before you choose. If your browser sends the Global Privacy Control signal, we treat it as a refusal of any analytics or sharing.

Cookie Categories:

• Essential – Required for the site to function properly and to remember your choices
• Analytics – Used only with consent to measure how the website is used (Google Analytics 4)
• Third-party embeds – Used only with consent to load services such as the Cal.com booking calendar, which may set its own cookies

Non-essential cookies and embeds are not loaded unless you explicitly accept them. You can change your choice at any time with “Manage Cookies” in the footer.

See our Cookie Policy for more details.

8. Data Retention

We retain personal data only as long as necessary:

• Booking and enquiry data: up to 12 months
• Call notes and transcripts: up to 12 months if no project follows; if it does, kept with the project materials below
• Project materials: for the project and its support period, then archived for up to 24 months unless you ask us to delete them
• Invoicing and billing data: up to 10 years (legal and tax obligations)

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion ("right to be forgotten")
• Restrict or object to data processing
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with the Bulgarian Data Protection Authority (CPDP)

Supervisory Authority (Bulgaria):

Commission for Personal Data Protection (CPDP)
Website: https://www.cpdp.bg/en/
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria

10. Data Security

We implement appropriate technical and organizational measures to secure your data:

• SSL encryption (HTTPS)
• Access control and data minimization
• Secure, vetted third-party processors

11. Changes to This Policy

We may revise this Privacy Policy to reflect legal or operational updates. Changes will be posted with a new “Last Updated” date.

12. Contact us

If you have questions about this Privacy Policy or your data, please reach out to us via email hi@logopoint.co.