Privacy Policy

Bardowl Group ("Bardowl Group," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at bardowl.co, use our tools, or engage with our services (collectively, the "Services"). By accessing or using our Services, you consent to the practices described in this policy.

This policy should be read in conjunction with our Terms & Conditions.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide when you:

• Create an account or register for our Services
• Submit intake forms, project requests, or material quotes
• Submit testimonials or feedback
• Contact us via email, forms, or other communication channels
• Request access to Pro or premium tool features

This information may include your name, email address, company name, job title, phone number, project details, and any other information you choose to provide.

1.2 Information Collected Automatically

When you access our Services, we may automatically collect:

• Device & Browser Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language preferences
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, and navigation paths
• Tool Interaction Data: Which tools you access, frequency of use, and anonymized input parameters (we do not store raw calculation inputs unless you explicitly save or submit them)
• Log Data: Server logs including access times, error logs, and request metadata

1.3 Information from Third Parties

We may receive information from analytics providers, authentication services, and business partners that help us operate and improve our Services.

2. Cookies & Tracking Technologies

2.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help us recognize your browser, remember preferences, and understand how you interact with our Services.

2.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our Services, including authentication, session management, and security. These cannot be disabled.
• Functional Cookies: Enable enhanced functionality such as language preferences, saved tool settings, and personalized experiences.
• Analytics Cookies: Help us understand how visitors interact with our Services using tools such as Google Analytics. These collect aggregated, anonymized data about page visits, session duration, and user flows.
• Performance Cookies: Monitor site performance, load times, and error rates to help us maintain service quality.

2.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling certain cookies may impair the functionality of our Services. For analytics opt-out, you may use the Google Analytics Opt-out Browser Add-on.

2.4 Do Not Track

We currently do not respond to "Do Not Track" browser signals. However, you may opt out of analytics tracking as described above.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain our Services, including processing project requests and delivering tool outputs
• Account Management: To manage your account, authenticate access, and enforce access tiers
• Communication: To respond to inquiries, send service-related notifications, and provide project updates
• Improvement: To analyze usage patterns, diagnose technical issues, and improve our tools and Services
• Security: To detect, prevent, and address fraud, abuse, and unauthorized access
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Marketing: With your consent, to send promotional communications about new tools, services, or features. You may opt out at any time.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we process your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform our contract with you (e.g., delivering requested services, managing your account)
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Services, preventing fraud, and ensuring security, provided these interests do not override your rights
• Consent: Where you have given explicit consent (e.g., marketing communications, optional analytics). You may withdraw consent at any time.
• Legal Obligation: Processing necessary to comply with applicable law

5. Data Sharing & Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in operating our Services (e.g., hosting, analytics, email delivery), bound by contractual obligations to protect your data
• Legal Requirements: When required by law, court order, or governmental authority, or to protect our rights, property, or safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case your data may be transferred to the successor entity
• With Your Consent: Where you have explicitly authorized sharing

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary based on data type:

• Account Data: Retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations
• Project & Form Data: Retained for the duration of the engagement plus seven (7) years for professional liability purposes
• Analytics Data: Aggregated and anonymized data may be retained indefinitely
• Communication Records: Retained for up to three (3) years from the date of last contact

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data, subject to legal retention requirements
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format
• Right to Object: Object to processing based on legitimate interests, including direct marketing
• Right to Withdraw Consent: Where processing is based on consent, withdraw at any time without affecting prior processing
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@bardowl.co. We will respond within thirty (30) days of receipt.

8. International Data Transfers

Your data may be transferred to, stored in, and processed in countries outside your country of residence, including countries that may not provide the same level of data protection. Where we transfer data from the EEA, UK, or Switzerland, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure your data is protected in accordance with this policy and applicable law.

9. Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and role-based permissions
• Regular security assessments and monitoring
• Secure authentication mechanisms

While we strive to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

10. Children's Privacy

Our Services are not directed to individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will promptly delete it. If you believe a child has provided us with personal data, please contact us at privacy@bardowl.co.

11. Third-Party Links & Services

Our Services may contain links to third-party websites, tools, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the "Effective date" and "Last updated" dates at the top of this page. We encourage you to review this policy periodically. Your continued use of our Services after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@bardowl.co
• Website: bardowl.co

For GDPR-related inquiries, you may also contact your local data protection authority.