Privacy Policy

Data controller

BRCN Group OÜ is the data controller for personal data processed through brcn.studio, unless stated otherwise.

What we collect

Depending on how you interact with this site, we may collect:

• Contact details you provide via forms, email or booking tools — name, email, company name, message content.
• Booking data when you schedule an intro call through our booking tool (name, email, selected time slot).
• Usage data such as pages visited, referring pages, device and browser type, and approximate location, typically collected via analytics tools.
• Route Fit Check responses if you use the self-assessment tool — this data is processed in your browser and is not stored on our servers unless you separately submit it via the contact form.

How we use it

• To respond to inquiries and assess commercial fit
• To schedule and manage intro calls
• To deliver a proposed engagement scope if a fit is confirmed
• To maintain business records required for accounting and legal compliance
• To improve this website’s content and usability

We do not sell personal data to third parties, and we do not use contact form or booking data for unrelated marketing without separate consent.

Legal basis for processing

Processing activity	Legal basis (GDPR)
Responding to contact form and email inquiries	Art. 6(1)(b) — pre-contractual steps / Art. 6(1)(f) — legitimate interest
Booking and conducting intro calls	Art. 6(1)(b) — pre-contractual steps
Delivering a paid engagement	Art. 6(1)(b) — contract performance
Accounting and invoicing records	Art. 6(1)(c) — legal obligation
Website analytics	Art. 6(1)(a) — consent, where required by local law

Sharing your data

Personal data may be shared with:

• Booking tool provider (cal.com) to manage call scheduling
• Email and hosting providers used to operate this website and receive inquiries
• Accounting and legal professionals where required for compliance

We do not transfer personal data outside the EU/EEA except where a service provider offers appropriate safeguards (such as EU Standard Contractual Clauses) or the transfer is to a country with an EU adequacy decision.

Data retention

Contact and inquiry data is retained only as long as necessary to respond to the inquiry or, if an engagement follows, for the duration of the business relationship plus applicable statutory retention periods (typically required for accounting records under Estonian and EU law). Data from inquiries that do not lead to an engagement is deleted or anonymised after a reasonable period, generally within 24 months, unless a longer retention is legally required.

Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, where applicable
• Object to or restrict certain processing
• Request data portability
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact hello@brcn.studio.

Cookies and analytics

This site may use essential cookies required for basic functionality, and — where consented to — analytics cookies to understand how visitors use the site. You can control cookie preferences through your browser settings or, where offered, a cookie consent banner on this site.

Contact regarding this policy

Questions about this Privacy Policy or how your data is handled can be sent to hello@brcn.studio.

Last updated: July 2026